What is the official website of Urssaf Alsace ?

The official website of Urssaf Alsace is https://alsace.urssaf.fr/accueil.html.

What is Urssaf Alsace's cybersecurity risk score?

Urssaf Alsace has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Urssaf Alsace experienced?

According to Rankiteo, Urssaf Alsace currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Urssaf Alsace been affected by any supply chain cyber incidents ?

According to Rankiteo, Urssaf Alsace has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Urssaf Alsace have SOC 2 Type 1 certification ?

According to Rankiteo, Urssaf Alsace is not certified under SOC 2 Type 1.

Does Urssaf Alsace have SOC 2 Type 2 certification ?

According to Rankiteo, Urssaf Alsace does not hold a SOC 2 Type 2 certification.

Does Urssaf Alsace comply with GDPR ?

According to Rankiteo, Urssaf Alsace is not listed as GDPR compliant.

Does Urssaf Alsace have PCI DSS certification ?

According to Rankiteo, Urssaf Alsace does not currently maintain PCI DSS compliance.

Does Urssaf Alsace comply with HIPAA ?

According to Rankiteo, Urssaf Alsace is not compliant with HIPAA regulations.

Does Urssaf Alsace have ISO 27001 certification ?

According to Rankiteo,Urssaf Alsace is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Urssaf Alsace operate in ?

Urssaf Alsace operates primarily in the Government Administration industry.

How many employees does Urssaf Alsace have ?

Urssaf Alsace employs approximately 151 people worldwide.

Does Urssaf Alsace own any subsidiaries ?

Urssaf Alsace presently has no subsidiaries across any sectors.

How many LinkedIn followers does Urssaf Alsace have ?

Urssaf Alsace's official LinkedIn profile has approximately 2,401 followers.

What is the NAICS classification code for Urssaf Alsace ?

Urssaf Alsace is classified under the NAICS code 92, which corresponds to Public Administration.

Does Urssaf Alsace have a Crunchbase profile ?

No, Urssaf Alsace does not have a profile on Crunchbase.

Does Urssaf Alsace have a LinkedIn profile ?

Yes, Urssaf Alsace maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/urssaf-alsace.

How many cybersecurity incidents has Urssaf Alsace experienced ?

As of July 26, 2026, Rankiteo reports that Urssaf Alsace has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Urssaf Alsace have ?

Urssaf Alsace has an estimated 13,060 peer or competitor companies worldwide.

What types of cybersecurity incidents has Urssaf Alsace faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Urssaf Alsace

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

Urssaf Alsace Vendor Cyber Rating & Cyber Score

urssaf.fr

Add Your Compliance Badge

Le réseau des Urssaf collecte les cotisations et contributions sociales, sources du financement du régime général de la Sécurité sociale. L'Urssaf, organisme de droit privé chargé d'une mission de service public, a notamment pour rôles de : • Collecter les cotisations et contributions sociales, • Concourir à la promotion des politiques de l'emploi, • Assurer la prévention et le traitement des difficultés de paiement des entreprises, • Participer à la lutte contre le travail illégal, • Développer des services de simplification des formalités sociales, • Contribuer à l'information des décideurs.

Urssaf Alsace A.I CyberSecurity Scoring

Scoring History

Urssaf Alsace

Urssaf Alsace CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Urssaf Alsace

Breach

03/2022

ASS133730422

Urssaf Alsace

Breach

03/2022

CNA1491522

Loading…

A.I.

Urssaf Alsace Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Urssaf Alsace

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Urssaf Alsace in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Urssaf Alsace in 2026.

Incident Types Urssaf Alsace vs Government Administration Industry Avg (This Year)

No incidents recorded for Urssaf Alsace in 2026.

