What is Department of State - Office of the Science & Technology Adviser's cybersecurity risk score?

Department of State - Office of the Science & Technology Adviser has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Department of State - Office of the Science & Technology Adviser experienced?

According to Rankiteo, Department of State - Office of the Science & Technology Adviser currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Department of State - Office of the Science & Technology Adviser been affected by any supply chain cyber incidents ?

According to Rankiteo, Department of State - Office of the Science & Technology Adviser has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Department of State - Office of the Science & Technology Adviser have SOC 2 Type 2 certification ?

According to Rankiteo, Department of State - Office of the Science & Technology Adviser does not hold a SOC 2 Type 2 certification.

Does Department of State - Office of the Science & Technology Adviser have PCI DSS certification ?

According to Rankiteo, Department of State - Office of the Science & Technology Adviser does not currently maintain PCI DSS compliance.

Does Department of State - Office of the Science & Technology Adviser have ISO 27001 certification ?

According to Rankiteo,Department of State - Office of the Science & Technology Adviser is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

How many employees does Department of State - Office of the Science & Technology Adviser have ?

Department of State - Office of the Science & Technology Adviser employs approximately None employees people worldwide.

Does Department of State - Office of the Science & Technology Adviser own any subsidiaries ?

Department of State - Office of the Science & Technology Adviser presently has no subsidiaries across any sectors.

How many LinkedIn followers does Department of State - Office of the Science & Technology Adviser have ?

Department of State - Office of the Science & Technology Adviser's official LinkedIn profile has approximately 532 followers.

What is the NAICS classification code for Department of State - Office of the Science & Technology Adviser ?

Department of State - Office of the Science & Technology Adviser is classified under the NAICS code 92, which corresponds to Public Administration.

Does Department of State - Office of the Science & Technology Adviser have a Crunchbase profile ?

No, Department of State - Office of the Science & Technology Adviser does not have a profile on Crunchbase.

Does Department of State - Office of the Science & Technology Adviser have a LinkedIn profile ?

Yes, Department of State - Office of the Science & Technology Adviser maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/stas-at-state.

How many peer or competitor companies does Department of State - Office of the Science & Technology Adviser have ?

Department of State - Office of the Science & Technology Adviser has an estimated 13,156 peer or competitor companies worldwide.

What types of cybersecurity incidents has Department of State - Office of the Science & Technology Adviser faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DSOSTA

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

Department of State - Office of the Science & Technology Adviser Vendor Cyber Rating & Cyber Score

state.gov

Add Your Compliance Badge

Our mission is to anticipate the foreign policy impacts of scientific research, discoveries, development, and innovations; build science, technology, and innovation (STI) capacity within the diplomatic corps; and connect domestic and international STI enterprises to promote U.S. priorities. The Office of the Science & Technology Adviser to the Secretary of State (STAS) was created in 2000 by then Secretary of State Madeline Albright in response to a 1999 study by the U.S. National Research Council on how the Department could incorporate science, technology, and health expertise in the formulation and implementation of foreign policy. Building on over two decades of activities and through seven Science and Technology Advisers to the

DSOSTA A.I CyberSecurity Scoring

Scoring History

DSOSTA

Department of State - Office of the Science & Technology Adviser CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Department of State...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

DSOSTA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DSOSTA

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Department of State - Office of the Science & Technology Adviser in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Department of State - Office of the Science & Technology Adviser in 2026.

Incident Types DSOSTA vs Government Administration Industry Avg (This Year)

No incidents recorded for Department of State - Office of the Science & Technology Adviser in 2026.

Incident History - DSOSTA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Department of State - Office of the Science & Technology Adviser Subsidiaries

DSOSTA

Government Administration

Website: https://www.state.gov/bureaus-offices/under-secretary-for-economic-growth-energy-and-the-environment/office-of-the-science-technology-adviser/

Company Size: 11-50 employees

U.S. Department of StateInternational Affairs

The Fulbright ProgramInternational Affairs

U.S. Embassy ZambiaInternational Affairs

U.S. Embassy JakartaGovernment Administration

U.S. Consulate General MumbaiGovernment Administration

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

Bureau of Cyberspace and Digital PolicyInternational Affairs

U.S. Embassy PanamaGovernment Administration

U.S. Embassy in the PhilippinesGovernment Administration

U.S. Embassy TunisGovernment Administration

U.S. Department of State Industry LiaisonGovernment Administration

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

US Embassy ParisGovernment Administration

US Embassy Bucharest, RomaniaGovernment Administration

U.S. Embassy Santiago, ChileServicios de relaciones gubernamentales

U.S. Embassy in MexicoGovernment Administration

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

DT - Diplomatic Technology at StateInternational Affairs

U.S. Mission to the European UnionGovernment Administration

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Embassy MadridGovernment Administration

U.S. Embassy OsloGovernment Administration

U.S. Consulate General MilanGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

U.S. Mission, GenevaGovernment Administration

U.S. Mission to the UAEGovernment Administration

U.S. Consulate General BarcelonaGovernment Administration

US BotschaftGovernment Administration

U.S. Embassy LuxembourgInternational Affairs

US Mission to the UN Agencies in RomeGovernment Administration

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Embassy and Consulates in Brazil Government Administration

U.S. Consulate General FrankfurtGovernment Administration

U.S. Consulate General - StrasbourgGovernment Administration

U.S. Embassy JerusalemGovernment Administration

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

U.S. Embassy in BulgariaGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

National Museum of American DiplomacyGovernment Administration

U.S. Mission ThailandGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

U.S. Embassy TegucigalpaGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

Embassy of the United States of America, LondonGovernment Relations

U.S. Embassy in the Dominican RepublicGovernment Administration

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

U.S. Embassy Montevideo, UruguayGovernment Administration

U.S. Department of State - Virtual Student Federal Service (VSFS)Government Administration

Under Secretary Jose W. FernandezInternational Affairs

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

U.S. Department of State - Bureau of Energy ResourcesGovernment Administration

U.S. Department of State - Bureau of Energy Resources Central Asia Energy Fellows ProgramGovernment Administration

Special Representative Sarah MorgenthauGovernment Administration

Foreign Service InstituteInternational Affairs

U.S. Embassy in San SalvadorGovernment Administration

U.S. Embassy Amman, JordanGovernment Relations Services

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

Embajada de Estados Unidos en ArgentinaRelaciones gubernamentales

U.S. Embassy South AfricaGovernment Relations Services

U.S. Embassy in AustraliaInternational Affairs

U.S. Embassy ManaguaGovernment Relations Services

Ambassador Michael BattleGovernment Relations Services

Diplomatic Security ServiceLaw Enforcement

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

Loading…

Department of State - Office of the Science & Technology Adviser Similar Companies

Swiss Federal Administration

admin.ch

Seven departments, the Federal Chancellery and around 70 administrative units make up the Federal Administration. With around 38,000 employees, we are one of the largest employers in Switzerland. Everyone who works for the Federal Administration actively contributes to Switzerland's well-being and shapes the future of our country. We are as varied as Switzerland itself – we stand for active diversity and inclusion. Our employees come from all over the country and the Federal Administration is present throughout Switzerland. With us, you can expect diverse, challenging and unique tasks in all kinds of subject areas and specialist fields. As a modern employer, the Federal Administration enables its employees to combine work and private life with flexible forms of work and promotes their personal development with practical training and continuing professional development. * Vacancies in the administrative units can be found on their LinkedIn pages or at stelle.admin.ch.

State of Tennessee

tn.gov

State government is the largest employer in Tennessee, with approximately 43,500 employees in the three branches of government. The State of Tennessee has approximately 1,300 different job classifications in areas such as administrative, health services, historic preservation, legal, agriculture, counseling, and medical. If you are interested in becoming a data scientist, attorney, nurse, wildlife officer, physician, education consultant, trooper, computer programmer or an epidemiologist, explore all of the job opportunities the State of Tennessee has to offer. The State is looking to recruit, retain, and reward a talented workforce through the implementation of a merit-based pay system. Stop back often for news, updates and opportunities -- thanks for visiting!

USDA

usda.gov

The United States Department of Agriculture is the United States federal executive department responsible for developing and executing U.S. federal government policy on farming, agriculture, and food. It aims to meet the needs of farmers and ranchers, promote agricultural trade and production, work to assure food safety, protect natural resources, foster rural communities and end hunger in the United States and abroad.

eThekwini Municipality

durban.gov.za

EThekwini Municipality is a Metropolitan Municipality found in the South African province of KwaZulu-Natal. Home to the world-famous city of Durban. EThekwini is the largest City in the province and the third largest city in the country. It is a sophisticated cosmopolitan city of over 3 468 088 people. It is known as the home of Africa's best-managed, busiest port and is also a major centre of tourism because of the city's warm subtropical climate and extensive beaches. The eThekwini Municipality is an employer of choice, with excellent working conditions and competitive salary packages for employees. The Municipality is committed to creating a great place to work by creating development opportunities for employees to grow. Working for eThekwini Municipality will give you a chance to make a difference in people’s lives and become part of our team to make Durban the most caring and liveable city in Africa. Some facts about eThekwini Municipality: 1. Known as South Africa’s Playground – plenty of places to visit and activities to do 2. First African city to host the Commonwealth Games 3. Historically rich with Heritage sites for Nelson Mandela and Mahatma Ghandi 4. Home to the Comrades Marathon – The worlds’ largest ultra-marathon 5. The world’s tallest bungee swing at the Moses Mabhida stadium 6. Durban Aliwal Shoal – a world top diving site 7. Durban harbour - 9th largest harbour in the world - busiest container port in Africa 8. Africa’s first Aerotropolis – Trade Port with direct links globally 9. One of the top surfing destinations in South Africa 10. Ushaka Marine World – Biggest Aquarium in Africa

