What is the official website of Urssaf Poitou-Charentes ?

The official website of Urssaf Poitou-Charentes is http://www.urssaf.fr.

What is Urssaf Poitou-Charentes's cybersecurity risk score?

Urssaf Poitou-Charentes has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Urssaf Poitou-Charentes experienced?

According to Rankiteo, Urssaf Poitou-Charentes currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Urssaf Poitou-Charentes been affected by any supply chain cyber incidents ?

According to Rankiteo, Urssaf Poitou-Charentes has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Urssaf Poitou-Charentes have SOC 2 Type 1 certification ?

According to Rankiteo, Urssaf Poitou-Charentes is not certified under SOC 2 Type 1.

Does Urssaf Poitou-Charentes have SOC 2 Type 2 certification ?

According to Rankiteo, Urssaf Poitou-Charentes does not hold a SOC 2 Type 2 certification.

Does Urssaf Poitou-Charentes comply with GDPR ?

According to Rankiteo, Urssaf Poitou-Charentes is not listed as GDPR compliant.

Does Urssaf Poitou-Charentes have PCI DSS certification ?

According to Rankiteo, Urssaf Poitou-Charentes does not currently maintain PCI DSS compliance.

Does Urssaf Poitou-Charentes comply with HIPAA ?

According to Rankiteo, Urssaf Poitou-Charentes is not compliant with HIPAA regulations.

Does Urssaf Poitou-Charentes have ISO 27001 certification ?

According to Rankiteo,Urssaf Poitou-Charentes is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Urssaf Poitou-Charentes operate in ?

Urssaf Poitou-Charentes operates primarily in the Government Administration industry.

How many employees does Urssaf Poitou-Charentes have ?

Urssaf Poitou-Charentes employs approximately 98 people worldwide.

Does Urssaf Poitou-Charentes own any subsidiaries ?

Urssaf Poitou-Charentes presently has no subsidiaries across any sectors.

How many LinkedIn followers does Urssaf Poitou-Charentes have ?

Urssaf Poitou-Charentes's official LinkedIn profile has approximately 1,404 followers.

What is the NAICS classification code for Urssaf Poitou-Charentes ?

Urssaf Poitou-Charentes is classified under the NAICS code 92, which corresponds to Public Administration.

Does Urssaf Poitou-Charentes have a Crunchbase profile ?

No, Urssaf Poitou-Charentes does not have a profile on Crunchbase.

Does Urssaf Poitou-Charentes have a LinkedIn profile ?

Yes, Urssaf Poitou-Charentes maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/urssaf-poitou-charentes.

How many cybersecurity incidents has Urssaf Poitou-Charentes experienced ?

As of July 26, 2026, Rankiteo reports that Urssaf Poitou-Charentes has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Urssaf Poitou-Charentes have ?

Urssaf Poitou-Charentes has an estimated 13,060 peer or competitor companies worldwide.

What types of cybersecurity incidents has Urssaf Poitou-Charentes faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Urssaf Poitou-Charentes

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

Urssaf Poitou-Charentes Vendor Cyber Rating & Cyber Score

urssaf.fr

Add Your Compliance Badge

Le réseau des Urssaf collecte les cotisations et contributions sociales, sources du financement du régime général de la Sécurité sociale. L'Urssaf, organisme de droit privé chargé d'une mission de service public, a notamment pour rôles de : • Collecter les cotisations et contributions sociales, • Concourir à la promotion des politiques de l'emploi, • Assurer la prévention et le traitement des difficultés de paiement des entreprises, • Participer à la lutte contre le travail illégal, • Développer des services de simplification des formalités sociales, • Contribuer à l'information des décideurs. L'Urssaf Poitou-Charentes c'est : • 197 577 comptes usagers • 7,11 milliards d'€ collectés • 352 collaborateurs • 4 sites en région

Urssaf Poitou-Charentes A.I CyberSecurity Scoring

Scoring History

Urssaf Poitou-Charentes

Urssaf Poitou-Charentes CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Urssaf Poitou-Chare...

Breach

03/2022

ASS133730422

Urssaf Poitou-Chare...

Breach

03/2022

CNA1491522

Loading…

A.I.

Urssaf Poitou-Charentes Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Urssaf Poitou-Charentes

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Urssaf Poitou-Charentes in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Urssaf Poitou-Charentes in 2026.

Incident Types Urssaf Poitou-Charentes vs Government Administration Industry Avg (This Year)

No incidents recorded for Urssaf Poitou-Charentes in 2026.

