What is the official website of Thinkfuse ?

The official website of Thinkfuse is http://www.thinkfuse.com.

What is Thinkfuse's cybersecurity risk score?

Thinkfuse has an AI-generated cybersecurity risk score of 753 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Thinkfuse experienced?

According to Rankiteo, Thinkfuse currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Thinkfuse been affected by any supply chain cyber incidents ?

According to Rankiteo, Thinkfuse has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: ALLSALFARTRA1789577043) Salesforce (Incident ID: SALMCK1787948754) Resecurity (Incident ID: CISRESMICAMASERSALGIT1786868753) ServiceNow (Incident ID: SALSERCON1786602506) Salesforce (Incident ID: BRI1785435859) Klue (Incident ID: HUNSALKLU1781793603) Oracle (Incident ID: ORA1781526596) Snowflake (Incident ID: DEN1779855877) Salesforce (Incident ID: CHA1779582281) Oracle (Incident ID: SALORAEAS1781684937) Salesforce (Incident ID: CARADTSALCUS1778027258) Okta (Incident ID: ADT1777286874) Salesforce (Incident ID: PANADTSAL1777328877) Salesforce (Incident ID: ADT1777062235) Anodot by Glassbox (Incident ID: CARHOLPRI1776630318) Salesforce (Incident ID: KEM1776831908) Salesforce (Incident ID: MCGSAL1776191039) Salesforce (Incident ID: WYN7-E1779114946) Salesforce (Incident ID: WEASAL1778732635) Aqua Security (Incident ID: AQUUSEAMASALCIS1775046662) LiteLLM AI Gateway (Incident ID: AQU1774671948) Mixpanel (Incident ID: ZEN1774628650) Salesforce (Incident ID: INFSAL1774362301) Salesforce (Incident ID: BER1776292480) Salesforce (Incident ID: LOC1774283448) Amazon Web Services (AWS) (Incident ID: SALAMAMICPINRED1774269319) okta (Incident ID: NOROKTSAL1773854168) Salesforce (Incident ID: SAL1773146972) Salesforce Experience Cloud (Incident ID: SALLASAMDSNOSONOKT1773153462) Salesforce (Incident ID: SALHAL1775967850) Salesforce (Incident ID: TIFLVMCHR1770865579) Salesforce (Incident ID: EURODI1770907059) okta (Incident ID: OKTSALGOO1769222214) Agentforce Marketing (Incident ID: SALFOR1778063116) Salesforce (Incident ID: PLADRA1774449041) Salesforce (Incident ID: COU1764518078) Drift, a Salesloft company (Incident ID: SAL4794547112625) Salesforce (Incident ID: GAI1122911112425) Salesforce (Incident ID: SAL5592855100325) Salesforce (Incident ID: SAL2862828092525) Cisco (Incident ID: SAL5732257091825) Salesloft (Incident ID: DRI514090325) Salesforce Experience Cloud (Incident ID: ENTSAL1773088371) Salesforce (Incident ID: DRI635082925) Salesforce (Incident ID: SALFAR1767922939) Salesforce (Incident ID: WOR1768679649) Salesforce (Incident ID: TRA1021410090425) moveIT Software (Incident ID: ORA4202442101025) Salesforce (Incident ID: SAL0562205100825) Salesforce (Incident ID: SALODI1772484824) Salesforce (Incident ID: GRU1768529823) Salesforce (Incident ID: GRU1769118538) Salesforce (Incident ID: LOUPARVOLTIFJAP1770908674) Salesforce (Incident ID: THEINGSALJAGORASYNDAV1769095448) Salesforce (Incident ID: QILCYBSALHALPLA1768955694) Salesforce (Incident ID: SALGOO1781576985)

Does Thinkfuse have SOC 2 Type 1 certification ?

According to Rankiteo, Thinkfuse is not certified under SOC 2 Type 1.

Does Thinkfuse have SOC 2 Type 2 certification ?

According to Rankiteo, Thinkfuse does not hold a SOC 2 Type 2 certification.

Does Thinkfuse comply with GDPR ?

According to Rankiteo, Thinkfuse is not listed as GDPR compliant.

Does Thinkfuse have PCI DSS certification ?

According to Rankiteo, Thinkfuse does not currently maintain PCI DSS compliance.

Does Thinkfuse comply with HIPAA ?

According to Rankiteo, Thinkfuse is not compliant with HIPAA regulations.

Does Thinkfuse have ISO 27001 certification ?

