What is the official website of Urssaf Pays de la Loire ?

The official website of Urssaf Pays de la Loire is http://www.urssaf.fr.

What is Urssaf Pays de la Loire's cybersecurity risk score?

Urssaf Pays de la Loire has an AI-generated cybersecurity risk score of 761 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Urssaf Pays de la Loire experienced?

According to Rankiteo, Urssaf Pays de la Loire currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Urssaf Pays de la Loire been affected by any supply chain cyber incidents ?

According to Rankiteo, Urssaf Pays de la Loire has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Urssaf Pays de la Loire have SOC 2 Type 1 certification ?

According to Rankiteo, Urssaf Pays de la Loire is not certified under SOC 2 Type 1.

Does Urssaf Pays de la Loire have SOC 2 Type 2 certification ?

According to Rankiteo, Urssaf Pays de la Loire does not hold a SOC 2 Type 2 certification.

Does Urssaf Pays de la Loire comply with GDPR ?

According to Rankiteo, Urssaf Pays de la Loire is not listed as GDPR compliant.

Does Urssaf Pays de la Loire have PCI DSS certification ?

According to Rankiteo, Urssaf Pays de la Loire does not currently maintain PCI DSS compliance.

Does Urssaf Pays de la Loire comply with HIPAA ?

According to Rankiteo, Urssaf Pays de la Loire is not compliant with HIPAA regulations.

Does Urssaf Pays de la Loire have ISO 27001 certification ?

According to Rankiteo,Urssaf Pays de la Loire is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Urssaf Pays de la Loire operate in ?

Urssaf Pays de la Loire operates primarily in the Government Administration industry.

How many employees does Urssaf Pays de la Loire have ?

Urssaf Pays de la Loire employs approximately 330 people worldwide.

Does Urssaf Pays de la Loire own any subsidiaries ?

Urssaf Pays de la Loire presently has no subsidiaries across any sectors.

How many LinkedIn followers does Urssaf Pays de la Loire have ?

Urssaf Pays de la Loire's official LinkedIn profile has approximately 4,461 followers.

What is the NAICS classification code for Urssaf Pays de la Loire ?

Urssaf Pays de la Loire is classified under the NAICS code 92, which corresponds to Public Administration.

Does Urssaf Pays de la Loire have a Crunchbase profile ?

No, Urssaf Pays de la Loire does not have a profile on Crunchbase.

Does Urssaf Pays de la Loire have a LinkedIn profile ?

Yes, Urssaf Pays de la Loire maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/urssaf-pays-de-la-loire.

How many cybersecurity incidents has Urssaf Pays de la Loire experienced ?

As of September 14, 2026, Rankiteo reports that Urssaf Pays de la Loire has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Urssaf Pays de la Loire have ?

Urssaf Pays de la Loire has an estimated 13,422 peer or competitor companies worldwide.

What types of cybersecurity incidents has Urssaf Pays de la Loire faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UPDLL

Boost Score +25 with badge (5 left)

761

/1000

Fair

786

/1000

Fair

Urssaf Pays de la Loire Vendor Cyber Rating & Cyber Score

urssaf.fr

Add Your Compliance Badge

Union de recouvrement de la Sécurité sociale et des allocations familiales Union de recouvrement de la Sécurité sociale et des allocations familiales

UPDLL

Urssaf Pays de la Loire CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Urssaf Pays de la L...

Breach

03/2022

ASS133730422

Urssaf Pays de la L...

Breach

03/2022

CNA1491522

Loading…

A.I.

UPDLL Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UPDLL

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Urssaf Pays de la Loire in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Urssaf Pays de la Loire in 2026.

Incident Types UPDLL vs Government Administration Industry Avg (This Year)

No incidents recorded for Urssaf Pays de la Loire in 2026.

Incident History - UPDLL (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Urssaf Pays de la Loire Subsidiaries

