What is the official website of Scotland Office ?

The official website of Scotland Office is http://www.gov.uk/scotland.

What is Scotland Office's cybersecurity risk score?

Scotland Office has an AI-generated cybersecurity risk score of 759 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Scotland Office experienced?

According to Rankiteo, Scotland Office currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Scotland Office been affected by any supply chain cyber incidents ?

According to Rankiteo, Scotland Office has been affected by a supply chain cyber incident involving Fortinet, with the incident ID FORGOV1783297461.

Does Scotland Office have SOC 2 Type 1 certification ?

According to Rankiteo, Scotland Office is not certified under SOC 2 Type 1.

Does Scotland Office have SOC 2 Type 2 certification ?

According to Rankiteo, Scotland Office does not hold a SOC 2 Type 2 certification.

Does Scotland Office comply with GDPR ?

According to Rankiteo, Scotland Office is not listed as GDPR compliant.

Does Scotland Office have PCI DSS certification ?

According to Rankiteo, Scotland Office does not currently maintain PCI DSS compliance.

Does Scotland Office comply with HIPAA ?

According to Rankiteo, Scotland Office is not compliant with HIPAA regulations.

Does Scotland Office have ISO 27001 certification ?

According to Rankiteo,Scotland Office is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Scotland Office operate in ?

Scotland Office operates primarily in the Government Administration industry.

How many employees does Scotland Office have ?

Scotland Office employs approximately 75 people worldwide.

Does Scotland Office own any subsidiaries ?

Scotland Office presently has no subsidiaries across any sectors.

How many LinkedIn followers does Scotland Office have ?

Scotland Office's official LinkedIn profile has approximately 14,591 followers.

What is the NAICS classification code for Scotland Office ?

Scotland Office is classified under the NAICS code 92, which corresponds to Public Administration.

Does Scotland Office have a Crunchbase profile ?

No, Scotland Office does not have a profile on Crunchbase.

Does Scotland Office have a LinkedIn profile ?

Yes, Scotland Office maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ukgovscotland.

How many cybersecurity incidents has Scotland Office experienced ?

As of July 31, 2026, Rankiteo reports that Scotland Office has experienced 27 cybersecurity incidents.

How many peer or competitor companies does Scotland Office have ?

Scotland Office has an estimated 13,095 peer or competitor companies worldwide.

What types of cybersecurity incidents has Scotland Office faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach, Vulnerability and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Scotland Office

Boost Score +25 with badge (5 left)

759

/1000

Fair

784

/1000

Fair

Scotland Office Vendor Cyber Rating & Cyber Score

www.gov.uk

Add Your Compliance Badge

The UK Government’s office for Scotland. With offices in Edinburgh and London, we ensure the smooth working of the devolution settlement in Scotland. We represent Scottish interests within the UK government and we represent the UK government in Scotland.

Scotland Office A.I CyberSecurity Scoring

Scoring History

Scotland Office

Scotland Office CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UK Ministry of Defe...

Breach

100

7/2026

UK-1785371161

Foreign and Commonw...

Cyber Attack

100

7/2026

Fortinet

FORGOV178329746...

Cabinet Office

Breach

5/2026

CAB1777832879

Scotland Office

Vulnerability

12/2025

DCM1765433387

Scotland Office

Breach

11/2025

UK-523475211042...

Scotland Office

Cyber Attack

100

10/2025

UK-556215510202...

Foreign and Commonw...

Breach

10/2025

FOR1766412101

Scotland Office

Ransomware

100

9/2025

DCM1764770468

Scotland Office

Breach

100

8/2025

UK-841081625

Scotland Office

Breach

6/2025

HMR745060625

UK Home Office

Breach

4/2025

UK-1777581082

Scotland Office

Breach

100

7/2024

UK-421016421104...

Scotland Office

Breach

100

6/2024

UK-169221610212...

Scotland Office

Breach

100

4/2024

UK-493314910132...

Scotland Office

Breach

100

8/2023

UK-707072025

Scotland Office

Breach

100

7/2023

UK-221002221104...

Scotland Office

Cyber Attack

100

01/2023

DEP225811123

Scotland Office

Breach

100

6/2022

UK-289342811142...

Scotland Office

Breach

100

2/2022

UK-503305010202...

Scotland Office

Breach

1/2022

UK-559215509112...

Scotland Office

Breach

11/2021

GOV1527121122

Scotland Office

Breach

100

10/2021

UK-576295710232...

HM Revenue & Custom...

Cyber Attack

9/2021

HMR1782752907

Scotland Office

Breach

100

8/2021

UK-552175511242...

Scotland Office

Breach

100

6/2021

UK-089380810032...

Scotland Office

Cyber Attack

100

09/2015

NAT233920422

Scotland Office

Breach

100

6/2010

UK-069420609202...

Loading…

A.I.

Scotland Office Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Scotland Office

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Scotland Office in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Scotland Office in 2026.

Incident Types Scotland Office vs Government Administration Industry Avg (This Year)

No incidents recorded for Scotland Office in 2026.

Incident History - Scotland Office (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Scotland Office Subsidiaries

Scotland Office

Government Administration

Website: http://www.gov.uk/scotland

Company Size: 75

UK Civil ServiceGovernment Administration

Department for EducationGovernment Administration

TeachingPrimary and Secondary Education

Buying for SchoolsGovernment Administration

DfE Digital, Data and TechnologyGovernment Relations Services

Skills PartnerGovernment Administration

HM Revenue & CustomsGovernment Administration

Department for Business and TradeGovernment Administration

Business SupportGovernment Relations

GREAT Trade and InvestmentWholesale Import and Export

UK Business and Trade - North AmericaGovernment Relations Services

Cabinet OfficeGovernment Administration

GOV.UKGovernment Relations Services

HM Government Public AppointmentsGovernment Administration

Foreign and Commonwealth OfficeGovernment Administration

Food Standards AgencyGovernment Administration

Starting a Food BusinessFood & Beverages

Department for Work and Pensions (DWP)Government Administration

Disability ConfidentGovernment Administration

See PotentialGovernment Administration

DstlDefense and Space Manufacturing

Data Science ChallengeGovernment Administration

Competition and Markets AuthorityGovernment Administration

UK Export FinanceFinancial Services

OfqualGovernment Administration

HM Land RegistryGovernment Administration

OfwatUtilities

Regulators’ Alliance for Progressing Infrastructure Development (RAPID)Utilities

Infrastructure and Projects Authority (IPA)Government Administration

Attorney General's Office (UK)Government Administration

Northern Ireland OfficeGovernment Administration

Valuation Office AgencyGovernment Administration

UK Government Wales/Llywodraeth DU CymruGovernment Administration

NS&IFinancial Services

NS&I Government Payment ServicesGovernment Administration

Government Actuary's DepartmentGovernment Administration

UK Statistics Authority Government Administration

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Northern PowerhouseCivic and Social Organizations

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Department for Science, Innovation and TechnologyGovernment Administration

Careers at the Department for Science, Innovation and TechnologyGovernment Administration

Office of Rail and Road (ORR)Truck Transportation

Department for International Development (DFID)Government Administration

UK-Africa Investment Summit 2020Government Administration

Charity Commission for England and WalesGovernment Administration

Department of Health and Social CareGovernment Relations Services

Department for Transport (DfT), United KingdomGovernment Administration

OfstedGovernment Administration

Department for Environment, Food and Rural AffairsGovernment Administration

Defra digital, data, technology and securityIT Services and IT Consulting

Defra Public AppointmentsGovernment Administration

HM TreasuryPublic Policy Offices

Office of Financial Sanctions Implementation (OFSI)Government Administration

National Crime Agency (NCA)Law Enforcement

UK Financial Intelligence Unit (UKFIU)Law Enforcement

Crown Prosecution ServiceLaw Practice

Forestry CommissionGovernment Administration

Department for Culture, Media and SportGovernment Administration

OfgemUtilities

Government Legal DepartmentLegal Services

Office for National StatisticsGovernment Administration

Government Statistical ServiceGovernment Administration

Civil Service Fast Stream Statisticians' OutreachGovernment Administration

Census2021Government Administration

UK Ministry of DefenceDefense and Space Manufacturing

Defence Equipment & Support (DE&S)Defense and Space Manufacturing

Defence ProcurementDefense & Space

UK Home OfficeGovernment Administration

Loading…

Scotland Office Similar Companies

United States Postal Service

usps.com

As the United States Postal Service continues its evolution as a forward-thinking, fast-acting company capable of providing quality products and services for its customers, it continues to remember and celebrate its roots as the first national network of communications that literally bound a nation together. Ours is a proud heritage built on a simple yet profound mission: Bind the nation together. Connect every American, every door, every business, everywhere through the simple act of delivering mail and packages. This idea of universal service is at the heart of the $1.4 trillion industry that employs more than 7.5 million people and drives commerce, plays an integral part in every American community and remains the greatest value of any post in the world. The Postal Service delivers more mail to more addresses in a larger geographical area than any other post in the world. The Postal Service delivers to more than 157 million addresses in every state, city and town in this country. Everyone living in the United States and its territories has access to postal products and services and pays the same postage regardless of their location. The Postal Service receives no tax dollars for operating expenses and relies on the sale of postage, products and services to fund its operations. Facebook: www.facebook.com/usps Twitter: www.twitter.com/usps Instagram: www.instagram.com/uspostalservice Pinterest: www.pinterest.com/uspsstamps YouTube: www.youtube.com/usps Corporate Blog: www.uspsblog.com This profile, while affiliated with the U.S. Postal Service®, is not an official customer service page. Please use one of the methods described below to receive assistance. Get help on twitter @USPSHelp or call 800-275-8777or go to go.usa.gov/help Thank you

Comunidad de Madrid

comunidad.madrid

Si necesitas información general y especializada sobre los servicios públicos madrileños puedes llamar al teléfono de Atención al Ciudadano 012. En la Comunidad de Madrid estamos encantados de recibir comentarios y favorecer el diálogo, por eso te proponemos unas normas básicas de participación: - Respeta a los demás usuarios y haz un uso adecuado de la red al publicar un comentario. Se eliminará cualquier mensaje difamatorio, ofensivo, amenazador, grosero o que esté penado por las leyes españolas. - Haz comentarios relacionados con lo publicado, sé lo más breve posible y evita las mayúsculas. Se borrarán aquellos comentarios que se consideren fuera de tema. - No están permitidos los mensajes que contengan spam o publicidad intrusiva. - La Comunidad de Madrid no se hace responsable del contenido de las opiniones que los participantes dejan en los comentarios, ni se identifica con ellas. ¡Esperamos tu participación! Síguenos también en www.twitter.com/ComunidadMadrid y www.facebook.com/ComunidadeMadrid.

State of Michigan

Michigan.gov

Every day the contributions and achievements of State of Michigan employees have a direct impact on over 10 million Michiganders across the state. If you're looking for a fulfilling career in state government that can make a real difference in the lives of others, you can find your place working with us. We have opportunities in a number of career pathways, including, but not limited to, business and administrative support, education and human services, IT and computers, medical and healthcare, natural resources, law enforcement and public safety, skilled trades and more. Join our team for an: - Opportunity to make a difference - Challenging and rewarding work - Competitive salaries - Fun working environment - Great benefits (community service, vacation and sick leave, paid holidays, paid parental leave, longevity bonuses) - Job stability and career advancement - Flexible alternative and remote work schedules - Tuition discounts and student loan forgiveness - Professional development/training - Employee discount plan With positions in over 18 state departments, your perfect career fit is waiting for you at the State of Michigan. From urban centers to beach towns to the great outdoors, the opportunities are endless in Pure Michigan. With your state salary and benefits and Michigan’s affordable cost of living, you can explore all that Michigan has to offer. Ready to join our team? Visit www.Michigan.gov/Employment to search hundreds of state job openings by key word, job type, location, department, job category, salary and more. The State of Michigan is an Equal Opportunity Employer. We aim to recruit, hire, develop, and retain a diverse and high performing workforce. Our diversity helps drive our creative and effective problem solving, mutual respect, teamwork, and effective communication with the people we serve. Follow us on social media at www.Michigan.gov/SocialMedia and search hashtag #MiGovJobs for updates from state agencies.

Helsingin kaupunki – Helsingfors stad – City of Helsinki

hel.fi

#MeTeemmeHelsingin Helsingin kaupunki on Suomen suurin työnantaja, jonka palveluksessa on lähes 39 000 ammattilaista ja asiantuntijaa. Helsingin kaupunki tarjoaa henkilöstölle monipuolisia, mielenkiintoisia ja yhteiskunnallisesti merkittäviä työtehtäviä, hyvät mahdollisuudet kehittymiseen, ammattitaitoiset työkaverit, työaikajoustot sekä kilpailukykyiset henkilöstöedut. Lisää kaupungista työnantajana: https://www.hel.fi/fi/avoimet-tyopaikat/miksi-toihin-kaupungille Helsingin kaupungin kotisivut: www.hel.fi *** Helsingfors stad, Finlands största arbetsgivare, har cirka 39 000 anställda. Dessa yrkesmänniskor och experter, som företräder ett antal olika branscher. Tack vare stadens och sektorernas storlek har de anställda mångsidiga, intressanta och samhälleligt viktiga arbetsuppgifter, goda möjligheter att utbilda sig och utvecklas, yrkeskunniga arbetskamrater, arbetstidsflexibilitet och konkurrenskraftiga personalförmåner. Mer om staden som arbetsgivare: https://www.hel.fi/sv/lediga-jobb/varfor-borja-arbeta-hos-staden Helsinki stad webbplats: www.hel.fi/sv *** The City of Helsinki is Finland’s biggest employer with 39 000 employees, who are professionals and experts of various fields. The large size of the City and the wide scope of the fields of employment give the City personnel versatile and socially important jobs, good opportunities for training and development on the job, skilled colleagues, flexible working hours and competitive personnel benefits. City as an employer: https://www.hel.fi/en/open-jobs/why-work-for-the-city City of Helsinki website: www.hel.fi/en

Council Careers Victoria

asn.au

Victorian local government jobs offer opportunities for people with diverse skills. The sector delivers more than 100 services and employs staff in the areas of health and community care, corporate and business support, engineering, planning and community development, and environment and emergency management. Local government offers you the opportunity to: • work directly with the community • work in any location across the state • be involved in on-going learning and development • negotiate flexible working arrangements • take part in employee health and recreation programs • undertake further study.

Ministry of Health Saudi Arabia

moh.gov.sa

The Ministry of Health (MOH), by way of its objectives, policies and projects included in this strategy, seeks to accomplish a promising future vision; namely, delivering best-quality integrated and comprehensive healthcare services. Carrying health conditions or health status of Saudi inhabitants to the best and highest possible level, in terms of justice and equality in providing healthcare, and in terms of effectiveness and the possibility of incurring the financial burden of the treatment and healthcare. In doing so, the MOH takes as its target meeting citizens’ aspirations in this regard, by providing them with high-quality general and specialized health services, and covering all the population with these services. Creating a sole and exclusive entity to formulate health policies including health insurance services, etc. (such as operating the recently established Health Services Council.) Adopting a public and national health strategy which focuses of the main morbidity burdens; including non-communicable diseases, nutrition, reproductive health, smoking (tobacco-use), AIDS, traffic accidents, and injuries. The system must have an effective and fair method for estimating risks and benefits. Working to diversify sources of revenues to finance the system effectively. These sources must include also public revenues and insurance premiums, in addition to the equally allocated costs and taxes.

Nav

nav.no

Nav er en viktig del av sikkerhetsnettet i velferdsstaten. Vi skal bidra til at flere kommer i arbeid og færre går på stønad, og samtidig sørge for at de som trenger det er sikra inntekt og økonomisk trygghet gjennom rett pengestøtte til rett tid. For å løse dette samfunnsoppdraget forvalter Nav om lag en tredel av statsbudsjettet, gjennom ordninger som arbeidsrettede tiltak, dagpenger, arbeidsavklaringspenger, sykepenger, pensjon, økonomisk sosialhjelp, foreldrepenger, barnetrygd og kontantstøtte. Nav tilbyr tjenester, ytelser og stønader til både privatpersoner og arbeidsgivere. For å sikre helhetlige tjenester, samarbeider vi tett med arbeidslivet, kommune-, helse- og utdanningssektoren, andre statlige virksomheter og frivillige aktører.

Ministero dell'Interno

interno.gov.it

Il ministero dell'Interno è una struttura complessa il cui assetto organizzativo è disciplinato dal D.L.vo n. 300/99 e dai provvedimenti attuativi. A livello centrale, si articola in uffici di diretta collaborazione con il ministro (D.P.R. n. 98/2002) e cinque dipartimenti (D.P.R. n. 398/2001 e successive modificazioni); a livello periferico, in Prefetture-Uffici Territoriali di Governo, Questure e Comandi dei Vigili del fuoco.

The Singapore Public Service

careers.gov.sg

The Singapore Public Service works with the elected Government and Singaporeans to forge a common vision of Singapore’s future and bring it into reality. We take pride in living out our values of integrity, service and excellence. Follow us for stories on how our public officers are contributing to Public Sector Transformation by: · Innovating to deliver even better policies and services for Singaporeans and Singapore · Planning ahead for future challenges · Building a flourishing public service workforce and resilient, future-ready organisations. Gain insights on how our officers are: · Making an impact and realising their aspirations through access to a diverse range of exciting roles · Growing and learning in their jobs every day through the purposeful work they do and the diverse development opportunities across the public service · Balancing their work-life priorities through flexible work arrangements and employee wellness programmes. Shape Singapore’s future and yours with us. Join us to make a difference today for tomorrow.

Loading…

NEWS

Scotland Office CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 28, 2025 08:00 AM

Who is Ciaran Martin, the ex-spook now investigating the OBR budget leak?

Former head of the UK's National Cyber Security Centre, Ciaran Martin, has been brought in to probe the unprecedented premature release of...

Read Article

November 07, 2025 08:00 AM

'Grand Theft Employment!' — Protests Outside Take-Two and Rockstar North Offices as Fired Staff Deny Leaking Company Secrets

Fired Rockstar Games staff have protested outside the UK offices of parent company Take-Two and developer Rockstar North today,...

Read Article

September 03, 2025 07:00 AM

Glasgow teens inspired by 'Empowering Women in Cyber' event

Teenaged girls from across Glasgow have taken part in a ground-breaking tech event hosted by Glasgow Caledonian University.

Read Article

August 18, 2025 07:00 AM

Cybersecurity specialist expands with new Leeds office - move “lays the perfect foundations for our continued growth”

A Leeds-headquartered human risk management platform is set to double its workforce after securing new city centre office space.

Read Article

July 31, 2025 07:00 AM

Cybercriminals Are Watching: Why Law Firms Need a Better Defence

Cybercrime is not caused by lone hackers - it's a global, professionalised industry. In this interview, Kerrie Machin, Business Development...

Read Article

July 23, 2025 07:00 AM

Edinburgh cyber security firm collapses leaving '100 workers without pay'

'Sustained margin and cashflow pressures' proved insurmountable and the business became insolvent last week.

Read Article

July 22, 2025 07:00 AM

Cybersecurity player Adarma is closed down with the loss of over 170 jobs

Cybersecurity services firm Adarma has gone bust, leading to 173 staff losing their jobs. Edinburgh-based Adarma, which was founded in 2009,...

Read Article

July 16, 2025 07:00 AM

Interpath takes over as Edinburgh cyber security company enters administration

Will Wright and Alistair McAlinden from Interpath have been appointed joint administrators to Edinburgh-based cyber security firm Adarma Limited.

Read Article

July 15, 2025 07:00 AM

More than 170 jobs lost as Scottish cybersecurity firm falls into administration

Adarma, which was based out of Edinburgh's Fountainbridge area, was one of the largest independent cybersecurity services companies in the...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66720

SUMMARY

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66421

SUMMARY

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can craft a message containing inline event handler payloads such as an img tag with an onerror attribute within the 60-character rendering budget, which is stored in the session transcript and interpolated unsanitized into innerHTML on the default landing page, allowing theft of session tokens and unauthorized calls to authenticated administrative endpoints including agent instruction file modification.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 9.3)

cvss3

Base Score: 9.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.8

Exploitability

2.8

REFERENCES

CVE-2026-66420

SUMMARY

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName() function within webserver.js when self-signed certificates are in use. Attackers can open cross-origin WebSocket connections to any of the twelve WebSocket endpoints, send crafted action commands to exfiltrate the server sessionKey used to sign session cookies, forge session tokens as arbitrary users, and gain full remote control of all managed devices governed by the MeshCentral instance.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-66369

SUMMARY

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap out-of-bounds read. On affected platforms, this condition reliably terminates the subscriber process and causes a denial-of-service.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66364

SUMMARY

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte. This out-of-bounds read reliably terminates the subscriber process, resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…