According to Rankiteo,Thinkfuse is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Thinkfuse operate in ?

Thinkfuse operates primarily in the Software Development industry.

How many employees does Thinkfuse have ?

Thinkfuse employs approximately None employees people worldwide.

Does Thinkfuse own any subsidiaries ?

Thinkfuse presently has no subsidiaries across any sectors.

How many LinkedIn followers does Thinkfuse have ?

Thinkfuse's official LinkedIn profile has approximately 1,157 followers.

What is the NAICS classification code for Thinkfuse ?

Thinkfuse is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Thinkfuse have a Crunchbase profile ?

Yes, Thinkfuse has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/thinkfuse.

Does Thinkfuse have a LinkedIn profile ?

Yes, Thinkfuse maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/thinkfuse.

How many cybersecurity incidents has Thinkfuse experienced ?

As of September 22, 2026, Rankiteo reports that Thinkfuse has experienced 75 cybersecurity incidents.

How many peer or competitor companies does Thinkfuse have ?

Thinkfuse has an estimated 31,006 peer or competitor companies worldwide.

What types of cybersecurity incidents has Thinkfuse faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Ransomware, Breach and Vulnerability.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Thinkfuse

Boost Score +25 with badge (5 left)

753

/1000

Fair

778

/1000

Fair

Thinkfuse Vendor Cyber Rating & Cyber Score

thinkfuse.com

cb in

Add Your Compliance Badge

Thinkfuse is an Enterprise Software-as-a-Service platform that turns the dreaded weekly status report into a powerful business intelligence tool. The company was created by co-founders Brandon Bloom and Steve Krenzel and is a member of the TechStars Seattle class of 2010.

Thinkfuse

Thinkfuse CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Salesforce

Vulnerability

100

9/2026

Salesforce

ALLSALFARTRA178...

Salesforce

Cyber Attack

9/2026

OPESNOSALHUG178...

Salesforce

Breach

100

8/2026

Salesforce

SALMCK178794875...

Agentforce Marketin...

Vulnerability

8/2026

SALHOU178697329...

Salesforce

Breach

8/2026

Resecurity

CISRESMICAMASER...

Salesforce Experien...

Vulnerability

8/2026

ServiceNow

SALSERCON178660...

Salesforce

Breach

8/2026

AMASAL178601233...

Salesforce

Breach

7/2026

Salesforce

BRI1785435859

Salesforce

Cyber Attack

6/2026

Klue

HUNSALKLU178179...

Salesforce

Vulnerability

100

6/2026

Oracle

ORA1781526596

Salesforce

Breach

5/2026

Snowflake

DEN1779855877

Salesforce

Breach

5/2026

Salesforce

CHA1779582281

Salesforce

Vulnerability

5/2026

Oracle

SALORAEAS178168...

Salesforce

Breach

5/2026

SAL1786285485

Salesforce

Cyber Attack

5/2026

Salesforce

CARADTSALCUS177...

Salesforce

Cyber Attack

4/2026

GOOSAL177791964...

Salesforce

Cyber Attack

4/2026

SAL1777395283

Salesforce

Cyber Attack

100

4/2026

Okta

ADT1777286874

Salesforce

Breach

4/2026

Salesforce

PANADTSAL177732...

Salesforce

Breach

4/2026

Salesforce

ADT1777062235

Salesforce

Breach

4/2026

Anodot by Glass...

CARHOLPRI177663...

Salesforce

Breach

4/2026

Salesforce

KEM1776831908

Salesforce

Vulnerability

4/2026

SAL1776299258

Salesforce

Breach

4/2026

Salesforce

MCGSAL177619103...

Salesforce

Vulnerability

4/2026

SAL1776084470

Salesforce

Breach

4/2026

Salesforce

WYN7-E177911494...

Salesforce

Vulnerability

4/2026

Salesforce

WEASAL177873263...

Salesforce

Vulnerability

100

4/2026

Aqua Security

AQUUSEAMASALCIS...

Salesforce

Vulnerability

100

3/2026

LiteLLM AI Gate...

AQU1774671948

Salesforce

Ransomware

100

3/2026

Mixpanel

ZEN1774628650

Salesforce

Breach

3/2026

Salesforce

INFSAL177436230...

Salesforce

Breach

100

3/2026

Salesforce

BER1776292480

Salesforce

Cyber Attack

100

3/2026

Salesforce

LOC1774283448

Salesforce

Vulnerability

100

3/2026

Amazon Web Serv...