UPDLL

Government Administration

Website: http://www.urssaf.fr

Company Size: 501-1,000 employees

110

ACOSSGovernment Administration

Sécurité socialeGovernment Administration

Assurance MaladieGovernment Administration

CNAMGovernment Administration

Caisse Primaire d’Assurance Maladie (CPAM) de l’OiseGovernment Administration

CPAM de Paris (Assurance Maladie)Government Administration

Assurance Maladie - Risques professionnelsGovernment Administration

CPAM de Lille-Douai Government Administration

CramifGovernment Administration

CPAM de la Haute-Garonne (Assurance Maladie)Government Administration

Assurance Maladie de Loire-Atlantique (CPAM)Government Administration

CPAM des Bouches-du-Rhône (Assurance Maladie)Government Administration

CPAM des YvelinesGovernment Administration

CPAM de Seine-et-Marne (Assurance Maladie)Government Administration

CPAM du Var (Assurance Maladie)Government Administration

CPAM du Val-de-MarneGovernment Administration

CPAM de la GirondeGovernment Administration

CPAM de l'Hérault (Assurance Maladie)Government Administration

CPAM du Bas-Rhin (Assurance Maladie)Government Administration

Assurance Maladie Ille-et-Vilaine (Cpam)Government Administration

Assurance Maladie de la MancheGovernment Administration

CPAM du Val-d'OiseGovernment Administration

CPAM de la Sarthe (Assurance Maladie)Government Administration

UGECAM Ile-de-FranceHospitals and Health Care

Assurance Maladie Rouen-Elbeuf-Dieppe Seine-MaritimeGovernment Administration

Assurance Maladie de la VendéeGovernment Administration

CPAM de la Côte-d’Or (Assurance Maladie) Government Administration

CPAM du Hainaut (Assurance Maladie) Government Administration

CPAM de Roubaix-Tourcoing (Assurance Maladie)Government Administration

CPAM de Meurthe-et-Moselle (Assurance Maladie)Government Administration

CPAM du Cher (Assurance Maladie)Government Administration

CPAM de Haute-Savoie Government Administration

CPAM Alpes-Maritimes (Assurance Maladie)Government Administration

Assurance Maladie de l'EssonneGovernment Administration

CPAM des Flandres (Assurance Maladie)Government Administration

Assurance Maladie du LoiretGovernment Administration

CPAM de MoselleGovernment Administration

CPAM de Maine-et-Loire (Assurance Maladie)Government Administration

CPAM de la Vienne (Assurance Maladie)Government Administration

CPAM des Pyrénées-Orientales (Assurance Maladie)Government Administration

CPAM de la Drôme (Assurance Maladie)Government Administration

CPAM de Loir-et-Cher (Assurance Maladie)Government Administration

Assurance Maladie du Tarn (CPAM)Government Administration

CPAM d'Indre-et-LoireGovernment Administration

CPAM de l'AinGovernment Administration

Assurance Maladie de l'IndreGovernment Administration

CPAM de l'AllierInsurance

CPAM de l'Ardèche (Assurance Maladie)Government Administration

Assurance Maladie de l'OrneGovernment Administration

Assurance Maladie des Côtes d'ArmorGovernment Administration

Accélérateur 51 Government Administration

CPAM de Saône-et-Loire (Assurance Maladie)Government Administration

Direction régionale du service médical (DRSM) Centre-Val de LoireGovernment Administration

Assurance Maladie de la Charente-MaritimeGovernment Administration

Assurance Maladie de l'Aude (cpam Aude)Government Administration

CPAM de la Haute-VienneGovernment Administration

CPAM d'Eure-et-LoirGovernment Administration

Assurance Maladie du Gers (CPAM)Government Administration

CPAM de la Savoie (Assurance Maladie)Government Administration

CPAM du Cantal (Assurance Maladie)Government Administration

Centre de Médecine Préventive (Assurance Maladie)Government Administration

CPAM de la Charente (Assurance Maladie)Government Administration

CPAM de l'Ariège (Assurance Maladie)Government Administration

CPAM du Haut-Rhin (Assurance Maladie)Government Administration

CPAM du Doubs (Assurance Maladie)Government Administration

CPAM des Landes (Assurance Maladie)Government Administration

Assurance Maladie du Tarn et Garonne (CPAM)Government Administration

Cpam de la Loire (Assurance Maladie)Government Administration

Assurance Maladie du Morbihan (Cpam)Government Administration

CPAM du RhôneGovernment Administration

CPAM des Deux-Sèvres (Assurance Maladie)Government Administration

Direction Régionale du Service Médical Nouvelle-AquitaineGovernment Administration

