What is UK Financial Intelligence Unit (UKFIU)'s cybersecurity risk score?

UK Financial Intelligence Unit (UKFIU) has an AI-generated cybersecurity risk score of 768 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has UK Financial Intelligence Unit (UKFIU) experienced?

According to Rankiteo, UK Financial Intelligence Unit (UKFIU) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has UK Financial Intelligence Unit (UKFIU) been affected by any supply chain cyber incidents ?

According to Rankiteo, UK Financial Intelligence Unit (UKFIU) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does UK Financial Intelligence Unit (UKFIU) have SOC 2 Type 1 certification ?

According to Rankiteo, UK Financial Intelligence Unit (UKFIU) is not certified under SOC 2 Type 1.

Does UK Financial Intelligence Unit (UKFIU) have SOC 2 Type 2 certification ?

According to Rankiteo, UK Financial Intelligence Unit (UKFIU) does not hold a SOC 2 Type 2 certification.

Does UK Financial Intelligence Unit (UKFIU) comply with GDPR ?

According to Rankiteo, UK Financial Intelligence Unit (UKFIU) is not listed as GDPR compliant.

Does UK Financial Intelligence Unit (UKFIU) have PCI DSS certification ?

According to Rankiteo, UK Financial Intelligence Unit (UKFIU) does not currently maintain PCI DSS compliance.

Does UK Financial Intelligence Unit (UKFIU) comply with HIPAA ?

According to Rankiteo, UK Financial Intelligence Unit (UKFIU) is not compliant with HIPAA regulations.

Does UK Financial Intelligence Unit (UKFIU) have ISO 27001 certification ?

According to Rankiteo,UK Financial Intelligence Unit (UKFIU) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does UK Financial Intelligence Unit (UKFIU) operate in ?

UK Financial Intelligence Unit (UKFIU) operates primarily in the Law Enforcement industry.

How many employees does UK Financial Intelligence Unit (UKFIU) have ?

UK Financial Intelligence Unit (UKFIU) employs approximately None employees people worldwide.

Does UK Financial Intelligence Unit (UKFIU) own any subsidiaries ?

UK Financial Intelligence Unit (UKFIU) presently has no subsidiaries across any sectors.

How many LinkedIn followers does UK Financial Intelligence Unit (UKFIU) have ?

UK Financial Intelligence Unit (UKFIU)'s official LinkedIn profile has approximately 35,855 followers.

What is the NAICS classification code for UK Financial Intelligence Unit (UKFIU) ?

UK Financial Intelligence Unit (UKFIU) is classified under the NAICS code 92212, which corresponds to Police Protection.

Does UK Financial Intelligence Unit (UKFIU) have a Crunchbase profile ?

No, UK Financial Intelligence Unit (UKFIU) does not have a profile on Crunchbase.

Does UK Financial Intelligence Unit (UKFIU) have a LinkedIn profile ?

Yes, UK Financial Intelligence Unit (UKFIU) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/uk-financial-intelligence-unit-ukfiu.

How many cybersecurity incidents has UK Financial Intelligence Unit (UKFIU) experienced ?

As of June 21, 2026, Rankiteo reports that UK Financial Intelligence Unit (UKFIU) has experienced 24 cybersecurity incidents.

How many peer or competitor companies does UK Financial Intelligence Unit (UKFIU) have ?

UK Financial Intelligence Unit (UKFIU) has an estimated 1,664 peer or competitor companies worldwide.

What types of cybersecurity incidents has UK Financial Intelligence Unit (UKFIU) faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Ransomware, Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UFIU

Boost Score +25 with badge (5 left)

768

/1000

Fair

793

/1000

Fair

UK Financial Intelligence Unit (UKFIU) Vendor Cyber Rating & Cyber Score

nationalcrimeagency.gov.uk

Add Your Compliance Badge

The UKFIU has national responsibility for receiving, analysing and disseminating intelligence submitted through the Suspicious Activity Reports (SARs) regime. It sits at the heart of the regime, providing the gateway to reporters and a repository of data to inform law enforcement. For the 2022-2023 financial year the UKFIU received over 850,000 SARs from over 7,000 organisations. SARs alert law enforcement to potential instances of money laundering or terrorist financing. SARs are made by financial institutions and other professionals such as solicitors, accountants and estate agents and are a vital source of intelligence not only on economic crime but on a wide range of criminal activity. They provide information and intelligence from

UFIU A.I CyberSecurity Scoring

Scoring History

UFIU

UK Financial Intelligence Unit (UKFIU) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Cabinet Office

Breach

5/2026

CAB1777832879

UK Financial Intell...