I WORK FOR SA

sa.gov.au

The OFFICIAL careers page for the South Australian Government. The South Australian Public Sector is the State's largest workforce. We are an employer of choice that reflects the diverse community we serve. Our people are from a range of backgrounds and vocations, from entry level, mid-career and leadership professionals as well as graduates, apprentices and trainees. As a public sector employee, you can be proud that the work you do supports our community and our State's prosperity. For a career with more opportunity, flexibility and purpose, visit IWORKFOR.SA.gov.au

State of Missouri

mo.gov

Build the Missouri of tomorrow. Ensure a strong foundation today. Join a group of innovative team members focused on driving the State of Missouri forward. As public servants, our team members have the opportunity to produce work that is both lasting and important. This work serves to protect families, communities, and our natural resources. No matter where you are in your career, whether entry level or senior level, a career with the State of Missouri will challenge you to grow both personally and professionally. Though one employer, there is no shortage of exciting opportunities as there are many career paths you may take within the State. If you are searching for a job that transforms lives, including your own, a career with the State of Missouri is the perfect fit!

State of Florida

myflorida.com

Join Florida’s talented workforce to fulfill your professional goals and achieve a meaningful career. Our talented public servants work hard to serve more than 19 million residents across Florida, and you, too, can realize success in the Sunshine State. Working in Florida’s state government means being responsive to the issues impacting the taxpayers of our state. Florida’s state government boasts both fast-paced work environments in which critical thinking and creative problem-solving are a must as well as steady employment opportunities that prize consistent service to our state’s residents. In some positions, state employment means being able to influence policy decisions and help implement change. In others, state employment means being the reliable resource that our taxpayers have come to expect from Florida’s public servants. All positions offer the ability to gain valuable experience quickly, improving your overall skillset. The State of Florida is seeking individuals with leadership skills, creativity and dedication to their fellow Floridians and individuals who recognize the professional development opportunities and achievements possible through state service. Florida boasts the third largest population in the country and is richly diverse in both population and landscape. With an award-winning park system, warm weather and beautiful bodies of water, Florida is the perfect environment for recreational activities and outdoor enthusiasts. Our favorable tax climate means your income goes further and our business-friendly policies foster private sector growth. Joining Florida’s talented, diverse workforce provides the opportunity to achieve your professional goals while living in a state that values quality of life, culture and recreation. For employment opportunities with the State of Florida, visit https://jobs.myflorida.com.

Belastingdienst

belastingdienst.nl

De organisatie bestaat uit diverse onderdelen, waaronder de Belastingdienst, Douane, Toeslagen, FIOD en enkele facilitaire organisaties. Met ruim 30.000 medewerkers werken we in kantoren die verspreid zijn over het hele land. Gezamenlijk heffen, innen en controleren we belastingen. Daarnaast zorgen we ook voor het uitbetalen van toeslagen. En zijn we verantwoordelijk voor douanetaken en het opsporen van fraude. De Belastingdienst is een organisatie die 24 uur per dag, 7 dagen per week in dienst staat van de samenleving. Waar jaarlijks miljoenen aangiften worden behandeld, en waar voor honderden miljoenen aan toeslagen worden uitbetaald. En waar de Douane dagelijks zorgt voor de vlotte en veilige in- en uitvoer van tonnen goederen. Ondanks deze grote aantallen streven wij waar mogelijk naar individuele en persoonlijke dienstverlening. En in de vorm van bijvoorbeeld convenanten en partnerships werken wij ook zo goed mogelijk samen met het bedrijfsleven en andere ketenpartners. De Belastingdienst: grootschalig, veelzijdig en altijd maatschappelijk relevant.

