What is the official website of Salesforce for Government ?

The official website of Salesforce for Government is https://www.salesforce.com.

What is Salesforce for Government's cybersecurity risk score?

Salesforce for Government has an AI-generated cybersecurity risk score of 774 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Salesforce for Government experienced?

According to Rankiteo, Salesforce for Government currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Salesforce for Government been affected by any supply chain cyber incidents ?

According to Rankiteo, Salesforce for Government has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: CARADTSALCUS1778027258) Okta (Incident ID: ADT1777286874) Salesforce (Incident ID: PANADTSAL1777328877) Salesforce (Incident ID: ADT1777062235) Anodot by Glassbox (Incident ID: CARHOLPRI1776630318) Salesforce (Incident ID: KEM1776831908) Salesforce (Incident ID: MCGSAL1776191039) Salesforce (Incident ID: WYN7-E1779114946) Salesforce (Incident ID: WEASAL1778732635) Aqua Security (Incident ID: AQUUSEAMASALCIS1775046662) Mixpanel (Incident ID: ZEN1774628650) Salesforce (Incident ID: INFSAL1774362301) Amazon Web Services (AWS) (Incident ID: SALAMAMICPINRED1774269319) okta (Incident ID: NOROKTSAL1773854168) Salesforce (Incident ID: SAL1773146972) Salesforce Experience Cloud (Incident ID: SALLASAMDSNOSONOKT1773153462) Salesforce (Incident ID: SALHAL1775967850) Salesforce (Incident ID: TIFLVMCHR1770865579) Salesforce (Incident ID: EURODI1770907059) okta (Incident ID: OKTSALGOO1769222214) Agentforce Marketing (Incident ID: SALFOR1778063116) Salesforce (Incident ID: PLADRA1774449041) Drift, a Salesloft company (Incident ID: SAL4794547112625) Salesforce (Incident ID: SAL5592855100325) Salesforce (Incident ID: SAL2862828092525) Cisco (Incident ID: SAL5732257091825) Salesloft (Incident ID: DRI514090325) Salesforce Experience Cloud (Incident ID: ENTSAL1773088371) Salesforce (Incident ID: DRI635082925) Salesforce (Incident ID: SALFAR1767922939) Salesforce (Incident ID: WOR1768679649) moveIT Software (Incident ID: ORA4202442101025) Salesforce (Incident ID: SAL0562205100825) Salesforce (Incident ID: SALODI1772484824) Salesforce (Incident ID: GRU1768529823) Salesforce (Incident ID: GRU1769118538) Salesforce (Incident ID: LOUPARVOLTIFJAP1770908674) Salesforce (Incident ID: THEINGSALJAGORASYNDAV1769095448) Salesforce (Incident ID: QILCYBSALHALPLA1768955694)

Does Salesforce for Government have SOC 2 Type 1 certification ?

According to Rankiteo, Salesforce for Government is not certified under SOC 2 Type 1.

Does Salesforce for Government have SOC 2 Type 2 certification ?

According to Rankiteo, Salesforce for Government does not hold a SOC 2 Type 2 certification.

Does Salesforce for Government comply with GDPR ?

According to Rankiteo, Salesforce for Government is not listed as GDPR compliant.

Does Salesforce for Government have PCI DSS certification ?

According to Rankiteo, Salesforce for Government does not currently maintain PCI DSS compliance.

Does Salesforce for Government comply with HIPAA ?

According to Rankiteo, Salesforce for Government is not compliant with HIPAA regulations.

Does Salesforce for Government have ISO 27001 certification ?

According to Rankiteo,Salesforce for Government is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Salesforce for Government operate in ?

Salesforce for Government operates primarily in the Technology, Information and Internet industry.

How many employees does Salesforce for Government have ?

Salesforce for Government employs approximately None employees people worldwide.

Does Salesforce for Government own any subsidiaries ?

Salesforce for Government presently has no subsidiaries across any sectors.

How many LinkedIn followers does Salesforce for Government have ?

Salesforce for Government's official LinkedIn profile has approximately 30,120 followers.

What is the NAICS classification code for Salesforce for Government ?

Salesforce for Government is classified under the NAICS code 513, which corresponds to Others.

Does Salesforce for Government have a Crunchbase profile ?

No, Salesforce for Government does not have a profile on Crunchbase.

Does Salesforce for Government have a LinkedIn profile ?

Yes, Salesforce for Government maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/salesforce-for-government.

How many cybersecurity incidents has Salesforce for Government experienced ?

As of June 10, 2026, Rankiteo reports that Salesforce for Government has experienced 54 cybersecurity incidents.

How many peer or competitor companies does Salesforce for Government have ?

Salesforce for Government has an estimated 14,729 peer or competitor companies worldwide.

What types of cybersecurity incidents has Salesforce for Government faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

774

/1000

Fair

799

/1000

Fair

Salesforce for Government Vendor Cyber Rating & Cyber Score

salesforce.com

Add Your Compliance Badge

@SalesforceGov is now part of @Salesforce! Follow us on @Salesforce and @Dreamforce to stay up with everything Salesforce for Government!

SG A.I CyberSecurity Scoring

Scoring History

Salesforce for Government CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Salesforce

Cyber Attack

5/2026

Salesforce

CARADTSALCUS177...

Salesforce

Cyber Attack

4/2026

GOOSAL177791964...

Salesforce

Cyber Attack

4/2026

SAL1777395283

Salesforce

Cyber Attack

100

4/2026

Okta

ADT1777286874

Salesforce

Breach

4/2026

Salesforce

PANADTSAL177732...

Salesforce

Breach

4/2026

Salesforce

ADT1777062235

Salesforce

Breach

4/2026

Anodot by Glass...

CARHOLPRI177663...

Salesforce

Breach

4/2026

Salesforce

KEM1776831908

Salesforce

Vulnerability

4/2026

SAL1776299258

Salesforce

Breach

4/2026

Salesforce

MCGSAL177619103...

Salesforce

Vulnerability

4/2026

SAL1776084470

Salesforce

Breach

4/2026

Salesforce

WYN7-E177911494...

Salesforce

Vulnerability

4/2026

Salesforce

WEASAL177873263...

Salesforce

Vulnerability

100

4/2026

Aqua Security

AQUUSEAMASALCIS...

Salesforce

Ransomware

100

3/2026

Mixpanel

ZEN1774628650

Salesforce

Breach

3/2026

Salesforce

INFSAL177436230...

Salesforce

Vulnerability

100

3/2026

Amazon Web Serv...

SALAMAMICPINRED...

Salesforce

Breach

100

3/2026

okta

NOROKTSAL177385...

Salesforce

Breach

3/2026

Salesforce

SAL1773146972

Salesforce Experien...

Breach

3/2026

Salesforce Expe...

SALLASAMDSNOSON...

Salesforce

Breach

3/2026

Salesforce

SALHAL177596785...

Salesforce

Breach

2/2026

TOYOPTSAL177195...

Salesforce

Breach

2/2026

Salesforce

TIFLVMCHR177086...

Salesforce

Breach

2/2026

Salesforce

EURODI177090705...

Salesforce

Cyber Attack

1/2026

okta

OKTSALGOO176922...

Agentforce Marketin...

Vulnerability

1/2026

Agentforce Mark...

SALFOR177806311...

Salesforce

Cyber Attack

100

1/2026

SAL1768394538

Salesforce

Ransomware

100

1/2026

Salesforce

PLADRA177444904...

Salesforce

Breach

100

11/2025

Drift, a Salesl...

SAL479454711262...

Salesforce

Ransomware

100

10/2025

Salesforce

SAL559285510032...

Salesforce

Breach

100

9/2025

Salesforce

SAL286282809252...

Salesforce

Cyber Attack

100

9/2025

Cisco

SAL573225709182...

Salesforce

Cyber Attack

100

9/2025

Salesloft

DRI514090325

Salesforce Experien...

Breach

9/2025

Salesforce Expe...

ENTSAL177308837...