CPAM de la Côte d'Opale (Assurance Maladie) Government Administration

UCANSSGovernment Administration

Institut 4.10Professional Training and Coaching

Caf du GardGovernment Administration

L'Assurance retraiteGovernment Administration

CnavGovernment Administration

Carsat Hauts-de-FranceGovernment Administration

Carsat NormandieGovernment Administration

Carsat Sud-EstGovernment Administration

Carsat BretagneGovernment Administration

Carsat Pays de la LoireGovernment Administration

Carsat Rhône AlpesGovernment Administration

CARSAT AquitaineGovernment Administration

Carsat AuvergneGovernment Administration

Carsat Nord-EstGovernment Administration

Carsat Alsace Moselle Government Administration

CGSS Réunion Government Administration

Carsat Midi-PyrénéesGovernment Administration

Caf de l'HéraultGovernment Administration

Caf du Pas-de-CalaisGovernment Administration

CGSS de Guadeloupe et de Saint-MartinGovernment Administration

Caf de la Haute-GaronneGovernment Administration

CamiegGovernment Administration

Caf de l'OiseGovernment Administration

RSIGovernment Administration

Urssaf Ile-de-FranceGovernment Administration

Urssaf Languedoc-RoussillonGovernment Administration

Urssaf AlsaceGovernment Administration

Urssaf PicardieGovernment Administration

Urssaf Champagne-ArdenneGovernment Administration

Urssaf BourgogneGovernment Administration

Urssaf BretagneGovernment Administration

Urssaf Poitou-CharentesGovernment Administration

Urssaf Franche-ComtéGovernment Administration

Urssaf CorseGovernment Administration

Urssaf PacaGovernment Administration

Urssaf Nord - Pas-de-CalaisGovernment Administration

Mes premiers mois avec l'Urssaf Nord - Pas-de-CalaisGovernment Administration

Loading…

Urssaf Pays de la Loire Similar Companies

State of Minnesota

mn.gov

Minnesota State Government is the third largest employer in the state of Minnesota, employing over 50,000 diverse and talented employees in more than 100 state agencies, boards, commissions, colleges, and universities. Our workplaces can be found across the state in 86 out of 87 Minnesota counties and a small share of employees work in out-of-state locations. When you bring your career to the State of Minnesota, the work you do affects the quality of life of millions of Minnesotans. From those who shape policy, to those who keep us safe, preserve our environment, or take care of our most vulnerable populations, we take our responsibilities to the public seriously. Join us as we continue to serve our great state and build a better Minnesota. To learn more about our career opportunities and comprehensive benefits, visit www.mn.gov/careers. To learn more about our state agencies, boards, commissions, colleges, and universities, visit http://mn.gov/portal/government/state/agencies-boards-commissions.

eThekwini Municipality

durban.gov.za

EThekwini Municipality is a Metropolitan Municipality found in the South African province of KwaZulu-Natal. Home to the world-famous city of Durban. EThekwini is the largest City in the province and the third largest city in the country. It is a sophisticated cosmopolitan city of over 3 468 088 people. It is known as the home of Africa's best-managed, busiest port and is also a major centre of tourism because of the city's warm subtropical climate and extensive beaches. The eThekwini Municipality is an employer of choice, with excellent working conditions and competitive salary packages for employees. The Municipality is committed to creating a great place to work by creating development opportunities for employees to grow. Working for eThekwini Municipality will give you a chance to make a difference in people’s lives and become part of our team to make Durban the most caring and liveable city in Africa. Some facts about eThekwini Municipality: 1. Known as South Africa’s Playground – plenty of places to visit and activities to do 2. First African city to host the Commonwealth Games 3. Historically rich with Heritage sites for Nelson Mandela and Mahatma Ghandi 4. Home to the Comrades Marathon – The worlds’ largest ultra-marathon 5. The world’s tallest bungee swing at the Moses Mabhida stadium 6. Durban Aliwal Shoal – a world top diving site 7. Durban harbour - 9th largest harbour in the world - busiest container port in Africa 8. Africa’s first Aerotropolis – Trade Port with direct links globally 9. One of the top surfing destinations in South Africa 10. Ushaka Marine World – Biggest Aquarium in Africa

IBGE

ibge.gov.br

The Brazilian Institute of Geography and Statistics or IBGE (Portuguese: Instituto Brasileiro de Geografia e Estatística), is the agency responsible for statistical, geographic, cartographic, geodetic and environmental information in Brazil. The IBGE performs a national census every ten years, and the questionnaires account for information such as age, household income, literacy, education, occupation and hygiene levels. IBGE is an institution of the Federal Government, constituted a public foundation by Decree Law No. 161 of February 13, 1967, and is bound to the Brazilian Department of Planning, Budget and Management. It has four directors and two other central organs. IBGE has a network of national research and dissemination components, comprising: 27 state units (26 in state capitals and one in the Federal District); 27 centres for documentation and dissemination of information (26 in the capital and one in the Federal District); 581 data collection agencies in major cities. The IBGE also maintains the Roncador Ecological Reserve, situated 35 km south of Brasília.