Vulnerability

12/2025

DCM1765433387

UK Financial Intell...

Breach

11/2025

UK-523475211042...

UK Financial Intell...

Cyber Attack

100

10/2025

UK-556215510202...

Foreign and Commonw...

Breach

10/2025

FOR1766412101

UK Financial Intell...

Ransomware

100

9/2025

DCM1764770468

UK Financial Intell...

Breach

100

8/2025

UK-841081625

UK Financial Intell...

Breach

6/2025

HMR745060625

UK Home Office

Breach

4/2025

UK-1777581082

UK Financial Intell...

Breach

100

7/2024

UK-421016421104...

UK Financial Intell...

Breach

100

6/2024

UK-169221610212...

UK Financial Intell...

Breach

100

4/2024

UK-493314910132...

UK Financial Intell...

Breach

100

8/2023

UK-707072025

UK Financial Intell...

Breach

100

7/2023

UK-221002221104...

UK Financial Intell...

Cyber Attack

100

01/2023

DEP225811123

UK Financial Intell...

Breach

100

6/2022

UK-289342811142...

UK Financial Intell...

Breach

100

2/2022

UK-503305010202...

UK Financial Intell...

Breach

1/2022

UK-559215509112...

UK Financial Intell...

Breach

11/2021

GOV1527121122

UK Financial Intell...

Breach

100

10/2021

UK-576295710232...

UK Financial Intell...

Breach

100

8/2021

UK-552175511242...

UK Financial Intell...

Breach

100

6/2021

UK-089380810032...

UK Financial Intell...

Cyber Attack

100

09/2015

NAT233920422

UK Financial Intell...

Breach

100

6/2010

UK-069420609202...

Loading…

A.I.

UFIU Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UFIU

Incidents vs Law Enforcement Industry Avg (This Year)

No incidents recorded for UK Financial Intelligence Unit (UKFIU) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for UK Financial Intelligence Unit (UKFIU) in 2026.

Incident Types UFIU vs Law Enforcement Industry Avg (This Year)

No incidents recorded for UK Financial Intelligence Unit (UKFIU) in 2026.

Incident History - UFIU (X = Date, Y = Severity)

Loading…

SUBSIDIARY

UK Financial Intelligence Unit (UKFIU) Subsidiaries

UFIU

Law Enforcement

Website: https://www.nationalcrimeagency.gov.uk/what-we-do/crime-threats/money-laundering-and-illicit-finance/suspicious-activity-reports

Company Size: 51-200 employees

UK Civil ServiceGovernment Administration

Department for EducationGovernment Administration

TeachingPrimary and Secondary Education

Buying for SchoolsGovernment Administration

DfE Digital, Data and TechnologyGovernment Relations Services

Skills PartnerGovernment Administration

UK Ministry of DefenceDefense and Space Manufacturing

Defence Equipment & Support (DE&S)Defense and Space Manufacturing

Defence ProcurementDefense & Space

HM Revenue & CustomsGovernment Administration

UK Home OfficeGovernment Administration

Department of Health and Social CareGovernment Relations Services

Department for Business and TradeGovernment Administration

Business SupportGovernment Relations

GREAT Trade and InvestmentWholesale Import and Export

UK Business and Trade - North AmericaGovernment Relations Services

OfstedGovernment Administration

Department for Science, Innovation and TechnologyGovernment Administration

Careers at the Department for Science, Innovation and TechnologyGovernment Administration

Department for Work and Pensions (DWP)Government Administration

Disability ConfidentGovernment Administration

See PotentialGovernment Administration

Cabinet OfficeGovernment Administration

GOV.UKGovernment Relations Services

HM Government Public AppointmentsGovernment Administration

Department for Environment, Food and Rural AffairsGovernment Administration

Defra digital, data, technology and securityIT Services and IT Consulting

Defra Public AppointmentsGovernment Administration

Department for International Development (DFID)Government Administration

UK-Africa Investment Summit 2020Government Administration

Department for Transport (DfT), United KingdomGovernment Administration

Foreign and Commonwealth OfficeGovernment Administration

HM TreasuryPublic Policy Offices

Office of Financial Sanctions Implementation (OFSI)Government Administration

Food Standards AgencyGovernment Administration

Starting a Food BusinessFood & Beverages

Government Legal DepartmentLegal Services

OfgemUtilities

Forestry CommissionGovernment Administration

Department for Culture, Media and SportGovernment Administration

DstlDefense and Space Manufacturing

Data Science ChallengeGovernment Administration

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Northern PowerhouseCivic and Social Organizations

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Office for National StatisticsGovernment Administration

Government Statistical ServiceGovernment Administration

Civil Service Fast Stream Statisticians' OutreachGovernment Administration

Census2021Government Administration

Competition and Markets AuthorityGovernment Administration

Office of Rail and Road (ORR)Truck Transportation

Charity Commission for England and WalesGovernment Administration

UK Export FinanceFinancial Services

OfqualGovernment Administration

HM Land RegistryGovernment Administration

OfwatUtilities

Regulators’ Alliance for Progressing Infrastructure Development (RAPID)Utilities

Infrastructure and Projects Authority (IPA)Government Administration

Northern Ireland OfficeGovernment Administration

Valuation Office AgencyGovernment Administration

Attorney General's Office (UK)Government Administration

UK Government Wales/Llywodraeth DU CymruGovernment Administration

Scotland OfficeGovernment Administration

NS&IFinancial Services

NS&I Government Payment ServicesGovernment Administration

Government Actuary's DepartmentGovernment Administration

UK Statistics Authority Government Administration

Crown Prosecution ServiceLaw Practice

National Crime Agency (NCA)Law Enforcement

National Economic Crime Centre (NECC)Law Enforcement

Loading…

UK Financial Intelligence Unit (UKFIU) Similar Companies

SAPS

saps.gov.za

Policing in South Africa. I am attached to the newly formed Directorate for Priority Crime Investigations. Formally I was attached to the Detecitve Service and have been conduction investigations for over 25 years. I have also been attached to the National Inspectorate Division of the SAPS for soem 10 years.

Government of India

svpnpa.gov.in

he Government of India, officially known as the Union Government, and also known as the Central Government, was established by the Constitution of India, and is the governing authority of a union of 28 states and seven union territories, collectively called the Republic of India. It is seated in New Delhi, the capital of India. The government comprises three branches: the executive, the legislative and the judiciary. The executive branch headed by the President, who is the Head of State and exercises his or her power directly or through officers subordinate to him.[1] The Legislative branch or the Parliament consists of the lower house, the Lok Sabha, and the upper house, the Rajya Sabha, as well as the president. The Judicial branch has the Supreme Court at its apex, 21 High Courts, and numerous civil, criminal and family courts at the district level. The basic civil and criminal laws governing the citizens of India are set down in major parliamentary legislation, such as the Civil Procedure Code, the Indian Penal Code, and the Criminal Procedure Code. The union and individual state governments consist of executive, legislative and judicial branches. The legal system as applicable to the federal and individual state governments is based on the English Common and Statutory Law. India accepts International Court of Justice jurisdiction with several reservations.

Metropolitan Police

police.uk

The Metropolitan Police Service is famed around the world and has a unique place in the history of policing. Our headquarters at New Scotland Yard - and its iconic revolving sign - has provided the backdrop to some of the most high profile and complex law enforcement investigations the world has ever seen. Founded by Sir Robert Peel in 1829, the original establishment of 1,000 officers policed a seven-mile radius from Charing Cross and a population of less than 2 million. Today, The Met employs 32,000 officers together with specialist support staff and more than 2,500 volunteer police officers in the Metropolitan Special Constabulary. As well as policing London’s 620 square miles and 8.9million population, The Met has national responsibility for a variety of specialist policing units and hosts the UK’s Counter Terrorism Policing HQ. The Met is one of the largest employers in London and with a broad range of roles, from neighbourhoods to firearms. We’re recruiting people who want to make a difference, to help people and begin a career in a brilliant organisation, performing an exciting and extremely rewarding role. Today, now more than ever, is the time to join the Met. www.met.police.uk/careers

Swedish Police Authority

polisen.se

Vi gör hela Sverige tryggt och säkert! Att arbeta inom polisen är ett av de finaste uppdrag man kan ha. Du bidrar till samhället genom att göra hela Sverige tryggt och säkert. Oavsett om du jobbar i en civil roll eller som polis, är möjligheterna att växa med en större uppgift många. Vi är Sveriges största myndighet. För att klara vårt uppdrag behövs många olika kompetenser. Här finns ett stort antal yrkesroller att utforska, inspireras och utvecklas av. I samarbete med duktiga och engagerade kollegor har du varje dag chansen att göra skillnad lokalt, regionalt, nationellt eller internationellt. Oavsett vilken väg inom polisen du väljer, står vi starka tillsammans. REGLER FÖR DENNA SIDA Det här är Polismyndighetens officiella LinkedIn-konto. Syftet är att visa hur det är att jobba hos oss och om polisutbildningen. Kontot är bemannat vardagar under kontorstid. Kommentarer kan inte användas för larm, anmälan eller tips till Polisen. Kontakta oss på 114 14, och vid akuta situationer ring 112. Detta innebär även att kommentarer till våra inlägg ska hållas till sakfrågan och hålla en god ton. Alla inlägg i polisens sociala medier blir allmänna handlingar och kan komma att diarieföras. Mer information kring vad som gäller i våra sociala medier finns på vår hemsida: https://polisen.se/someregler

GENDARMERIA NACIONAL ARGENTINA

https://prensagendarmeria.gob.ar

Gendarmer√≠a Nacional Argentina (GNA) es una Fuerza de Seguridad de naturaleza militar, que cumple funciones en la seguridad interior, defensa nacional, auxilio a la Justicia Federal y apoyo a la Pol√≠tica Exterior de la RA. Es una de las cuatro Fuerzas que integran el Ministerio de Seguridad de la Naci√≥n. Historia Durante la presidencia del Dr. Roberto M Ortiz, Gendarmer√≠a Nacional fue creada el 28 de julio del a√±o 1938 por el Congreso Nacional. Las particularidades del territorio donde deb√≠a cumplir la misi√≥n y el car√°cter de √©sta, determinaron que la Fuerza naciera como un Cuerpo con organizaci√≥n, formaci√≥n militar y f√©rrea disciplina, circunstancia que a la fecha se mantiene. Esa es la g√©nesis de su creaci√≥n y el esp√≠ritu que los legisladores imprimieron en el proyecto que luego fue promulgado como Ley N¬∫ 12.367:‚Äúcontribuir decididamente a mantener la identidad nacional en √°reas lim√≠trofes, a preservar el territorio nacional y la intangibilidad del l√≠mite internacional‚Äù. Su personal fue sujeto a un r√©gimen disciplinario castrense, con estructura, capacitaci√≥n, doctrina militar y formaci√≥n jur√≠dica que le permitiera cumplir funciones policiales en tiempo de paz, y en tiempo de guerra integrar el componente terrestre militar: Caso concreto, fue su participaci√≥n en la Guerra de Malvinas en el a√±o 1982. La instituci√≥n se encuentra enmarcada dentro de la Ley Org√°nica N¬∫ 19.349 que regula su organizaci√≥n, misi√≥n, funciones, jurisdicci√≥n y competencias, como el r√©gimen legal de su personal. #gendarmeria

Politie Nederland

kombijdepolitie.nl

Politiemensen staan midden in de maatschappij, dicht op het nieuws. De politie is daar waar het gebeurt. Het optreden van agenten ligt altijd onder een vergrootglas. Bij de politie ben je 24 uur per dag en voor iedereen in onze diverse samenleving. Integer, moedig, betrouwbaar en verbindend zijn daarom onze kernwaarden. Binnen de politieorganisatie kun je op verschillende manieren bijdragen aan een veilige samenleving. Op straat of achter de schermen; elke collega draagt bij aan het politiewerk. Agenten mogen ingrijpen en verdachten hun vrijheid ontnemen als dat nodig is. Je houdt toezicht op straat en bent daar waar jouw hulp nodig is. Je kunt ook kiezen voor een functie in de bedrijfsvoering, bijvoorbeeld in de administratie, ICT of beleid. Of voor een functie bij de financiële of digitale recherche. Maar wat je ook doet, in uniform of juist niet: vakmanschap staat voorop.

New York City Police Department

nyc.gov

Welcome to the Official NYPD LinkedIn Page. For emergencies, dial 911. To submit crime tips & information, visit www.NYPDcrimestoppers.com or call 800-577-TIPS. The mission of the New York City Police Department is to enhance the quality of life in New York City by working in partnership with the community to enforce the law, preserve peace, protect the people, reduce fear, and maintain order. The New York City Police Department strives to foster a safe and fair City by incorporating Neighborhood Policing into all facets of Department operations, and solve the problems that create crime and disorder through an interdependent relationship between the people and its police, and by pioneering strategic innovation.

Federal Bureau of Investigation (FBI)

fbijobs.gov

This is the official Federal Bureau of Investigation (FBI) LinkedIn account and is used to build awareness of workplace culture, engagement opportunities, and the FBI mission. The FBI does not collect comments or messages through this account. The FBI is the premier law enforcement agency in the world. We are an intelligence-driven, outcome-focused national security organization. Steeped in a history of innovation and determination, the Bureau is a collective of individuals united under one unwavering mission: to protect the American people and uphold the U.S. Constitution. The FBI mission guides our efforts and focuses our resources on critical threats, while our core values—respect, integrity, accountability, leadership, compassion, fairness, and rigorous obedience to the Constitution—serve as the foundation of everything we do. The FBI has more than 500 purpose-driven careers—such as special agent, forensic accountant, victim specialist, and IT specialist—to safeguard the nation against cyberattacks, financial fraud, organized crime, and more. We leverage our varied backgrounds, from art history to engineering, to investigate illegal activity. The FBI collaborates worldwide with law enforcement partners and intelligence agencies, providing resources including biometric identification, laboratory examinations, comprehensive training, and more. And while you are investing in us, the FBI is investing in you: Bureau benefits include unparalleled leadership development, advancement and growth opportunities, and an impactful career that enables our workforce to evolve with the mission. Set yourself apart by joining the FBI. Apply today. Note: Submit tips at tips.fbi.gov. Public info may be used for authorized purposes only: justice.gov/doj/privacy-policy.

Loading…

NEWS

UK Financial Intelligence Unit (UKFIU) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 29, 2025 07:00 AM

Adrian Searle, Former NCA NECC Director, Joins TRM as Senior Advisor | TRM Blog

TRM Labs welcomes Adrian Searle as Senior Advisor, strengthening UK partnerships in the fight against fraud, cybercrime,...

Read Article

April 04, 2025 07:00 AM

Credas CEO recommends robust ID verification to fight financial fraud in property market

The property market in the UK, like elsewhere, is not spared from financial fraud. But in order to reverse the tides, estate and letting...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-56355

SUMMARY

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-56347

SUMMARY

AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes, URLs, and text labels. Attackers can inject malicious JavaScript through unescaped menu item fields that execute for all site visitors, potentially stealing session cookies or performing unauthorized actions.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.8

REFERENCES

CVE-2026-56346

SUMMARY

AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that allows unauthenticated users to decrypt PGP messages. Remote attackers can submit private keys, ciphertext, and passphrases to perform server-side decryption without credentials, exposing key material to logs and enabling resource exhaustion attacks.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-56345

SUMMARY

AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target users_id from the uploaded filename without verification. An attacker with knowledge of the Meet shared secret can craft a malicious file upload with a filename containing an arbitrary users_id to invoke passwordless User->login() and establish an authenticated session as any user including admin. Attackers can obtain the Meet shared secret through path-traversal vulnerabilities or timing attacks against checkToken.json.php, then POST a crafted file to uploadRecordedVideo.json.php with a filename like '1-anything.mp4' to hijack admin sessions and gain full account takeover.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-56342

SUMMARY

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL() validation and accepts requests to private IP ranges and cloud metadata endpoints. Attackers can exploit this by crafting requests to internal services, cloud metadata endpoints like 169.254.169.254, and localhost to retrieve sensitive information including IAM credentials, internal service responses, and network configuration details.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…