Salesforce

Breach

8/2025

Salesforce

DRI635082925

Salesforce

Vulnerability

100

8/2025

Salesforce

SALFAR176792293...

Salesforce

Breach

8/2025

Salesforce

WOR1768679649

Salesforce

Ransomware

100

7/2025

moveIT Software

ORA420244210102...

Salesforce for Gove...

Cyber Attack

100

6/2025

SAL540255411062...

Salesforce

Cyber Attack

100

5/2025

Salesforce

SAL056220510082...

Salesforce

Vulnerability

5/2025

Salesforce

SALODI177248482...

Salesforce for Gove...

Breach

3/2025

SAL313223110082...

Salesforce

Breach

2/2025

Salesforce

GRU1768529823

Salesforce

Breach

1/2025

Salesforce

GRU1769118538

Salesforce

Breach

1/2025

Salesforce

LOUPARVOLTIFJAP...

Salesforce

Ransomware

100

1/2025

Salesforce

THEINGSALJAGORA...

Salesforce for Gove...

Cyber Attack

100

8/2024

SAL210212110042...

Salesforce

Cyber Attack

100

8/2024

SALARU177197435...

Salesforce for Gove...

Cyber Attack

100

6/2024

SAL096210910082...

Salesforce

Ransomware

100

6/2024

Salesforce

QILCYBSALHALPLA...

Salesforce for Gove...

Cyber Attack

100

5/2024

SAL500215010092...

Salesforce for Gove...

Ransomware

100

10/2023

SAL560205610112...

Salesforce for Gove...

Ransomware

100

6/2023

SAL423224210102...

Salesforce for Gove...

Cyber Attack

05/2019

SAL215719323

Loading…

A.I.

SG Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SG

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Salesforce for Government in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Salesforce for Government in 2026.

Incident Types SG vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Salesforce for Government in 2026.

Incident History - SG (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Salesforce for Government Subsidiaries

SG

Technology, Information and Internet

Website: https://www.salesforce.com

Company Size: 10,001+ employees

TrailheadIT Services and IT Consulting

SalesforceSoftware Development

Salesforce Marketing CloudSoftware Development

Salesforce.orgSoftware Development

Salesforce DevelopersSoftware Development

Loading…

Salesforce for Government Similar Companies

Delivery Hero

deliveryhero.com

As the world’s leading local delivery platform, our mission is to deliver an amazing experience, fast, easy, and to your door. We operate in over 70+ countries worldwide, powered by tech but driven by people. As one of Europe’s largest tech platforms, we enable ambitious talent to deliver solutions that create impact within our ecosystem. We move fast, take action, and adapt. No matter where you’re from or what you believe in, we build, we deliver, we lead. We are Delivery Hero.

Swiggy

swiggy.com

Swiggy is India’s pioneering on-demand convenience platform, catering to millions of consumers each month. Founded in 2014, its mission is to elevate the quality of life for the urban consumer by offering unparalleled convenience. With an extensive footprint in food delivery, Swiggy Food collaborates with nearly 2 lakh restaurants across 600+ cities. Swiggy Instamart, its quick commerce platform operating in 120+ cities, delivers groceries and other essentials across 40+ categories in 10 minutes. Fueled by a commitment to innovation, Swiggy continually incubates and integrates new services like Swiggy Dineout and Swiggy Genie into its multi-service app. Leveraging cutting-edge technology and Swiggy One, the country’s only membership program offering benefits across food, quick commerce, dining out, and pick-up and drop services, Swiggy aims to provide a superior experience to its consumers. For more information, visit www.swiggy.com

Freelancer.com

cb freelancer.com

Thirteen-time Webby award-winning Freelancer is the world’s largest freelancing and crowdsourcing marketplace by total number of users and projects posted. More than 80 million registered users have posted over 25 million projects and contests to date in over 3,000 areas as diverse as website development, logo design, marketing, copywriting, astrophysics, aerospace engineering and manufacturing. Freelancer owns Escrow.com, the world's largest online escrow company. Freelancer also owns Loadshift, Australia's largest heavy haulage freight marketplace, with over 800 million kilometers of freight posted since inception. Freelancer Limited is listed on the Australian Securities Exchange under the ticker ASX:FLN and is quoted in the US as FRLCY.

Mynet

mynet.com

Türk internet kullanıcılarının en çok tercih ettiği dijital platform olan Mynet, 1999 yılından bugüne liderliğini koruyor. Kendi alanında sayısız ilki gerçekleştiren öncü internet devi Mynet, Türkiye'nin dijital ekosisteminin kalkınmasına ve gelişmesine destek olmayı sürdürüyor. Her ay ortalama 42 milyon internet kullanıcısına erişen Mynet'in sosyal ağlardaki toplam kitlesi ise 10 milyonu geride bırakmış bulunuyor. Mynet, ziyaretçilerine her ay 100 milyondan fazla video izletiyor. 1 milyonun üzerinde kullanıcısı olan Türkiye’nin en büyük online video eğitim platformu Vidobu ile Türkçe bilen tüm coğrafyanın ihtiyacı olan eğitimleri, alanında uzman eğitmenler ile veriyor. Böylece yüksek kalitedeki eğitimlerin herkes tarafından, her yerden ve düşük maliyetle erişilebilir olmasını sağlıyor. Ayrıca Vidobu, eğitim sektöründeki Global SAAS projesi olan Corviq ile kurumların kendi özel video öğrenme platformlarını oluşturmasını sağlayan bir altyapı da sunuyor. En büyük oyun stüdyolarından biri olan Mynet Games adı altında yayınladığı oyunlarla 10 milyondan fazla oyuncuyla buluşuyor. Kelime Savaşı oyunu Apple tarafından PubG ve Subway Surfers ile birlikte 2019’un en çok indirilen 3 oyunundan biri olarak açıklandı. ABD pazarına sunduğumuz Homer City, HR Master ve Racing Wheels adlı oyunlarımız dünya sıralamasında zirvede yer almıştır. ABD pazarına hybrid-casual’dan mid-core oyunlara kadar oyun geliştiren CASUAL MONSTER ve RARE FORGE şirketlerimiz ile de oyun sektöründe büyümeye devam ediyoruz.

Sohu.com

cb sohu.com

Sohu.com Inc. (NASDAQ: SOHU) is China's premier online brand and indispensable to the daily life of millions of Chinese, providing a network of web properties and community based/web 2.0 products which offer the vast Sohu user community a broad array of choices regarding information, entertainment and communication. Sohu has built one of the most comprehensive matrices of Chinese language web properties and proprietary search engines, consisting of seven leading web properties.

Nothing

cb nothing.tech

Nothing exists to make tech feel exciting again. We’re building a different kind of company, one that puts design, emotion, and human creativity at the heart of everything we do. From the way our products look to how they sound, feel, and function, we care about the details that make technology not just useful, but inspiring. This is a place for the curious. The creators. The ones who ask why not and mean it. If you're drawn to bold ideas, fast moves, and work that actually makes you feel something, you’ll fit right in. We're not here to follow the rules. We're here to make better ones. Founded in London in 2020, Nothing is a design-led tech company building an alternative to the industry giants. Our products, from award-winning smartphones to expressive audio and wearables, blend iconic design with intuitive engineering to put people and creativity back at the centre of consumer tech. Backed by GV (Google Ventures), EQT Ventures, C Ventures, and influential investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we’ve grown from startup to global challenger in just a few years.

Times Internet

timesinternet.in

At Times Internet, we create premium digital products that simplify and enhance the lives of millions. As India’s largest digital products company, we have a significant presence across a wide range of categories, including News, Sports, Fintech, and Enterprise solutions. Our portfolio features market-leading and iconic brands such as TOI, ET, NBT, Cricbuzz, Times Prime, Times Card, Indiatimes, Whatshot, Abound, Willow TV, Techgig and Times Mobile among many more. Each of these products is crafted to enrich your experiences and bring you closer to your interests and aspirations. As an equal opportunity employer, Times Internet strongly promotes inclusivity and diversity. We are proud to have achieved overall gender pay parity in 2018, verified by an independent audit conducted by Aon Hewitt. We are driven by the excitement of new possibilities and are committed to bringing innovative products, ideas, and technologies to help people make the most of every day. Join us and take us to the next level!

NetEase

cb netease.com

As a leading internet technology company based in China, NetEase, Inc. (NASDAQ: NTES and HKEX:9999, "NetEase") provides premium online services centered around content creation. With extensive offerings across its expanding gaming ecosystem, NetEase develops and operates some of China's most popular and longest running mobile and PC games. Powered by industry-leading inhouse R&D capabilities in China and globally, NetEase creates superior gaming experiences, inspires players and passionately delivers value for its thriving community worldwide. Beyond games, NetEase service offerings include its majority-controlled subsidiaries Youdao (NYSE:DAO), China's leading technology-focused intelligent learning company, and Cloud Music (HKEX:9899), China's leading online music content community, as well as Yanxuan, NetEase's private label consumer lifestyle brand.

eBay

ebayinc.com

At eBay, we create pathways to connect millions of sellers and buyers in more than 190 markets around the world. Our technology empowers our customers, providing everyone the opportunity to grow and thrive — no matter who they are or where they are in the world. And the ripple effect of our work creates waves of change for our customers, our company, our communities and our planet.

Loading…

NEWS

Salesforce for Government CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 09, 2026 08:00 AM

Cyber Job Moves: Who’s Steering Cyber Defense

From national cyber command to enterprise security teams, new cyber job moves show where leadership is reinforcing defenses right now.

Read Article

December 05, 2025 08:00 AM

10 cyber incidents that shook the world in 2025: Cloudflare, Colt, Salesforce

2025 saw plenty of cyberattacks and outages on a global scale, leading to more questions over enterprise security and the world's digital...

Read Article

December 01, 2025 08:00 AM

What to Expect in Markets This Week: Cyber Monday Sales; Labor Market and Inflation Data; Earnings from Salesforce, CrowdStrike, and More

Coming up: Cyber Monday sales, fresh labor market and inflation data, earnings from Salesforce, CrowdStrike, Dollar Tree, Dollar General and...

Read Article

November 23, 2025 08:00 AM

Cybersecurity News Weekly Newsletter – Fortinet, Chrome 0-Day Flaws, Cloudflare Outage and Salesforce...

Welcome to this week's edition of the Cybersecurity News Weekly Newsletter, where we analyze the critical incidents defining the current...

Read Article

November 21, 2025 08:00 AM

CrowdStrike fires ‘suspicious insider’ who passed information to hackers

Cybersecurity giant CrowdStrike denied it had been hacked following claims from a hacker group, which leaked screenshots from inside...

Read Article

November 20, 2025 08:00 AM

Salesforce investigating campaign targeting customer environments connected to Gainsight app

Researchers warn that ShinyHunters has been compromising OAuth tokens to gain potential access to customer data.

Read Article

November 18, 2025 08:00 AM

Salesforce eVerse, GPT-5.1, Cyber Laws Return | Ep. 17

In today's 2-Minute Tech Briefing, Salesforce debuts “eVerse,” a simulation environment designed to sharpen enterprise AI agents and reduce...

Read Article

October 22, 2025 07:00 AM

Hackers Say They Have Personal Data of Thousands of NSA and Other Government Officials

A hacking group that recently doxed hundreds of government officials, including from the Department of Homeland Security (DHS) and...

Read Article

October 21, 2025 07:00 AM

Nevada’s big cyberattack spurs two new projects

Nevada Chief Information Officer Timothy Galluzi asked for and received permission from state lawmakers to spend $300000 on new...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-9754

SUMMARY

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-122207

CVE-2026-9753

SUMMARY

The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

cvss4

Base Score: 7.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-124959

CVE-2026-9752

SUMMARY

An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-123440

CVE-2026-9751

SUMMARY

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

1.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-123370

CVE-2026-9750

SUMMARY

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-123633

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…