Ministère de l'Éducation nationale

gouv.fr

Page officielle du ministère de l'Éducation nationale. Retrouvez toute l'information sur www.education.gouv.fr, twitter.com/education_gouv, facebook.com/education.gouv et dans nos lettres d'informations (bulletin hebdo et lettre education.gouv.fr). ------------------------------------------------------------- Le ministère de l'Éducation nationale est en charge de la préparation et de la mise en œuvre de la politique du Gouvernement concernant la jeunesse, au sein et en dehors du milieu scolaire, et l'accès de chacun aux savoirs et au développement de l'enseignement pré-élémentaire, élémentaire et secondaire. Ses compétences principales s’exercent dans : la définition des voies de formation, la fixation des programmes nationaux, l'organisation et le contenu des enseignements ; la définition et la délivrance des diplômes nationaux et la collation des grades et titres universitaires ; / le recrutement et la gestion des personnels qui dépendent de sa responsabilité ; / la répartition des moyens qu'il consacre à l'éducation, afin d'assurer en particulier l'égalité d'accès au service public ; le contrôle et l'évaluation des politiques éducatives, en vue d'assurer la cohérence d'ensemble du système éducatif. L'administration de l'Éducation nationale est présente dans chaque région et dans chaque département : ce sont les services déconcentrés du ministère de l'Éducation nationale. Son organisation s’articule autour de 17 régions académiques, 30 académies et 97 directions des services départementaux de l'Éducation nationale. Les domaines où s'exercent les métiers dans l'éducation nationale sont multiples : l'enseignement avec plus de 80% des effectifs, l'éducation et l'orientation mais aussi la santé et le social, l'administration, la comptabilité, la gestion et les finances, la technique, les systèmes d’information, la recherche et formation, les bibliothèques, l'encadrement (direction et inspection).

Region Midtjylland

regionmidtjylland.dk

Central Denmark Region is one of five regions in Denmark. Denmark is organised at three political and administrative levels: the national (government), the regional (5 regions) and the municipal level (98 municipalities). Each region is led by a Regional Council, consisting of 41 politicians elected every four years. The regions' responsibilities are within the areas of health, psychiatry, social og regional development. The region must secure the overall strategy and at the same time top quality services; be it in the personal educational contact at institutions or when a patient needs nerve fibre surgery. Facts - Central Denmark Region Central Denmark Region covers 19 municipalities and an area of 13,000 square kilometres. Central Denmark Region has a population of 1.3 million people - approx. 23% of the population in Denmark. Central Denmark Region has a gross budget of 28.9 billion DKK (2019). Central Denmark Region has approx. 30.000 employees. Health, psychiatry and social The primary responsibility of Central Denmark Region is healthcare. This includes being responsible for the nine somatic hospitals and eight psychiatric hospital departments, pre-hospital emergency services, general practitioners and practising specialist doctors. The region also operates a number of specialised social care institutions in agreement with local municipalities. Regional development Central Denmark Region is also responsible for regional development within the areas of public transport/mobility, education, culture and environment (soil contamination, groundwater protection and raw materials planning).

FDA

fda.gov

The Food and Drug Administration is an agency within the Department of Health and Human Services. The FDA is responsible for protecting the public health by ensuring the safety, efficacy, and security of human and veterinary drugs, biological products, and medical devices; and by ensuring the safety of our nation's food supply, cosmetics, and products that emit radiation. FDA also has responsibility for regulating the manufacturing, marketing, and distribution of tobacco products to protect the public health and to reduce tobacco use by minors. FDA is responsible for advancing the public health by helping to speed innovations that make medical products more effective, safer, and more affordable and by helping the public get the accurate, science-based information they need to use medical products and foods to maintain and improve their health. FDA also plays a significant role in the Nation's counterterrorism capability. FDA fulfills this responsibility by ensuring the security of the food supply and by fostering development of medical products to respond to deliberate and naturally emerging public health threats.