Incident History - Urssaf Alsace (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Urssaf Alsace Subsidiaries

Urssaf Alsace

Government Administration

Website: https://alsace.urssaf.fr/accueil.html

Company Size: 151

110

ACOSSGovernment Administration

Sécurité socialeGovernment Administration

Assurance MaladieGovernment Administration

Assurance Maladie - Risques professionnelsGovernment Administration

CNAMGovernment Administration

CPAM de Lille-Douai Government Administration

Caisse Primaire d’Assurance Maladie (CPAM) de l’OiseGovernment Administration

CPAM de Paris (Assurance Maladie)Government Administration

CramifGovernment Administration

CPAM de la Haute-Garonne (Assurance Maladie)Government Administration

Assurance Maladie de Loire-Atlantique (CPAM)Government Administration

CPAM de Seine-et-Marne (Assurance Maladie)Government Administration

CPAM des Bouches-du-Rhône (Assurance Maladie)Government Administration

CPAM du Val-de-MarneGovernment Administration

CPAM de l'Hérault (Assurance Maladie)Government Administration

CPAM des YvelinesGovernment Administration

CPAM de la Sarthe (Assurance Maladie)Government Administration

CPAM du Var (Assurance Maladie)Government Administration

Assurance Maladie de la MancheGovernment Administration

CPAM de la GirondeGovernment Administration

Assurance Maladie du Morbihan (Cpam)Government Administration

CPAM du Bas-Rhin (Assurance Maladie)Government Administration

CPAM de la Côte-d’Or (Assurance Maladie) Government Administration

UGECAM Ile-de-FranceHospitals and Health Care

Assurance Maladie Rouen-Elbeuf-Dieppe Seine-MaritimeGovernment Administration

CPAM de Roubaix-Tourcoing (Assurance Maladie)Government Administration

Assurance Maladie de la VendéeGovernment Administration

CPAM de MoselleGovernment Administration

CPAM du Hainaut (Assurance Maladie) Government Administration

CPAM de Haute-Savoie Government Administration

Assurance Maladie de l'EssonneGovernment Administration

CPAM de Meurthe-et-Moselle (Assurance Maladie)Government Administration

CPAM de Maine-et-Loire (Assurance Maladie)Government Administration

CPAM Alpes-Maritimes (Assurance Maladie)Government Administration

Cpam de la Loire (Assurance Maladie)Government Administration

CPAM du Cher (Assurance Maladie)Government Administration

CPAM des Flandres (Assurance Maladie)Government Administration

Assurance Maladie du LoiretGovernment Administration

Assurance Maladie de l'IndreGovernment Administration

CPAM de la Drôme (Assurance Maladie)Government Administration

CPAM des Pyrénées-Orientales (Assurance Maladie)Government Administration

CPAM de Loir-et-Cher (Assurance Maladie)Government Administration

CPAM du Doubs (Assurance Maladie)Government Administration

CPAM de la Vienne (Assurance Maladie)Government Administration

CPAM d'Indre-et-LoireGovernment Administration

Assurance Maladie du Tarn (CPAM)Government Administration

Assurance Maladie des Côtes d'ArmorGovernment Administration

CPAM de la Savoie (Assurance Maladie)Government Administration

Assurance Maladie de l'OrneGovernment Administration

CPAM de l'AllierInsurance

CPAM de la Charente (Assurance Maladie)Government Administration

Accélérateur 51 Government Administration

Assurance Maladie du Tarn et Garonne (CPAM)Government Administration

CPAM de Saône-et-Loire (Assurance Maladie)Government Administration

CPAM de l'AinGovernment Administration

CPAM des Landes (Assurance Maladie)Government Administration

CPAM du Haut-Rhin (Assurance Maladie)Government Administration

Assurance Maladie de l'Aude (cpam Aude)Government Administration

Direction régionale du service médical (DRSM) Centre-Val de LoireGovernment Administration

CPAM de la Haute-VienneGovernment Administration

CPAM d'Eure-et-LoirGovernment Administration

CPAM du Cantal (Assurance Maladie)Government Administration

Assurance Maladie de la Charente-MaritimeGovernment Administration

Assurance Maladie du Gers (CPAM)Government Administration

Centre de Médecine Préventive (Assurance Maladie)Government Administration

CPAM de l'Ardèche (Assurance Maladie)Government Administration

CPAM de l'Ariège (Assurance Maladie)Government Administration

CPAM du Val-d'OiseGovernment Administration

Assurance Maladie Ille-et-Vilaine (Cpam)Government Administration

CPAM de la Côte d'Opale (Assurance Maladie) Government Administration

Direction Régionale du Service Médical Nouvelle-AquitaineGovernment Administration

CPAM du RhôneGovernment Administration

CPAM des Deux-Sèvres (Assurance Maladie)Government Administration

UCANSSGovernment Administration

Institut 4.10Professional Training and Coaching

Caf du GardGovernment Administration

CGSS Réunion Government Administration

L'Assurance retraiteGovernment Administration

Carsat Hauts-de-FranceGovernment Administration

CnavGovernment Administration

Carsat Rhône AlpesGovernment Administration

Carsat Sud-EstGovernment Administration

CARSAT AquitaineGovernment Administration

Carsat Pays de la LoireGovernment Administration

Carsat AuvergneGovernment Administration

Carsat NormandieGovernment Administration

Carsat BretagneGovernment Administration

Carsat Nord-EstGovernment Administration

Carsat Alsace Moselle Government Administration

Carsat Midi-PyrénéesGovernment Administration

Caf de la Haute-GaronneGovernment Administration

Caf du Pas-de-CalaisGovernment Administration

Caf de l'HéraultGovernment Administration

CGSS de Guadeloupe et de Saint-MartinGovernment Administration

CamiegGovernment Administration

RSIGovernment Administration

Caf de l'OiseGovernment Administration

Urssaf Languedoc-RoussillonGovernment Administration

Urssaf Ile-de-FranceGovernment Administration

Urssaf Pays de la LoireGovernment Administration

Urssaf PacaGovernment Administration

Urssaf Nord - Pas-de-CalaisGovernment Administration

Mes premiers mois avec l'Urssaf Nord - Pas-de-CalaisGovernment Administration

Urssaf BretagneGovernment Administration

Urssaf PicardieGovernment Administration

Urssaf Poitou-CharentesGovernment Administration

Urssaf Franche-ComtéGovernment Administration

Urssaf Champagne-ArdenneGovernment Administration

Urssaf BourgogneGovernment Administration

Urssaf CorseGovernment Administration

Loading…

Urssaf Alsace Similar Companies

Helsingin kaupunki – Helsingfors stad – City of Helsinki

hel.fi

#MeTeemmeHelsingin Helsingin kaupunki on Suomen suurin työnantaja, jonka palveluksessa on lähes 39 000 ammattilaista ja asiantuntijaa. Helsingin kaupunki tarjoaa henkilöstölle monipuolisia, mielenkiintoisia ja yhteiskunnallisesti merkittäviä työtehtäviä, hyvät mahdollisuudet kehittymiseen, ammattitaitoiset työkaverit, työaikajoustot sekä kilpailukykyiset henkilöstöedut. Lisää kaupungista työnantajana: https://www.hel.fi/fi/avoimet-tyopaikat/miksi-toihin-kaupungille Helsingin kaupungin kotisivut: www.hel.fi *** Helsingfors stad, Finlands största arbetsgivare, har cirka 39 000 anställda. Dessa yrkesmänniskor och experter, som företräder ett antal olika branscher. Tack vare stadens och sektorernas storlek har de anställda mångsidiga, intressanta och samhälleligt viktiga arbetsuppgifter, goda möjligheter att utbilda sig och utvecklas, yrkeskunniga arbetskamrater, arbetstidsflexibilitet och konkurrenskraftiga personalförmåner. Mer om staden som arbetsgivare: https://www.hel.fi/sv/lediga-jobb/varfor-borja-arbeta-hos-staden Helsinki stad webbplats: www.hel.fi/sv *** The City of Helsinki is Finland’s biggest employer with 39 000 employees, who are professionals and experts of various fields. The large size of the City and the wide scope of the fields of employment give the City personnel versatile and socially important jobs, good opportunities for training and development on the job, skilled colleagues, flexible working hours and competitive personnel benefits. City as an employer: https://www.hel.fi/en/open-jobs/why-work-for-the-city City of Helsinki website: www.hel.fi/en

State of California

ca.gov

Californians deserve a government that works for them and with them. One that will work to ensure opportunity and justice. We are building a California not for the few, but for all — including those who have historically been left out. We are doing the work to make our state a place for every Californian and all the diversity that makes us strong. Our state will be known as a place where everyone is respected, protected, and connected.

Department of Education

vic.gov.au

The Department of Education is responsible for delivering the Victorian Government’s commitment to making Victoria the Education State, where all Victorians have the best learning and development experience, regardless of their background, postcode or circumstances. Education remains a cornerstone for ensuring all Victorians have the skills and knowledge they need to actively participate in and contribute to our rapidly-changing economy and society. The Department delivers and regulates statewide learning and development services across the early childhood and school sectors. Previously the Department of Education and Training.

US Environmental Protection Agency (EPA)

cb epa.gov

U.S. Environmental Protection Agency’s (EPA) mission is to protect human health and the environment. EPA works to ensure that: - Americans have clean air, land and water; - National efforts to reduce environmental risks are based on the best available scientific information; - Federal laws protecting human health and the environment are administered and enforced fairly, effectively and as Congress intended; - Environmental stewardship is integral to U.S. policies concerning natural resources, human health, economic growth, energy, transportation, agriculture, industry, and international trade, and these factors are similarly considered in establishing environmental policy; - All parts of society--communities, individuals, businesses, and state, local and tribal governments--have access to accurate information sufficient to effectively participate in managing human health and environmental risks; - Contaminated lands and toxic sites are cleaned up by potentially responsible parties and revitalized; and - Chemicals in the marketplace are reviewed for safety. The agency was founded in 1970 and is headquartered in Washington, District of Columbia with ten additional regional headquarters offices (Boston, New York, Philadelphia, Atlanta, Chicago, Dallas, Kansas City, Denver, San Francisco, and Seattle) as well as more than a dozen laboratories, and other regional and programmatic offices.

City of Amsterdam

amsterdam.nl

Working for Amsterdam means working for the most beautiful city in the world. Think of its rich history, the role Amsterdam plays internationally, and events such as Sail, Gay Pride and King’s Day. Of course everybody wants to visit Amsterdam, or work or live here. As you can probably imagine, working for Amsterdam is a challenge every day. How do we handle the growing bustle in the inner city? Or the high demand for new homes? Or obesity among young children? At the municipality of Amsterdam we work daily on challenging projects like these. Good for Amsterdam, good for you Each field of work, ranging from social affairs, customer and information services to environmental planning and economy, has its own challenges. You have to deal with the interests of many parties, often conflicting. Each day you will be looking for solutions that suit the needs of residents, entrepreneurs and visitors. This can make working for the city difficult sometimes, but it is what characterises the job. We work in an open, active, honest, ethical and fair manner, so that is what we would expect from you as well.

U.S. Department of the Treasury

treasury.gov

The Treasury Department is the executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. The Department is responsible for a wide range of activities such as advising the President on economic and financial issues, encouraging sustainable economic growth, and fostering improved governance in financial institutions. The Department of the Treasury operates and maintains systems that are critical to the nation's financial infrastructure, such as the production of coin and currency, the disbursement of payments to the American public, revenue collection, and the borrowing of funds necessary to run the federal government. The Department works with other federal agencies, foreign governments, and international financial institutions to encourage global economic growth, raise standards of living, and to the extent possible, predict and prevent economic and financial crises. The Treasury Department also performs a critical and far-reaching role in enhancing national security by implementing economic sanctions against foreign threats to the U.S., identifying and targeting the financial support networks of national security threats, and improving the safeguards of our financial systems.

ISSSTE

www.com

INSTITUTO DE SEGURIDAD Y SERVICIOS SOCIALES DE LOS TRABAJADORES DEL ESTADO. ES UN ORGANISMOS PÚBLICO QUE OTORGA SERVICIOS DE SALUD, PENSIONES, VIVIENDA, PRÉSTAMOS, ESTANCIAS INFANTILES, TURISMO, CULTURA, RECREACION, DEPORTE; CUYOS AFILIADOS SON TRABAJADORES DE DEPENDENCIAS GUBERNAMENTALES, CON DERECHO A LA SEGURIDAD SOCIAL. Y CUYOS OBJETIVOS INSTITUCIONALES ADEMÁS DE CONTRIBUIR A LOGRAR LOS OBJETIVOS PROPUESTOS POR EL PLAN NACIONAL DE DESARROLLO 2007 – 2012, COADYUVARÁN A LOGRAR LA VISIÓN DE LA INSTITUCIÓN ESTABLECIDA PARA EL AÑO 2030 Y CONCRETAR LA MISIÓN QUE TIENE ESTABLECIDA. MISIÓN DEL ISSSTE CONTRIBUIR A SATISFACER NIVELES DE BIENESTAR INTEGRAL DE LOS TRABAJADORES AL SERVICIO DEL ESTADO, PENSIONADOS, JUBILADOS Y FAMILIARES DERECHOHABIENTES, CON EL OTORGAMIENTO EFICAZ Y EFICIENTE DE LOS SEGUROS, PRESTACIONES Y SERVICIOS, CON ATENCIÓN ESMERADA, RESPETO, CALIDAD Y CUMPLIENDO SIEMPRE CON LOS VALORES INSTITUCIONALES DE HONESTIDAD, LEGALIDAD Y TRANSPARENCIA. VISIÓN DEL ISSSTE POSICIONAR AL ISSSTE COMO LA INSTITUCIÓN QUE GARANTICE LA PROTECCIÓN INTEGRAL DE LOS TRABAJADORES DE LA ADMINISTRACIÓN PÚBLICA FEDERAL, PENSIONADOS, JUBILADOS Y SUS FAMILIAS DE ACUERDO AL NUEVO PERFIL DEMOGRÁFICO DE LA DERECHOHABIENCIA, CON EL OTORGAMIENTO DE SEGUROS, PRESTACIONES Y SERVICIOS DE CONFORMIDAD CON LA NORMATIVIDAD VIGENTE, BAJO CÓDIGOS NORMADOS DE CALIDAD Y CALIDEZ, CON SOLVENCIA FINANCIERA, QUE PERMITAN GENERAR VALORES Y PRÁCTICAS QUE FOMENTEN LA MEJORA SOSTENIDA DE BIENESTAR, CALIDAD DE VIDA Y EL DESARROLLO DEL CAPITAL HUMANO. PARA CONOCER MAS DE NUESTRO INSTITUTO FAVOR DE CONSULTAR LA PAGINA INSTITUCIONAL WWW2.ISSSTE.GOB.MX EN DONDE SEGURAMENTE ENCONTRARAN MATERIAL DE ORIENTACION AMENO Y EXPLICATIVO ADEMAS DE LA HISTORIA DE INSTITUTO, SUS ALCANCES Y LOGROS ASI COMO LOS PROGRAMAS CON QUE CUENTA ACTUALMENTE EL INSTITUTO.

FDA

fda.gov

The Food and Drug Administration is an agency within the Department of Health and Human Services. The FDA is responsible for protecting the public health by ensuring the safety, efficacy, and security of human and veterinary drugs, biological products, and medical devices; and by ensuring the safety of our nation's food supply, cosmetics, and products that emit radiation. FDA also has responsibility for regulating the manufacturing, marketing, and distribution of tobacco products to protect the public health and to reduce tobacco use by minors. FDA is responsible for advancing the public health by helping to speed innovations that make medical products more effective, safer, and more affordable and by helping the public get the accurate, science-based information they need to use medical products and foods to maintain and improve their health. FDA also plays a significant role in the Nation's counterterrorism capability. FDA fulfills this responsibility by ensuring the security of the food supply and by fostering development of medical products to respond to deliberate and naturally emerging public health threats.

UWV

uwv.nl

Bij UWV werken we aan een samenleving waarin iedereen mee kan doen. We helpen mensen op weg bij het vinden of behouden van werk. In geval van ziekte kijken we wat iemand nog wél kan. En als werken niet mogelijk is, zorgt UWV snel voor inkomen. We geven op deskundige en efficiënte wijze uitvoering aan werknemersverzekeringen, zoals de WW, WIA, WAO, WAZ, Wajong, Wazo en Ziektewet. Bij UWV werken ruim 22.000 mensen, die allen bijdragen aan een samenleving waarin iedereen mee kan doen. Onze medewerkers zijn er voor werkzoekenden, werkenden, mensen met een afstand tot de arbeidsmarkt, stakeholders én werkgevers. Als je bij UWV werkt, weet je waar je het voor doet: mensen verder helpen met werk en inkomen. Werken bij UWV is tastbaar, je werkt aan echte vraagstukken van mensen, ieder met eigen uitdagingen, ambities en drijfveren. Zo leveren medewerkers van UWV allemaal een bijdrage aan een samenleving waarin iedereen mee kan doen. Want bij UWV werk je niet alleen voor jezelf. Je werkt voor ons allemaal.

Loading…

NEWS

Urssaf Alsace CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-10681

SUMMARY

In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permission index from the global _thread_idx_map[] bitmap without holding lists_lock. On SMP systems, two user-mode threads invoking the k_object_alloc(K_OBJ_THREAD) syscall concurrently can both observe the same low free bit, perform the same non-atomic RMW to clear it, and return the identical tidx. The two newly created K_OBJ_THREAD objects are then assigned the same thread_id, so the two user threads alias a single bit position in every kernel object's perms[] bitfield: any subsequent grant of access on a kernel object to one thread is implicitly a grant to the other, defeating userspace ACL isolation. A secondary lost-update window between the unlocked &=~BIT() in alloc and the locked |= BIT() in thread_idx_free() can also leak entries from the thread-index pool. The defect is reachable from any user-mode thread via the unrestricted __syscall k_object_alloc and is gated on CONFIG_USERSPACE, CONFIG_DYNAMIC_OBJECTS, and CONFIG_SMP. The flaw was introduced when the per-thread permission index was added in 2018 and is present in every release up to and including v4.4.0. Fixed by holding lists_lock across the bitmap RMW and the permissions clear (and inlining the obj_list traversal that previously took the lock itself).

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Impact Score

5.5

Exploitability

REFERENCES

CVE-2026-66013

SUMMARY

OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without authentication or ownership validation, redirecting notifications or denying delivery to legitimate consoles.

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-66012

SUMMARY

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check (model.CheckAuth) with no admin-role or read-only enforcement. This exposes 31 MCP tools, including a file tool with list/read/write/delete/rename/copy actions across the entire workspace. When the Publish server is enabled in anonymous mode (Conf.Publish.Enable=true and Conf.Publish.Auth.Enable=false), the Publish reverse proxy attaches an anonymous RoleReader JWT to proxied requests, allowing a remote unauthenticated attacker to reach /mcp. The attacker can read conf/conf.json to extract accessAuthCode, api.token, and cookieKey in plaintext, write arbitrary files in the workspace, and plant a plugin into data/plugins/ that executes with nodeIntegration:true and no contextIsolation on the next desktop launch, leading to administrator takeover.

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: 10)

cvss3

Base Score: 10.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.9

REFERENCES

CVE-2026-66011

SUMMARY

ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed command-line arguments to consume system resources.

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-64529

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (qat_adf_ctl) with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public uAPI header and have no known in-tree or out-of-tree users. Device lifecycle is already managed via sysfs. The ioctl interface also increases the attack surface and is the subject of a number of bug reports. Remove the character device, the IOCTL definitions, and the related data structures (adf_dev_status_info, adf_user_cfg_key_val, adf_user_cfg_section, adf_user_cfg_ctl_data). Drop the now-unused adf_cfg_user.h header and strip adf_ctl_drv.c down to the minimal module_init/module_exit hooks for workqueue, AER, and crypto/compression algorithm registration. Clean up leftover dead code that was only reachable from the removed IOCTL paths: adf_cfg_del_all(), adf_devmgr_verify_id(), adf_devmgr_get_num_dev(), adf_devmgr_get_dev_by_id(), adf_get_vf_real_id() and the unused ADF_CFG macros. Additionally, drop the entry associated to QAT IOCTLs in ioctl-number.rst.

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…