Ministère de l'Éducation nationale

gouv.fr

Page officielle du ministère de l'Éducation nationale. Retrouvez toute l'information sur www.education.gouv.fr, twitter.com/education_gouv, facebook.com/education.gouv et dans nos lettres d'informations (bulletin hebdo et lettre education.gouv.fr). ------------------------------------------------------------- Le ministère de l'Éducation nationale est en charge de la préparation et de la mise en œuvre de la politique du Gouvernement concernant la jeunesse, au sein et en dehors du milieu scolaire, et l'accès de chacun aux savoirs et au développement de l'enseignement pré-élémentaire, élémentaire et secondaire. Ses compétences principales s’exercent dans : la définition des voies de formation, la fixation des programmes nationaux, l'organisation et le contenu des enseignements ; la définition et la délivrance des diplômes nationaux et la collation des grades et titres universitaires ; / le recrutement et la gestion des personnels qui dépendent de sa responsabilité ; / la répartition des moyens qu'il consacre à l'éducation, afin d'assurer en particulier l'égalité d'accès au service public ; le contrôle et l'évaluation des politiques éducatives, en vue d'assurer la cohérence d'ensemble du système éducatif. L'administration de l'Éducation nationale est présente dans chaque région et dans chaque département : ce sont les services déconcentrés du ministère de l'Éducation nationale. Son organisation s’articule autour de 17 régions académiques, 30 académies et 97 directions des services départementaux de l'Éducation nationale. Les domaines où s'exercent les métiers dans l'éducation nationale sont multiples : l'enseignement avec plus de 80% des effectifs, l'éducation et l'orientation mais aussi la santé et le social, l'administration, la comptabilité, la gestion et les finances, la technique, les systèmes d’information, la recherche et formation, les bibliothèques, l'encadrement (direction et inspection).

Loading…

NEWS

Department of State - Office of the Science & Technology Adviser CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 18, 2025 07:00 AM

Key Global Health Positions and Officials in the U.S. Government

This tracker is updated periodically and currently reflects major positions known to be filled or likely to be retained thus far in the...

Read Article

September 15, 2025 07:20 PM

Under Secretary for Economic Growth, Energy, and Environment

The Under Secretary of State for Economic Growth, Energy, and Environment leads the State Department's efforts to advocate for U.S. foreign policy...

Read Article

September 15, 2025 06:47 PM

Office of the Special Envoy for Critical and Emerging Technology

The Office of the Special Envoy for Critical and Emerging Technologies (S/TECH) within the Office of the Secretary is the Department's focal point for...

Read Article

September 15, 2025 06:21 PM

Bureau of Educational and Cultural Affairs

The Bureau of Educational and Cultural Affairs (ECA) designs and implements educational, professional, and cultural exchange and other programs that create...

Read Article

August 30, 2025 05:10 AM

Dr. Allison Schwier

Allison Schwier's term ended on July 11, 2025. Allison Schwier is the Acting Science and Technology Adviser to the Secretary of State.

Read Article

August 21, 2025 07:00 AM

The UK Space Agency has been absorbed into the science department. The potential effects are still unclear

The UK Space Agency (UKSA) has become part of the government's Department for Science, Innovation and Technology (DSIT).

Read Article

August 07, 2025 09:23 PM

Rahima Kandahari

Rahima Kandahari's term ended on July 11, 2025. Rahima Kandahari, a career member of the Senior Foreign Service, Class of Ministerial Counselor,...

Read Article

August 07, 2025 09:23 PM

Tony Fernandes

Tony Fernandes's term ended on August 6, 2025. Tony Fernandes is Acting Assistant Secretary in the Bureau of Oceans and International Environmental and...

Read Article

July 22, 2025 07:00 AM

The United States Withdraws from the United Nations Educational, Scientific and Cultural Organization (UNESCO)

Today, the United States informed Director-General Audrey Azoulay of the United States' decision to withdraw from UNESCO.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-71983

SUMMARY

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71502

SUMMARY

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data. An unauthenticated attacker can create a public conversion whose name or description contains a malicious Vue expression using the application's configured [[ ... ]] delimiters. User profile names may provide an additional injection vector. Although Jinja HTML escaping is applied, the resulting value is subsequently included in a DOM region compiled by Vue. Vue interprets the attacker-controlled value as a template expression rather than ordinary text. By accessing the JavaScript Function constructor from within the expression, an attacker can execute arbitrary JavaScript in the security context of the CTI-Transmute origin. The application's nonce-based Content Security Policy does not prevent exploitation because the Vue runtime compiler requires the unsafe-eval policy exception. The malicious payload is stored by the application and executed whenever another user opens an affected page, such as the public conversion detail page. The victim may be a normal user or an administrator. Successful exploitation could allow the attacker to: * Access data available to the victim through the application. * Extract API keys, tokens, or other sensitive information exposed to the page. * Perform authenticated actions using the victim's session. * Modify conversions or other application data. * Escalate the impact by targeting an administrator. A demonstrated payload can use [].constructor.constructor(...) to obtain the JavaScript Function constructor and execute arbitrary code. The regression tests also show that a short first-stage payload could retrieve an uncapped conversion description and evaluate a larger second-stage payload. The patch addresses the vulnerability by registering a global Jinja finalize hook that inserts a zero-width Unicode word joiner inside every Vue delimiter found in server-rendered values. This prevents Vue from recognizing the values as template expressions while preserving their visible representation.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-71958

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71957

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71956

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…