SALAMAMICPINRED...

Salesforce

Breach

100

3/2026

okta

NOROKTSAL177385...

Salesforce

Breach

3/2026

Salesforce

SAL1773146972

Salesforce Experien...

Breach

3/2026

Salesforce Expe...

SALLASAMDSNOSON...

Salesforce

Breach

3/2026

Salesforce

SALHAL177596785...

Salesforce

Breach

2/2026

TOYOPTSAL177195...

Salesforce

Breach

2/2026

Salesforce

TIFLVMCHR177086...

Salesforce

Breach

2/2026

Salesforce

EURODI177090705...

Salesforce

Cyber Attack

1/2026

okta

OKTSALGOO176922...

Agentforce Marketin...

Vulnerability

1/2026

Agentforce Mark...

SALFOR177806311...

Salesforce

Cyber Attack

100

1/2026

SAL1768394538

Salesforce

Ransomware

100

1/2026

Salesforce

PLADRA177444904...

Salesforce

Breach

12/2025

Salesforce

COU1764518078

Salesforce

Breach

100

11/2025

Drift, a Salesl...

SAL479454711262...

Salesforce

Breach

11/2025

Salesforce

GAI112291111242...

Salesforce

Ransomware

100

10/2025

Salesforce

SAL559285510032...

Salesforce

Breach

100

9/2025

Salesforce

SAL286282809252...

Salesforce

Cyber Attack

100

9/2025

Cisco

SAL573225709182...

Salesforce

Cyber Attack

100

9/2025

Salesloft

DRI514090325

Salesforce Experien...

Breach

9/2025

Salesforce Expe...

ENTSAL177308837...

Salesforce

Breach

8/2025

Salesforce

DRI635082925

Salesforce

Vulnerability

100

8/2025

Salesforce

SALFAR176792293...

Salesforce

Breach

8/2025

Salesforce

WOR1768679649

Salesforce

Breach

7/2025

Salesforce

TRA102141009042...

Salesforce

Ransomware

100

7/2025

moveIT Software

ORA420244210102...

Thinkfuse

Cyber Attack

100

6/2025

SAL540255411062...

Salesforce

Cyber Attack

100

5/2025

Salesforce

SAL056220510082...

Salesforce

Vulnerability

5/2025

Salesforce

SALODI177248482...

Thinkfuse

Breach

3/2025

SAL313223110082...

Salesforce

Breach

2/2025

Salesforce

GRU1768529823

Salesforce

Breach

1/2025

Salesforce

GRU1769118538

Salesforce

Breach

1/2025

Salesforce

LOUPARVOLTIFJAP...

Salesforce

Ransomware

100

1/2025

Salesforce

THEINGSALJAGORA...

Thinkfuse

Cyber Attack

100

8/2024

SAL210212110042...

Salesforce

Cyber Attack

100

8/2024

SALARU177197435...

Thinkfuse

Cyber Attack

100

6/2024

SAL096210910082...

Salesforce

Ransomware

100

6/2024

Salesforce

QILCYBSALHALPLA...

Thinkfuse

Cyber Attack

100

5/2024

SAL500215010092...

Thinkfuse

Ransomware

100

10/2023

SAL560205610112...

Thinkfuse

Ransomware

100

6/2023

SAL423224210102...

Thinkfuse

Cyber Attack

05/2019

SAL215719323

Salesforce

Breach

1/2014

Salesforce

SALGOO178157698...

Loading…

A.I.

Thinkfuse Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Thinkfuse

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Thinkfuse in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Thinkfuse in 2026.

Incident Types Thinkfuse vs Software Development Industry Avg (This Year)

No incidents recorded for Thinkfuse in 2026.

Incident History - Thinkfuse (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Thinkfuse Subsidiaries

Thinkfuse

Software Development

Website: http://www.thinkfuse.com

Company Size: 2-10 employees

SalesforceSoftware Development

Salesforce for Small BusinessSoftware Development

TrailheadIT Services and IT Consulting

Agentforce CommerceTechnology, Information and Internet

Vlocity, a Salesforce CompanySoftware Development

PardotSoftware Development

Salesforce Data 360Software Development

Salesforce Trailhead SuperbadgesInformation Services

ExactTargetSoftware Development

Salesforce Revenue CloudSoftware Development

Salesforce QuipSoftware Development

QuipSoftware Development

Salesforce Work.comIT Services and IT Consulting

Model MetricsInformation Technology & Services

Clipboard, inc.Software Development

Salesforce Pathfinder Training ProgramIT Services and IT Consulting

GoInstantTechnology, Information and Internet

ManymoonTechnology, Information and Internet

Ourglass.Technology, Information and Internet

Etacts Inc.Computer Networking

SitemasherSoftware Development

EdgeSpring (acquired by Salesforce)IT Services and IT Consulting

Navajo SystemsIT Services and IT Consulting

Prior Knowledge, Inc.Software Development

EntropySoftSoftware Development

GroupSwimSoftware Development

BlueTailInformation Technology & Services

SalesforceOrg PartnersIT Services and IT Consulting

Salesforce PartnersIT Services and IT Consulting

Salesforce Experience CloudSoftware Development

Salesforce DevelopersSoftware Development

Salesforce.orgSoftware Development

Agentforce ServiceSoftware Development

Salesforce ArchitectsIT Services and IT Consulting

Agentforce SalesSoftware Development

Agentforce 360 PlatformSoftware Development

Futureforce: Salesforce University RecruitingInternet Publishing

DreamforceInternet Publishing

Salesforce for GovernmentTechnology, Information and Internet

Salesforce IndustriesTechnology, Information and Internet

Salesforce DesignersSoftware Development

Agentforce MarketingSoftware Development

Salesforce News & InsightsTechnology, Information and Internet

Salesforce Customer SuccessSoftware Development

Salesforce AdminsSoftware Development

Salesforce AppExchangeIT Services and IT Consulting

Loading…

Thinkfuse Similar Companies

Wolt

wolt.com

Wolt is a Helsinki-based technology company with a mission to bring joy, simplicity and earnings to the neighborhoods of the world. Wolt develops a local commerce platform that connects people looking to order food, groceries, and other goods with people interested in selling and delivering them. Wolt was founded in 2014 and joined forces with DoorDash (NASDAQ: DASH) in 2022. Together, we operate in more than 30 countries today.

PhonePe

cb phonepe.com

PhonePe Group is India’s leading fintech company, proudly recognized as India’s #1 Trusted Digital Payments* Brand for three consecutive years. Our flagship product, the PhonePe app was launched in August 2016, has rapidly become the preferred consumer payments app in India. In just eight years, PhonePe has gained over 57 crore + registered users and established a digital payments acceptance network of over 4 crore+ merchants spread across Tier 2,3 cites and beyond, covering 99% of the postal codes in the country. Building on our leadership in digital payments, PhonePe Group has expanded into financial services—including insurance, lending, and wealth management—along with new consumer tech ventures such as Pincode, a hyperlocal ecommerce platform, Indus App Store - India’s first localized app store, and Share.Market- A wealth and investment platform (app & website), catering to investors and traders needs. Headquartered in India, PhonePe Group aligns its diverse portfolio of businesses with our vision We're committed to empowering every Indian by unlocking the flow of money and providing equal access to easy & secure payments and financial services.

Airbnb

airbnb.com

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays, experiences and services that make it possible for guests to connect with communities in a more authentic way.

IDEMIA

cb idemia.com

IDEMIA Secure Transactions (IST) is a leading provider of payment, connectivity, and cybersecurity solutions, serving billions of people worldwide. With decades of expertise in cryptography and credential issuance, IST is trusted by over 2000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. IST is a division of IDEMIA Group. IDEMIA Public Security, another division of IDEMIA Group, is the premium provider of convenient and trusted biometric-based solutions, transforming public and private organizations across the globe. Follow them here: https://www.linkedin.com/company/idemia-public-security/

Workday

workday.com

By unifying HR and Finance on an open, trusted platform powered by AI, Workday delivers high-impact outcomes our customers can count on. At the heart of our platform is Sana from Workday—the superintelligence that puts AI agents to work for you and your people. Welcome to a new work day.

Amazon Fulfillment Technologies & Robotics

amazon.jobs

On the Fulfillment Technologies & Robotics Team, we build dynamic partnerships between people and intelligent machines. This intricate collaboration helps Amazon fulfill orders with unmatched accuracy. Since we began working with robotics, we've added over a million new jobs worldwide. Working in symphony with our robotic technology, employees have the opportunity to extend their technical capabilities by working alongside some of the industry’s most advanced technologies. This includes our fleet of autonomous mobile robots, sophisticated control software, and technologies like language perception, machine learning, object recognition, and semantic understanding of commands. These technologies help employees deliver an ever-improving customer and employee experience, as well as improve the safety of our facilities. Explore opportunities across the entire Fulfillment Technologies & Robotics team to find the right fit for you.

Synopsys Inc

cb synopsys.com

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

Agoda

careersatagoda.com

At Agoda, we bridge the world through travel. We aim to make it easy and rewarding for more travelers to explore and experience the amazing world we live in. We do so by enabling more people to see the world for less – with our best-value deals across our 6,000,000+ hotels and holiday properties, 130,000+ flight routes, 360,000+ activities, and more. Agoda was founded in 2005 in Thailand by two lifelong friends with a shared passion for travel. Today, Agoda is part of Booking Holdings [BKNG], and we have more than 7,000 employees from 90 nationalities in offices across Asia Pacific, the Middle East, Europe, and the Americas. In every department – from engineering to customer support – you’ll find that data and technology are at the heart of our culture. There’s never a boring day at Agoda as we aim to make travel hassle-free for everyone. If you’re ready to begin your best journey with us and help us build travel for the world, join us. For properties seeking partnership with Agoda, visit https://connect.agoda.com - Recruitment Scam Alert: We know that searching for a new career opportunity is an exciting step, and we want to help make sure your experience stays safe and secure. If you’re chatting with someone from Agoda, please note that we only use “@agoda.com” or “@agoda.global” email domains, and all legitimate Agoda job opportunities are posted here on our career website. We will never ask for payment or personal banking information during the recruitment process. If you’re ever unsure, take a moment to verify the sender’s email address. If you come across suspicious activity, please report it to https://www.linkedin.com/help/linkedin/ask/TS-RPS

Loading…

NEWS

Thinkfuse CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 30, 2012 07:00 AM

Thinkfuse Exits Beta: Get Your Team Out of Progress Review Hell With Simple, Searchable Status Reports

It's the problem every manager or CEO faces: how do you stay aware of what everyone is doing? Thinkfuse, which debuted at last year's...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-94426

SUMMARY

A vulnerability was determined in xuxueli xxl-job up to 3.5.0. The impacted element is an unknown function of the file /jobgroup/insert. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-94425

SUMMARY

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 6.8

Complexity: LOW

AV:L/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-94627

SUMMARY

vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership when concurrent child requests share a single transfer ID in prefill/decode disaggregated deployments. Attackers can trigger GPU memory exhaustion by submitting completion requests with multiple prompts, causing orphaned KV cache blocks to accumulate until process restart and eventually preventing legitimate requests from executing.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-94626

SUMMARY

vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatible completion endpoints, allowing attackers to allocate unbounded memory. Attackers can supply arbitrary tp_size values in prefill/decode disaggregated deployments to exhaust memory and trigger kernel OOM-kill of the decode worker process.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-94625

SUMMARY

vLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where rejected prefill requests create ownerless transfer placeholders that are never reclaimed. Attackers can send rejected requests to exhaust sender task pools, causing valid requests to be delayed by up to 480 seconds while health checks continue returning success.

Published

Date2026-09-21

Updated

Date2026-09-21

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Thinkfuse Vendor Cyber Rating & Cyber Score

Thinkfuse A.I CyberSecurity Scoring

Thinkfuse CyberSecurity News & History

Thinkfuse Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Thinkfuse

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Thinkfuse vs Software Development Industry Avg (This Year)

Incident History - Thinkfuse (X = Date, Y = Severity)

Thinkfuse Subsidiaries

Thinkfuse

Thinkfuse Similar Companies

Wolt

PhonePe

Airbnb

IDEMIA

Workday

Amazon Fulfillment Technologies & Robotics

Synopsys Inc

Meta

Agoda

Thinkfuse CyberSecurity News

Thinkfuse Exits Beta: Get Your Team Out of Progress Review Hell With Simple, Searchable Status Reports

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Thinkfuse CyberSecurity News & History

Thinkfuse Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Thinkfuse

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Thinkfuse vs Software Development Industry Avg (This Year)

Incident History - Thinkfuse (X = Date, Y = Severity)

Thinkfuse Subsidiaries

Thinkfuse

Thinkfuse Similar Companies

Wolt

PhonePe

Airbnb

IDEMIA

Workday

Amazon Fulfillment Technologies & Robotics

Synopsys Inc

Meta

Agoda

Thinkfuse CyberSecurity News

Thinkfuse Exits Beta: Get Your Team Out of Progress Review Hell With Simple, Searchable Status Reports

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo