What is the official website of Scania Bulgaria ?

The official website of Scania Bulgaria is https://www.scania.com/bg/bg/home.html.

What is Scania Bulgaria's cybersecurity risk score?

Scania Bulgaria has an AI-generated cybersecurity risk score of 746 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Scania Bulgaria experienced?

According to Rankiteo, Scania Bulgaria currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Scania Bulgaria been affected by any supply chain cyber incidents ?

According to Rankiteo, Scania Bulgaria has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Scania Bulgaria have SOC 2 Type 1 certification ?

According to Rankiteo, Scania Bulgaria is not certified under SOC 2 Type 1.

Does Scania Bulgaria have SOC 2 Type 2 certification ?

According to Rankiteo, Scania Bulgaria does not hold a SOC 2 Type 2 certification.

Does Scania Bulgaria comply with GDPR ?

According to Rankiteo, Scania Bulgaria is not listed as GDPR compliant.

Does Scania Bulgaria have PCI DSS certification ?

According to Rankiteo, Scania Bulgaria does not currently maintain PCI DSS compliance.

Does Scania Bulgaria comply with HIPAA ?

According to Rankiteo, Scania Bulgaria is not compliant with HIPAA regulations.

Does Scania Bulgaria have ISO 27001 certification ?

According to Rankiteo,Scania Bulgaria is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Scania Bulgaria operate in ?

Scania Bulgaria operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does Scania Bulgaria have ?

Scania Bulgaria employs approximately 29 people worldwide.

Does Scania Bulgaria own any subsidiaries ?

Scania Bulgaria presently has no subsidiaries across any sectors.

How many LinkedIn followers does Scania Bulgaria have ?

Scania Bulgaria's official LinkedIn profile has approximately 565 followers.

What is the NAICS classification code for Scania Bulgaria ?

Scania Bulgaria is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does Scania Bulgaria have a Crunchbase profile ?

No, Scania Bulgaria does not have a profile on Crunchbase.

Does Scania Bulgaria have a LinkedIn profile ?

Yes, Scania Bulgaria maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/scania-bulgaria.

How many cybersecurity incidents has Scania Bulgaria experienced ?

As of June 14, 2026, Rankiteo reports that Scania Bulgaria has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Scania Bulgaria have ?

Scania Bulgaria has an estimated 12,970 peer or competitor companies worldwide.

What types of cybersecurity incidents has Scania Bulgaria faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Scania Bulgaria

Boost Score +25 with badge (5 left)

746

/1000

Moderate

771

/1000

Fair

Scania Bulgaria Vendor Cyber Rating & Cyber Score

scania.com

Add Your Compliance Badge

Scania is a major distributor of trucks, buses, intercity buses and engines for industrial and marine applications in Bulgaria. The company provides a wide range of additional and after sale services to support your products and customers through their network of 6 service centers. Based in Sweden and with production in Europe and Latin America, Scania is a global organization that markets its products in around 100 countries around the world.

Scania Bulgaria A.I CyberSecurity Scoring

Scoring History

Scania Bulgaria

Scania Bulgaria CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Scania Group

Ransomware

100

11/2025

NISSCATOYVOLKAW...

Scania Bulgaria

Breach

6/2025

SCA301061725

Loading…

A.I.

Scania Bulgaria Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Scania Bulgaria

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Scania Bulgaria in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Scania Bulgaria in 2026.

Incident Types Scania Bulgaria vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Scania Bulgaria in 2026.

Incident History - Scania Bulgaria (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Scania Bulgaria Subsidiaries

Scania Bulgaria

Motor Vehicle Manufacturing

Website: https://www.scania.com/bg/bg/home.html

Company Size: 51-200 employees

Scania GroupMotor Vehicle Manufacturing

Ventures and New Business - Scania GroupAutomation Machinery Manufacturing

Scania Latin AmericaMotor Vehicle Manufacturing

Scania ArgentinaMotor Vehicle Manufacturing

Scania BrasilAutomotive

Scania SverigeMotor Vehicle Manufacturing

Scania South AfricaTransportation/Trucking/Railroad

Scania UKMotor Vehicle Manufacturing

VRS UKAutomotive

Scania NederlandAutomotive

Scania Middle EastMotor Vehicle Manufacturing

Scania SpainMotor Vehicle Manufacturing

Italscania S.p.A.Motor Vehicle Manufacturing

Scania TimeTransportation/Trucking/Railroad

Scania Time TVTruck Transportation

Scania AustraliaMotor Vehicle Manufacturing

Keltruck ScaniaWholesale Motor Vehicles and Parts

Scania East AfricaMotor Vehicle Manufacturing

Codema ScaniaTruck Transportation

Scania West AfricaMotor Vehicle Manufacturing

Scania MarocMotor Vehicle Manufacturing

Scania Schweiz AGMotor Vehicle Manufacturing

Scania ColombiaMotor Vehicle Manufacturing

Scania PortugalMotor Vehicle Manufacturing

Scania Industrial Operations AsiaMotor Vehicle Manufacturing

Scania OskarshamnMotor Vehicle Manufacturing

Scania USAMotor Vehicle Manufacturing

Scania MalaysiaAutomotive

Scania BelgiumMotor Vehicle Manufacturing

Scania DanmarkTruck Transportation

Scania BeneluxTransportation/Trucking/Railroad

SCANIA EAR (Scania East Adriatic Region)Automotive

Scania Tanzania LtdTruck Transportation

Scania Parts LogisticsTransportation, Logistics, Supply Chain and Storage

Scania PolskaAutomotive

Scania Luleå | Ferruform AB |Motor Vehicle Manufacturing

Scania Hong KongMotor Vehicle Manufacturing

Scania ÖsterreichMotor Vehicle Manufacturing

Scania Czech RepublicMotor Vehicle Manufacturing

Scania JapanMotor Vehicle Manufacturing

Scania MilanoMotor Vehicle Manufacturing

Scania Industrial BatteriesIndustrial Machinery Manufacturing

Scania Rhône-AlpesMotor Vehicle Manufacturing

Scania LatviaMotor Vehicle Manufacturing

Scania FranceMotor Vehicle Manufacturing

SCANIA SlovakiaMotor Vehicle Manufacturing

Scania Fuel CardsOil and Gas

Scania Eesti ASMotor Vehicle Manufacturing

Scania MagyarországAutomotive

Scania TanzaniaTruck Transportation

Scania Commerciale S.p.A.International Trade and Development

Scania Financial Services IrelandFinancial Services

Scania Finance New ZealandTruck Transportation

Scania Finance DACHFinancial Services

Scania Trucking LTDTransportation, Logistics, Supply Chain and Storage

Scania LuxembourgMotor Vehicle Manufacturing

Scania ZambiaAutomotive

Scania SingaporeAutomotive

Scania LogisticsTransportation, Logistics, Supply Chain and Storage

Scania DeutschlandMotor Vehicle Manufacturing

Scania ThailandTruck Transportation

Scania ChileMotor Vehicle Manufacturing

Scania UkraineMotor Vehicle Manufacturing

Scania LietuvaAutomotive

Scania New ZealandTruck Transportation

Scania ChinaMotor Vehicle Manufacturing

Loading…

Scania Bulgaria Similar Companies

Harley-Davidson Motor Company

harley-davidson.com

In 1903, out of a small shed in Milwaukee, Wisconsin, four young men lit a cultural wildfire that would grow and spread across geographies and generations. Their innovation and imagination for what was possible on two wheels sparked a transportation revolution and lifestyle that would make Harley-Davidson the most desirable motorcycle brand in the world. • Our Mission: More than building machines, we stand for the timeless pursuit of adventure. Freedom for the soul. • Our Vision: Building our legend and leading our industry through innovation, evolution and emotion. Our Mission and Vision honor our past and help define our future. And what we hope you see in these guiding statements is a consumer-led company that’s driven to win, lead and deliver a Harley-Davidson experience that our riders expect and deserve – one where adventure and “freedom for the soul” are the payoff. To do this, we are redefining our culture to reignite the company’s soul and spirit. We are calling our cultural journey “H-D#1” represented by our recognizable #1 logo, introduced in 1969 to celebrate a National Racing Championship. The #1 logo is uniquely ours - an iconic symbol of winning and the hard work it takes to get there. The Hardwire is Harley-Davidson’s 2021-2025 strategic plan guided by our mission and vision. Our plan is targeting long-term profitable growth through focused efforts that extend and strengthen our brand and drive value for all stakeholders. The Hardwire is designed to enhance the desirability of Harley-Davidson and fuel our unique lifestyle brand. For more information, visit our company site: www.harley-davidson.com or our career site: jobs.harley-davidson.com

General Motors

gm.com

General Motors’ vision is to create a world with Zero Crashes, Zero Emissions and Zero Congestion, and we have committed ourselves to leading the way toward this future. Today, we are in the midst of a transportation revolution, and we have the ambition, the talent and the technology to realize the safer, better and more sustainable world we want. As an open, inclusive company, we’re also creating an environment where everyone feels welcomed and valued for who they are. One team, where all ideas are considered and heard, where everyone can contribute to their fullest potential, with a culture based in respect, integrity, accountability and equality. Our team brings wide-ranging perspectives and experiences to solving the complex transportation challenges of today and tomorrow. For information on the GM Privacy Statement, please visit http://www.gm.com/privacy-statement.html

Volkswagen do Brasil

vw.com.br

A gente sabe que o nome “Volkswagen” com certeza deve fazer parte da sua história. Porque a gente também sabe que não é à toa que estamos na vida, no coração e na garagem dos brasileiros. O segredo? Construímos os carros mais inovadores, tornamos as tecnologias acessíveis e dizemos sempre que estamos em constante desenvolvimento. Nunca paramos. Nunca nos damos por satisfeitos. Estamos construindo uma Nova Volkswagen, uma nova empresa para um novo mundo. Estamos focados em produtos, soluções de mobilidade e novos negócios que definam tendências, sempre discutindo e liderando o futuro da indústria. A ideia é usar as inovações tecnológicas não só a favor dos negócios, mas também das pessoas. Elas são a nossa inspiração para criarmos os carros mais seguros, modernos e eficientes. Sabemos que ao falar em inovação, as pessoas têm sempre que vir em primeiro lugar. Justamente por isso, fomos a única montadora a receber, em 2019, a certificação Top Employer, o mais importante reconhecimento internacional da excelência de uma empresa na gestão de pessoas, além de também sermos eleitos entre as 10 empresas mais desejadas para se trabalhar na pesquisa Valor Carreira – As Melhores na Gestão de Pessoas. Motivo de orgulho para cada um de nós. Fique de olho nas novidades da Volkswagen do Brasil aqui no LinkedIn e também em nossas outras redes sociais. Vai que você não é a pessoa que estamos procurando para fazer parte deste futuro com a gente? ;) Facebook: facebook.com/volkswagendobrasil Instagram: instagram.com/vwbrasil Twitter: twitter.com/vwbrasil YouTube: youtube.com/volkswagendobrasil

Cummins Inc.

cb cummins.com

At Cummins, we empower everyone to grow their careers through meaningful work, building inclusive and equitable teams, coaching, development and opportunities to make a difference. Across our entire organization, you'll find engineers, developers, and technicians who are innovating, designing, testing, and building. You'll also find accountants, marketers, as well as manufacturing, quality and supply chain specialists who are working with technology that's just as innovative and advanced. From your first day at Cummins, we’re focused on understanding your talents, current skills and future goals – and creating a plan to get you there. Your journey begins with planning your development and connecting to diverse experiences designed to spur innovation. From our internships to our senior leadership roles, we attract, hire and reward the best and brightest from around the world and look to them for new ideas and fresh perspectives. Learn more about #LifeAtCummins at cummins.com/careers.

Hero MotoCorp

heromotocorp.com

Hero MotoCorp, the world’s largest two-wheeler company, is shaping the future of mobility for over 125 million riders across 48 countries. Our story began in 1984, founded by the visionary Chairman Emeritus, Dr. Brijmohan Lall Munjal, with a bold vision: to make mobility accessible and aspirational for millions. Under the dynamic leadership of Executive Chairman, Dr. Pawan Munjal, we have grown into a global force in innovation, sustainability, and purpose-driven growth. Driven by our vision to ‘Be the Future of Mobility,’ we are innovating for tomorrow with our emerging mobility brand, VIDA, and groundbreaking innovations like the Surge S32, recognized as one of TIME's Best Inventions of 2024. With world-class R&D hubs in India and Germany, and advanced green manufacturing across three countries, we’re building more than machines. We’re building momentum for the planet. From icons like Splendor and Karizma to our premium collaboration with Harley-Davidson, we deliver performance with purpose. Our commitment to sustainability runs deep - we've achieved zero waste-to-landfill and 455% water positivity, and our DJSI (Dow Jones Sustainability Index) recognition reflects our dedication to doing business the right way. Recognized by TIME as the World’s Best Organizations (2024) and Asia Pacific’s Best Companies (2025), we are an organization driven by values and powered by people. Hero MotoCorp is more than a workplace; it’s a launchpad for your boldest ambitions. Join us. Create. Collaborate. Inspire. Come, be the future of mobility.