City of Toronto

toronto.ca

The City of Toronto is committed to fostering a positive and progressive workplace culture, and strives to build a workforce that reflects the citizens it serves. We are committed to building a high performing public service, with strong and effective leaders to enable service excellence, through high engagement and healthy and safe workplaces. Toronto is home to more than 2.9 million people whose diversity and experiences make this great city Canada’s leading economic engine and one of the world’s most diverse and livable cities. As the fourth largest city in North America, Toronto is a global leader in technology, finance, film, music, culture, and innovation, and consistently places at the top of international rankings due to investments championed by its government, residents and businesses. Toronto Public Service consists of approximately 35,771 employees, providing programs and services to Toronto residents, businesses and visitors. Additionally, the City of Toronto has a number of agencies and corporations including the Toronto Police Service, Toronto Public Library and the Toronto Transit Commission, which make up the broader municipal organization. There are 44 operating divisions and offices providing an extensive level of programs and services. We offer diverse career opportunities across a wide variety of professional, trade, administrative, managerial and other employment roles. The Toronto Public Service has won numerous awards for quality, innovation and efficiency in delivering citizen-focused services. We are proud to have been named one of Canada's Top 100 Employers, Canada's Best Diversity Employers, Top Family Friendly Employers and Greater Toronto's Top Employers. Consider joining the award-winning Toronto Public Service and help us make a difference in a great City!

Internal Revenue Service

irs.gov

Welcome to the Internal Revenue Service’s official LinkedIn account. Here, you will find the latest and greatest news and updates for taxpayers to help them understand and meet their tax responsibilities. Also, this is a place to learn about a meaningful career with the IRS. Check out the tabs above to learn more about us and view job openings. The U.S. government does not promote or endorse any non-government or commercial content appearing on this page. This service is operated by a third party and not an official government website. The IRS strongly discourages you from providing personally identifiable information. Read our privacy policy at www.irs.gov/privacy

USDA

usda.gov

The United States Department of Agriculture is the United States federal executive department responsible for developing and executing U.S. federal government policy on farming, agriculture, and food. It aims to meet the needs of farmers and ranchers, promote agricultural trade and production, work to assure food safety, protect natural resources, foster rural communities and end hunger in the United States and abroad.

Loading…

NEWS

Urssaf Pays de la Loire CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90603

SUMMARY

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90602

SUMMARY

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-90601

SUMMARY

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90600

SUMMARY

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15892

SUMMARY

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_name buffer (and, for read, a data buffer) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled, relying on the end: label to k_free() them. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning status MGMT_CB_ERROR_RC, the handler executed return ret_rc; directly, bypassing end: and leaking the heap allocation on every rejected request. The settings handlers are reachable over the unauthenticated SMP transport (Bluetooth LE, UART, or UDP, depending on product configuration). The access hook is the mechanism applications use to deny unauthorized settings access, and MGMT_CB_ERROR_RC is a common rejection style, so an attacker who can send settings read/write/delete commands that the hook rejects triggers a heap leak on each attempt. Because the leaked memory is never reclaimed until reboot, a sustained stream of rejected requests monotonically exhausts the kernel heap until k_malloc() fails, denying mcumgr service and impacting any other heap consumer on the device — a denial of service. The impact is availability-only; there is no memory corruption or information disclosure. Only configurations that select the heap buffer type, enable the access hook, and register a hook that returns MGMT_CB_ERROR_RC are affected (the default stack buffer type cannot leak).

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Urssaf Pays de la Loire Vendor Cyber Rating & Cyber Score

UPDLL A.I CyberSecurity Scoring

Urssaf Pays de la Loire CyberSecurity News & History

UPDLL Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for UPDLL

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types UPDLL vs Government Administration Industry Avg (This Year)

Incident History - UPDLL (X = Date, Y = Severity)

Urssaf Pays de la Loire Subsidiaries

UPDLL

Urssaf Pays de la Loire Similar Companies

State of Minnesota

eThekwini Municipality

IBGE

Ministère de l'Éducation nationale

Region Midtjylland

FDA

City of Toronto

Internal Revenue Service

USDA

Urssaf Pays de la Loire CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Urssaf Pays de la Loire CyberSecurity News & History

UPDLL Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for UPDLL

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types UPDLL vs Government Administration Industry Avg (This Year)

Incident History - UPDLL (X = Date, Y = Severity)

Urssaf Pays de la Loire Subsidiaries

UPDLL

Urssaf Pays de la Loire Similar Companies

State of Minnesota

eThekwini Municipality

IBGE

Ministère de l'Éducation nationale

Region Midtjylland

FDA

City of Toronto

Internal Revenue Service

USDA

Urssaf Pays de la Loire CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo