What is the official website of UniCredit Bulbank ?

The official website of UniCredit Bulbank is http://www.unicreditbulbank.bg.

What is UniCredit Bulbank's cybersecurity risk score?

UniCredit Bulbank has an AI-generated cybersecurity risk score of 759 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has UniCredit Bulbank experienced?

According to Rankiteo, UniCredit Bulbank currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has UniCredit Bulbank been affected by any supply chain cyber incidents ?

According to Rankiteo, UniCredit Bulbank has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does UniCredit Bulbank have SOC 2 Type 1 certification ?

According to Rankiteo, UniCredit Bulbank is not certified under SOC 2 Type 1.

Does UniCredit Bulbank have SOC 2 Type 2 certification ?

According to Rankiteo, UniCredit Bulbank does not hold a SOC 2 Type 2 certification.

Does UniCredit Bulbank comply with GDPR ?

According to Rankiteo, UniCredit Bulbank is not listed as GDPR compliant.

Does UniCredit Bulbank have PCI DSS certification ?

According to Rankiteo, UniCredit Bulbank does not currently maintain PCI DSS compliance.

Does UniCredit Bulbank comply with HIPAA ?

According to Rankiteo, UniCredit Bulbank is not compliant with HIPAA regulations.

Does UniCredit Bulbank have ISO 27001 certification ?

According to Rankiteo,UniCredit Bulbank is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does UniCredit Bulbank operate in ?

UniCredit Bulbank operates primarily in the Banking industry.

How many employees does UniCredit Bulbank have ?

UniCredit Bulbank employs approximately 1,063 people worldwide.

Does UniCredit Bulbank own any subsidiaries ?

UniCredit Bulbank presently has no subsidiaries across any sectors.

How many LinkedIn followers does UniCredit Bulbank have ?

UniCredit Bulbank's official LinkedIn profile has approximately 34,982 followers.

What is the NAICS classification code for UniCredit Bulbank ?

UniCredit Bulbank is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does UniCredit Bulbank have a Crunchbase profile ?

No, UniCredit Bulbank does not have a profile on Crunchbase.

Does UniCredit Bulbank have a LinkedIn profile ?

Yes, UniCredit Bulbank maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/unicredit-bulbank.

How many cybersecurity incidents has UniCredit Bulbank experienced ?

As of August 11, 2026, Rankiteo reports that UniCredit Bulbank has experienced 4 cybersecurity incidents.

How many peer or competitor companies does UniCredit Bulbank have ?

UniCredit Bulbank has an estimated 7,461 peer or competitor companies worldwide.

What types of cybersecurity incidents has UniCredit Bulbank faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UniCredit Bulbank

Boost Score +25 with badge (5 left)

759

/1000

Fair

784

/1000

Fair

UniCredit Bulbank Vendor Cyber Rating & Cyber Score

unicreditbulbank.bg

Add Your Compliance Badge

УниКредит има за цел да създава възможности за развитие на общностите, да предоставя продукти и услуги на всички заинтересовани страни, и да отключва потенциала на всеки. Ние сме паневропейска банка: 13 банки по целия континет, които работят заедно като едно цяло, използвайки силата на колектива, за да предоставят услуги на нашите клиенти, служители и инвеститори. Имаме обща култура, която вдъхновява нашите хора. Поставяме ценностите - почтеност, отговорност и грижа в основата на начина, по който взимаме решение. Работим, за да създадем банка на бъдещето на Европа - банка, която предоставя услуги на всички заинтересовани страни и е в състояние да отключи потенциала на хората, бизнеса и общностите в цяла Европа. УниКредит е банката на

UniCredit Bulbank A.I CyberSecurity Scoring

Scoring History

UniCredit Bulbank

UniCredit Bulbank CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UniCredit Bulbank

Data Leak

04/2020

UNI1246291222

UniCredit Bulbank

Data Leak

10/2019

UNI32523423

UniCredit Bulbank

Breach

08/2017

UNI182081122

UniCredit Bulbank

Data Leak

07/2017

UNI174241022

Loading…

A.I.

UniCredit Bulbank Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UniCredit Bulbank

Incidents vs Banking Industry Avg (This Year)

No incidents recorded for UniCredit Bulbank in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for UniCredit Bulbank in 2026.

Incident Types UniCredit Bulbank vs Banking Industry Avg (This Year)

No incidents recorded for UniCredit Bulbank in 2026.

Incident History - UniCredit Bulbank (X = Date, Y = Severity)

Loading…

SUBSIDIARY

UniCredit Bulbank Subsidiaries

UniCredit Bulbank

Banking

Website: http://www.unicreditbulbank.bg

Company Size: 1,063

UniCreditBanking

HypoVereinsbank - UniCredit - DeutschlandBanking

Zagrebačka bankaBanking

UniCredit Bank HungaryBanking

UniCredit Bank CZ & SKBanking

UniCredit Bank RussiaBanking

UniCredit Banka Slovenija d.d.Banking

UniCredit Bank RomaniaBanking

UniCredit Bank SerbiaBanking

UniCredit Bank Bosna i HercegovinaBanking

UniCredit Bank a.d. Banja LukaBanking

UniCredit Bank Austria AGBanking

Loading…

UniCredit Bulbank Similar Companies

Equitas Small Finance Bank

cb linktr.ee

Equitas Small Finance Bank is an active member of the communities where we live and work, and a strong philanthropic partner enabling individuals, families, businesses, and entire communities in their financial aspirations with seamless banking services. We take the responsibility to be good neighbours, and are committed to our legacy of giving back to our communities. We aim at changing the way banking is imagined delivered and experienced – with Fairness & Transparency being the key drivers.

Bank Mega

bankmega.com

Sebagai bagian dari CT Corp, Bank Mega terus menghadirkan layanan perbankan yang modern, inklusif, dan berorientasi pada kebutuhan masyarakat Indonesia. Mengusung visi “Menjadi Kebanggaan Bangsa”, kami berkomitmen menciptakan nilai tambah bagi nasabah dan karyawan melalui sinergi ekosistem terintegrasi, sekaligus menjadi tempat terbaik bagi talenta untuk tumbuh dan berkontribusi bagi kemajuan bangsa. Bank Mega juga konsisten mengembangkan layanan perbankan digital dengan menyediakan solusi yang mudah, aman, dan efisien bagi nasabah. Sebagai salah satu pelopor implementasi QRIS Cross Border untuk transaksi lintas negara dan QRIS TAP untuk layanan transportasi, Bank Mega memperkuat komitmennya melalui aplikasi M-Smile untuk menciptakan pengalaman transaksi yang nyaman. Langkah ini menegaskan tekad Bank Mega untuk memberikan pengalaman perbankan yang modern, relevan, dan turut mendukung pertumbuhan ekonomi digital Indonesia. Didukung oleh sumber daya manusia yang profesional, budaya kerja Dynamics, Entrepreneurship, Trust, Ethics, Commitment, dan Synergy (DETECS) menjadi fondasi kami dalam menciptakan lingkungan kerja yang kolaboratif dan berdaya saing tinggi. Melalui berbagai inisiatif, penghargaan, dan program berkelanjutan, Bank Mega terus memperkuat perannya sebagai lembaga keuangan yang mendorong pertumbuhan ekonomi nasional sekaligus memberikan dampak positif bagi masyarakat. Pencapaian terbaru Bank Mega di tahun 2025: * Investortrust – The Best Bank 2025 untuk kategori KBMI 3 * Stellar Workplace Recognition in Employee Commitment 2025 * Stellar Workplace Recognition in Employee Satisfaction 2025 * 100 Indonesia's Biggest Companies 2025 versi Fortune Indonesia * Katadata ESG Index Awards sebagai Green Economy Winner untuk sektor (Finance - Bank Sector) Dan masih banyak pencapaian lainnya. Jika Anda mencari tempat untuk berkembang, berkontribusi, dan menjadi bagian dari transformasi industri perbankan Indonesia, inilah saatnya #SuksesBarengMega

Yapı Kredi

yapikredi.com.tr

Yapı Kredi has been sustainably strengthening its market positioning in the sector since its establishment in 1944 through a customer-centric approach and focus on innovation. Yapı Kredi is the 3rd largest private bank in Turkey with total assets worth TL 411 billion as of the end of 2019. Constantly seeking to increase its contribution to the financing of the Turkish economy with its customer-centric approach, Yapı Kredi enlarged the volume of its total cash and non-cash loans by 4% in 2019 to TL 319 billion. Thus, Yapı Kredi maintained its position in 2nd place among private banks in this respect. The Bank serves its customers with its 846 branches covering all regions of Turkey and 16,631 employees. Yapı Kredi delivers its products and services via its advanced Alternative Delivery Channels (ADCs) that comprise 4,330 ATMs, innovative internet banking, leading mobile banking, 3 call centers and approximately 709 thousand POS terminals. 94% of the Bank’s transactions went through non-branch channels as at year-end 2019. Yapı Kredi is a fully integrated financial services group supported by its domestic and international subsidiaries. Yapı Kredi serves its customers through retail banking (comprising of individual banking, Small and Medium Size Enterprises (SME) banking and card payment systems, private banking and wealth management), as well as corporate and commercial banking. The Bank’s operations are supported by domestic subsidiaries in asset management, brokerage, leasing and factoring as well as international banking subsidiaries in the Netherlands, Malta and Azerbaijan. Yapı Kredi has a strong shareholding structure which ensures sustainable and profitable growth. 40.95% of the Bank’s shares are owned by Koç Financial Services, 9.02% of the shares are owned by Koç Holding A.Ş. The total direct and indirect shares of Koç Group amount to 49.99%. 20.00% of Bank’s shares are owned by UniCredit S.P.A. The remaining 30.03% is publicly traded on Borsa Istanbul

UBL - United Bank Limited

ubldigital.com

On 7 November 1959, UBL’s first branch at II Chundrigar Road in Karachi was inaugurated and with it launched a culture of service, innovation and financial excellence in Pakistan. A banking company incorporated in Pakistan and engaged in commercial banking and related services, UBL operates one of the largest branch networks in Pakistan, augmented by its industry leading digital banking services which have earned it local and international recognition. Aiming to being the undisputed leader in financial services for our customers as well as the most innovative and fastest growing bank in targeted businesses, UBL is dedicated to its customers, stakeholders, its diverse team and the communities it operates in. VIS Credit Rating Company ltd. (VIS) has reaffirmed the entity ratings of UBL at ‘AAA/A-1+’ (Triple A / A-One Plus). The Bank is listed in Pakistan, with its Global Depository Receipts (GDRs) on the list of the UK Listing Authority and London Stock Exchange Professional Securities Market. It is a subsidiary of Bestway (Holdings) Limited which is incorporated in the United Kingdom. About Bestway Group Bestway Group is a diversified multinational family-owned business and the largest overseas investor in Pakistan. Bestway Group was founded in 1976 by Sir Anwar Pervez OBE HPk, who remains Chairman. Serving over 12 million customers and employing over 28,000 individuals, the Group supports and serves communities through its operations across the UK, Pakistan and the Middle East. UBL is one of the 6 subsidiaries of the Bestway Group which also contains Bestway Wholesale, Well Pharmacy, Real Estate, Bestway Cement Limited and Bestway Foundation.

La Banque Postale

labanquepostale.com

La Banque Postale is a ‘bank like no other’ driven by the post office values of local presence and service. As heir to La Poste Financial Services, it is the only bank to have been tasked with a mission to provide access to banking services under the law introduced to modernise the French economy in 2008. Accessible, straightforward, local, transparent, useful, substantial and supportive… La Banque Postale is the bank for everyone : nearly half of the French population has at least one of the Bank’s products. It serves more 10 million active personal customers and 475,000 business customers. More and more customers join La Banque Postale every day, attracted by its commitment to build a long-term relationship with each individual on the basis of sound advice and trust. This trust is earned and strengthened on a day-to-day basis by the Bank’s teams working in post offices, financial centres, subsidiary companies and central services departments. Because it is a ‘bank like no other’, La Banque Postale puts the interest of its customers above all other considerations at the heart of its organisational structure. Being a ‘bank like no other’ means being useful by offering a range of no-frills products and services tailored to meet the essential needs of all customers at affordable prices. It also means supporting everyone in achieving their life goals, offering everyday financial management products and delivering a more comfortable life with real peace of mind.

BNP Paribas Fortis

bnpparibasfortis.be

For over 200 years, BNP Paribas Fortis has helped drive the growth and prosperity of Belgium’s economy and communities. The mission of our 12,000 colleagues is clear: be the trusted financial partner for four million individual customers, businesses and organisations. We do this by offering advice and solutions via the channels they prefer: digitally, by phone, via video call or in a bank or post office branch.

PKO Bank Polski

cb pkobp.pl

We are the largest bank in Poland and one of the largest financial institutions in the region. Our strength rests on three strong pillars: the retail, the corporate and the investment segment. Irrespective of the unique nature of each of those areas, what joins them is the undivided attention they pay to the needs of their customers and clients, and their pursuit of superlative quality in customer service. Consistent campaigning established the “PKO Bank Polski” brand as a virtual guarantee of the right banking partner choice, one that not only delivers the relevant products and services, but also provides capable support in financial and business decisions. The professionalism and the experience of our advisers help them meet their customers’ expectations and to offer them the best available solutions. Though traditionally dedicated to retail customers, over the years PKO Bank Polski has also become a corporate finance leader of the Polish market. As at the end of 2012, the number our corporate clients exceeded 12,000. For years now, our corporate banking segment has participated in projects of major importance for the entire Polish economy. We have financed major investment projects, engaged in restructuring and recovery processes and have supported regional development through solutions dedicated to local government units. In 2012 we continued in activity that perpetuated our image of a true partner of the Polish enterprise and local government sectors, which we gained during the first wave of the financial crisis. At the heart of our corporate offer is our ability to engineer comprehensive solutions out of the products of the Bank and its Group Companies (factoring, leasing) of relevance to the differing needs of the various size companies: from small entities in the early stages of development to the largest corporates.

Regions Bank

regions.com

Regions Financial Corporation is a member of the S&P 500 Index and is one of the nation’s largest full-service providers of consumer and commercial banking, wealth management, and mortgage products and services. Regions serves customers across the South, Midwest and Texas, and through its subsidiary, Regions Bank, operates more than 1,250 banking offices and more than 2,000 ATMs. Additional information about Regions and its full line of products and services can be found at www.regions.com. Ticker Symbol: RF on the NYSE Regions' Social Media & Community Guidelines: http://spr.ly/lismcg Regions' Privacy & Security Policy: http://spr.ly/lipp https://www.regions.com/help/social-media Regions Bank, Member FDIC. Equal Housing Lender. NMLS #174490. Only bank deposits are FDIC insured. Non-Deposit Products including Investments, Securities, Mutual Funds, Insurance Products, Crypto Assets, and Annuities Are Not FDIC Insured | Are Not Bank Guaranteed | May Lose Value | Are Not Deposits | Are not a condition of any Banking Activity | Are Not Insured by any Government Agency Equal Opportunity Employer/Including Disabled/Veterans Regions provides links to other websites or apps for your convenience and does not control the content, services or products provided on the linked website or app, whose Privacy and security policies or procedures may differ. Consult the policies or disclosures on their website. © 2025 Regions Bank. Regions and the Regions logo are registered trademarks of Regions Bank. The LifeGreen color is a trademark of Regions Bank.

Sberbank

cb sber.ru

Сбер — крупнейший банк в России, поставщик надёжных технологических решений и один из ведущих финансовых институтов страны. Мы не боимся меняться и открывать новые горизонты, но в то же время остаёмся верными принципам, сформированным за нашу 180-летнюю историю. Такой подход позволяет нам создавать и развивать десятки технологичных направлений. Нашими сервисами пользуются миллионы людей, а над их созданием и совершенствованием работают десятки тысяч сотрудников. Sber is the largest bank in Russia, supplier of reliable technological solutions and one of the leading national financial institutions. We are not afraid to change and open up new horizons, but at the same time we remain true to the principles that have been formed over our 180-year history. This approach allows us to create and develop dozens of technological areas. Our services are used by millions of people, and thousands of employees are working on their creation and improvement.

Loading…

NEWS

UniCredit Bulbank CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 15, 2023 08:00 AM

Together4Digital initiative launched to support digitalization of Bulgarian small and medium companies

UniCredit Bulbank in collaboration with Microsoft and Crayon plans to support 6.000 companies with free consultations to digitalize their...

Read Article

February 14, 2023 08:00 AM

UniCredit Bulbank, Microsoft, Crayon partner to support Bulgarian SMEs

Bulgaria's UniCredit Bulbank said on Tuesday that it launched jointly with technology companies Microsoft and Crayon an initiative to help...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8718

SUMMARY

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 8.4)

cvss3

Base Score: 8.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Impact Score

5.8

Exploitability

REFERENCES

CVE-2026-48161

SUMMARY

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/dai-shi/react18-use/security/advisories/GHSA-32xh-vg5f-64fm

CVE-2026-11812

SUMMARY

The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 2.5)

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-11811

SUMMARY

The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2025-30241

SUMMARY

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.tp-link.com/us/support/faq/5239/

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…