Freudenberg Group

freudenberg.com

Freudenberg is a global technology group that strengthens its customers and society long-term through forward-looking innovations. Together with its partners, customers and research institutions, the Freudenberg Group develops leading-edge technologies and excellent products and services for about 40 markets and for thousands of applications: seals, vibration control components, technical textiles, filters, specialty chemicals, medical products and the most modern cleaning products. Strength of innovation, strong customer orientation, diversity, and team spirit are the cornerstones of the Group. The 175-year-old company holds strong to its core values: a commitment to excellence, reliability and pro-active, responsible action. In 2024, the Freudenberg Group employed more than 52,000 people in some 60 countries worldwide and generated sales of more than €11.95 billion. Learn more about us and visit our digital home at freudenberg.com and read the stories that make us Freudenberg. Visit and follow us at www.freudenberg.com https://www.instagram.com/freudenberg.group/ www.youtube.com/FreudenbergGroup *** Netiquette *** We look forward to receiving your comments and posts. On behalf of all users, we ask for constructive contributions, mutual respect, courtesy and tolerance. All contributions will be checked and we reserve the right to delete contributions. This applies in particular to unlawful content, incorrect statements, advertising for third parties, spam or slander. In addition, we reserve the right to remove comments that are otherwise inappropriate or incorrect. Contributions made by external users do not necessarily reflect Freudenberg’s opinion. Please find our data protect information here: https://www.freudenberg.com/fileadmin/downloads/english/Freudenberg_Social-Media-Data-Protection-Information.pdf Legal Notice: https://www.freudenberg.com/legal-notice

MAHLE

cb mahle.com

MAHLE is a leading international development partner and supplier to the automotive industry with customers in both passenger car and commercial vehicle sectors. Founded in 1920, the technology group is working on the climate-neutral mobility of tomorrow, with a focus on the strategic areas of electrification and thermal management as well as further technology fields to reduce CO2 emissions, such as fuel cells or highly efficient combustion engines that also run on hydrogen or synthetic fuels. Today, one in every two vehicles globally is equipped with MAHLE components. For privacy statement and imprint follow the website link below.

Adient

adient.com

Adient (NYSE: ADNT) is a global leader in automotive seating. With more than 65,000 employees in 29 countries, Adient operates ~200 manufacturing/assembly plants worldwide. We produce and deliver automotive seating for all major OEMs. From complete seating systems to individual components, our expertise spans every step of the automotive seat-making process. We take our products from research and design to engineering and manufacturing — and into millions of vehicles every year. For more information, please visit www.adient.com.

Pirelli

cb pirelli.com

Pirelli was founded in Milan in 1872 and today stands as a global brand known for its cutting-edge technology, high-end production excellence and passion for innovation that draws heavily on its Italian roots. With 18 production plants in 12 countries and a commercial presence in over 160, Pirelli has around 30,700 employees and had a turnover of about 5.3 billion euro (in 2021). It is among the world’s major producers of tyres and associated services and the only one focused solely on the Consumer tyre market, which includes tyres for cars, motorcycles and bicycles. Pirelli’s technological excellence is also nourished by the innovation and competencies derived from sporting competitions, in which it has been active for over 110 years. Currently, the Company participates in over 350 car and motorcycle sport events and, since 2011, it has been the exclusive tyre supplier to the Formula 1© World Championship and will be the sole Global Tyre Partner until 2024. All of this has grown from a strong commitment to Research and Development based on an “Open Innovation” model. In 2021, Pirelli’s investment in R&D equaled around 6% of its revenues from High Value products, one of the highest levels among the world’s major tyre producers. Pirelli boasts around 2,000 people engaged in R&D, located at its Milan headquarters and 12 local technology centres, and a portfolio of more than 6,700 patents. The Pirelli brand is an international icon standing for technology, tastefulness and Italian excellence, synonymous with safety and reliability. Represented by the unmistakable “long P” logo for more than a century, the Pirelli name is associated with exclusivity, luxury and innovation, strengthening its distinctive position as a supplier to luxury car manufacturers. Pirelli continually enhances the reputation and strength of the brand through its involvement in motorsport events and competitions, cultural and artistic projects and initiatives benefitting local communities.

Loading…

NEWS

Scania Bulgaria CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…