Incident History - Urssaf Poitou-Charentes (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Urssaf Poitou-Charentes Subsidiaries

Urssaf Poitou-Charentes

Government Administration

Website: http://www.urssaf.fr

Company Size: 98

110

ACOSSGovernment Administration

Sécurité socialeGovernment Administration

Assurance MaladieGovernment Administration

CNAMGovernment Administration

Caisse Primaire d’Assurance Maladie (CPAM) de l’OiseGovernment Administration

Assurance Maladie - Risques professionnelsGovernment Administration

CPAM de Paris (Assurance Maladie)Government Administration

CPAM de la Haute-Garonne (Assurance Maladie)Government Administration

CPAM de Lille-Douai Government Administration

Assurance Maladie de Loire-Atlantique (CPAM)Government Administration

CramifGovernment Administration

CPAM du Var (Assurance Maladie)Government Administration

CPAM de Seine-et-Marne (Assurance Maladie)Government Administration

CPAM des YvelinesGovernment Administration

CPAM de la GirondeGovernment Administration

CPAM de l'Hérault (Assurance Maladie)Government Administration

Assurance Maladie Ille-et-Vilaine (Cpam)Government Administration

CPAM du Bas-Rhin (Assurance Maladie)Government Administration

Assurance Maladie de la MancheGovernment Administration

CPAM de la Sarthe (Assurance Maladie)Government Administration

Assurance Maladie du Morbihan (Cpam)Government Administration

Assurance Maladie Rouen-Elbeuf-Dieppe Seine-MaritimeGovernment Administration

CPAM du Val-d'OiseGovernment Administration

CPAM de Roubaix-Tourcoing (Assurance Maladie)Government Administration

CPAM du Hainaut (Assurance Maladie) Government Administration

CPAM de Meurthe-et-Moselle (Assurance Maladie)Government Administration

CPAM de MoselleGovernment Administration

CPAM de Haute-Savoie Government Administration

UGECAM Ile-de-FranceHospitals and Health Care

Assurance Maladie de la VendéeGovernment Administration

CPAM Alpes-Maritimes (Assurance Maladie)Government Administration

Assurance Maladie du LoiretGovernment Administration

CPAM de la Côte-d’Or (Assurance Maladie) Government Administration

CPAM du Cher (Assurance Maladie)Government Administration

Cpam de la Loire (Assurance Maladie)Government Administration

CPAM de la Drôme (Assurance Maladie)Government Administration

CPAM du Doubs (Assurance Maladie)Government Administration

CPAM de Maine-et-Loire (Assurance Maladie)Government Administration

CPAM des Pyrénées-Orientales (Assurance Maladie)Government Administration

CPAM de Loir-et-Cher (Assurance Maladie)Government Administration

Assurance Maladie du Tarn (CPAM)Government Administration

CPAM de l'AinGovernment Administration

CPAM de la Vienne (Assurance Maladie)Government Administration

Assurance Maladie de l'OrneGovernment Administration

CPAM de l'Ardèche (Assurance Maladie)Government Administration

CPAM du Haut-Rhin (Assurance Maladie)Government Administration

CPAM des Landes (Assurance Maladie)Government Administration

CPAM de la Charente (Assurance Maladie)Government Administration

Accélérateur 51 Government Administration

CPAM d'Indre-et-LoireGovernment Administration

Assurance Maladie du Tarn et Garonne (CPAM)Government Administration

Direction régionale du service médical (DRSM) Centre-Val de LoireGovernment Administration

CPAM de la Haute-VienneGovernment Administration

Assurance Maladie de l'Aude (cpam Aude)Government Administration

Assurance Maladie de la Charente-MaritimeGovernment Administration

CPAM de l'Ariège (Assurance Maladie)Government Administration

CPAM d'Eure-et-LoirGovernment Administration

Assurance Maladie du Gers (CPAM)Government Administration

CPAM du Cantal (Assurance Maladie)Government Administration

Assurance Maladie des Côtes d'ArmorGovernment Administration

Assurance Maladie de l'IndreGovernment Administration

CPAM des Flandres (Assurance Maladie)Government Administration

Centre de Médecine Préventive (Assurance Maladie)Government Administration

CPAM de Saône-et-Loire (Assurance Maladie)Government Administration

Assurance Maladie de l'EssonneGovernment Administration

CPAM de l'AllierInsurance

CPAM de la Savoie (Assurance Maladie)Government Administration

CPAM des Bouches-du-Rhône (Assurance Maladie)Government Administration

CPAM du Val-de-MarneGovernment Administration

CPAM des Deux-Sèvres (Assurance Maladie)Government Administration

CPAM du RhôneGovernment Administration

Direction Régionale du Service Médical Nouvelle-AquitaineGovernment Administration

CPAM de la Côte d'Opale (Assurance Maladie) Government Administration

UCANSSGovernment Administration

Institut 4.10Professional Training and Coaching

Caf du GardGovernment Administration

L'Assurance retraiteGovernment Administration

CnavGovernment Administration

Carsat Hauts-de-FranceGovernment Administration

Carsat Sud-EstGovernment Administration

Carsat Pays de la LoireGovernment Administration

CARSAT AquitaineGovernment Administration

Carsat NormandieGovernment Administration

Carsat Rhône AlpesGovernment Administration

Carsat BretagneGovernment Administration

Carsat AuvergneGovernment Administration

Carsat Nord-EstGovernment Administration

Carsat Alsace Moselle Government Administration

CGSS Réunion Government Administration

Carsat Midi-PyrénéesGovernment Administration

Caf de la Haute-GaronneGovernment Administration

CGSS de Guadeloupe et de Saint-MartinGovernment Administration

Caf de l'HéraultGovernment Administration

RSIGovernment Administration

CamiegGovernment Administration

Caf de l'OiseGovernment Administration

Caf du Pas-de-CalaisGovernment Administration

Urssaf Ile-de-FranceGovernment Administration

Urssaf Languedoc-RoussillonGovernment Administration

Urssaf PacaGovernment Administration

Urssaf AlsaceGovernment Administration

Urssaf BretagneGovernment Administration

Urssaf Champagne-ArdenneGovernment Administration

Urssaf PicardieGovernment Administration

Urssaf Franche-ComtéGovernment Administration

Urssaf BourgogneGovernment Administration

Urssaf CorseGovernment Administration

Urssaf Nord - Pas-de-CalaisGovernment Administration

Mes premiers mois avec l'Urssaf Nord - Pas-de-CalaisGovernment Administration

Urssaf Pays de la LoireGovernment Administration

Loading…

Urssaf Poitou-Charentes Similar Companies

INSS

inss.gov.br

O Instituto Nacional do Seguro Social (INSS) é uma autarquia do Governo Federal do Brasil que recebe as contribuições para a manutenção do Regime Geral da Previdência Social, sendo responsável pelo pagamento da aposentadoria, pensão por morte, auxílio-doença, auxílio-acidente, entre outros benefícios previstos em lei. O INSS trabalha junto com a Dataprev, empresa de tecnologia que faz o processamento de todos os dados da Previdência. Está vinculado ao Ministério da Previdência Social.

FDA

fda.gov

The Food and Drug Administration is an agency within the Department of Health and Human Services. The FDA is responsible for protecting the public health by ensuring the safety, efficacy, and security of human and veterinary drugs, biological products, and medical devices; and by ensuring the safety of our nation's food supply, cosmetics, and products that emit radiation. FDA also has responsibility for regulating the manufacturing, marketing, and distribution of tobacco products to protect the public health and to reduce tobacco use by minors. FDA is responsible for advancing the public health by helping to speed innovations that make medical products more effective, safer, and more affordable and by helping the public get the accurate, science-based information they need to use medical products and foods to maintain and improve their health. FDA also plays a significant role in the Nation's counterterrorism capability. FDA fulfills this responsibility by ensuring the security of the food supply and by fostering development of medical products to respond to deliberate and naturally emerging public health threats.

USDA

usda.gov

The United States Department of Agriculture is the United States federal executive department responsible for developing and executing U.S. federal government policy on farming, agriculture, and food. It aims to meet the needs of farmers and ranchers, promote agricultural trade and production, work to assure food safety, protect natural resources, foster rural communities and end hunger in the United States and abroad.

Københavns Kommune

kk.dk

Københavns Kommune er Danmarks største arbejdsplads med ca. 45.000 medarbejdere. Vi udvikler hovedstaden og servicerer over 500.000 københavnere. Vores mål er at fastholde og udvikle København som en af verdens bedste byer at bo i – og skabe øget vækst gennem viden, innovation og beskæftigelse. Find dit næste job her eller på www.kk.dk/job På vores karrieresite www.kk.dk/job kan du bl.a. se alle vores ledige stillinger og tilmelde dig vores jobagent. Her kan du også læse om vores medarbejdergoder.

Region Stockholm

regionstockholm.se

Är du beredd att tänka nytt och hitta framtidens lösningar? För vårt framtida uppdrag behöver vi medarbetare med hög kompetens, stort engagemang och som strävar efter ständig förbättring. Vid din sida kan du få engagerade kollegor inom hundratals kvalificerade yrken – ekonomer, sjuksköterskor, jurister, radiologer, ingenjörer och kirurger. Stockholms läns landsting är en av landets största arbetsgivare med ett livsviktigt uppdrag. Vi ger två miljoner invånare en effektiv kollektivtrafik och en god hälso- och sjukvård i landets snabbast växande region. Varje dag, dygnet runt.

European Commission

europa.eu

The Commission represents and upholds the interests of the EU as a whole, and is independent of national governments. The European Commission prepares legislation for adoption by the Council (representing the member countries) and the Parliament (representing the citizens). It administers the budget and the policy programmes (agriculture, fisheries, research etc.) in cooperation with authorities in the member countries. Visit http://www.europa.eu/ if you want to learn more about the EU, or call the free service number 00 800 6789 10 11 from anywhere in the EU, they speak all 24 official languages. Disclaimer: The European Commission is working to ensure that social networks respect the highest standards of data protection. All users of social networks should be particularly careful about how they disclose their personal information and about how it may be used by third parties and the social network themselves. The presence of the European Commission on LinkedIn does not mean that we endorse or in any way agree with the privacy policy or practices of this professional social media network. Read more about our social media policy → europa.eu/!dyJq74

Helsingin kaupunki – Helsingfors stad – City of Helsinki

hel.fi

#MeTeemmeHelsingin Helsingin kaupunki on Suomen suurin työnantaja, jonka palveluksessa on lähes 39 000 ammattilaista ja asiantuntijaa. Helsingin kaupunki tarjoaa henkilöstölle monipuolisia, mielenkiintoisia ja yhteiskunnallisesti merkittäviä työtehtäviä, hyvät mahdollisuudet kehittymiseen, ammattitaitoiset työkaverit, työaikajoustot sekä kilpailukykyiset henkilöstöedut. Lisää kaupungista työnantajana: https://www.hel.fi/fi/avoimet-tyopaikat/miksi-toihin-kaupungille Helsingin kaupungin kotisivut: www.hel.fi *** Helsingfors stad, Finlands största arbetsgivare, har cirka 39 000 anställda. Dessa yrkesmänniskor och experter, som företräder ett antal olika branscher. Tack vare stadens och sektorernas storlek har de anställda mångsidiga, intressanta och samhälleligt viktiga arbetsuppgifter, goda möjligheter att utbilda sig och utvecklas, yrkeskunniga arbetskamrater, arbetstidsflexibilitet och konkurrenskraftiga personalförmåner. Mer om staden som arbetsgivare: https://www.hel.fi/sv/lediga-jobb/varfor-borja-arbeta-hos-staden Helsinki stad webbplats: www.hel.fi/sv *** The City of Helsinki is Finland’s biggest employer with 39 000 employees, who are professionals and experts of various fields. The large size of the City and the wide scope of the fields of employment give the City personnel versatile and socially important jobs, good opportunities for training and development on the job, skilled colleagues, flexible working hours and competitive personnel benefits. City as an employer: https://www.hel.fi/en/open-jobs/why-work-for-the-city City of Helsinki website: www.hel.fi/en

ISSSTE

www.com

INSTITUTO DE SEGURIDAD Y SERVICIOS SOCIALES DE LOS TRABAJADORES DEL ESTADO. ES UN ORGANISMOS PÚBLICO QUE OTORGA SERVICIOS DE SALUD, PENSIONES, VIVIENDA, PRÉSTAMOS, ESTANCIAS INFANTILES, TURISMO, CULTURA, RECREACION, DEPORTE; CUYOS AFILIADOS SON TRABAJADORES DE DEPENDENCIAS GUBERNAMENTALES, CON DERECHO A LA SEGURIDAD SOCIAL. Y CUYOS OBJETIVOS INSTITUCIONALES ADEMÁS DE CONTRIBUIR A LOGRAR LOS OBJETIVOS PROPUESTOS POR EL PLAN NACIONAL DE DESARROLLO 2007 – 2012, COADYUVARÁN A LOGRAR LA VISIÓN DE LA INSTITUCIÓN ESTABLECIDA PARA EL AÑO 2030 Y CONCRETAR LA MISIÓN QUE TIENE ESTABLECIDA. MISIÓN DEL ISSSTE CONTRIBUIR A SATISFACER NIVELES DE BIENESTAR INTEGRAL DE LOS TRABAJADORES AL SERVICIO DEL ESTADO, PENSIONADOS, JUBILADOS Y FAMILIARES DERECHOHABIENTES, CON EL OTORGAMIENTO EFICAZ Y EFICIENTE DE LOS SEGUROS, PRESTACIONES Y SERVICIOS, CON ATENCIÓN ESMERADA, RESPETO, CALIDAD Y CUMPLIENDO SIEMPRE CON LOS VALORES INSTITUCIONALES DE HONESTIDAD, LEGALIDAD Y TRANSPARENCIA. VISIÓN DEL ISSSTE POSICIONAR AL ISSSTE COMO LA INSTITUCIÓN QUE GARANTICE LA PROTECCIÓN INTEGRAL DE LOS TRABAJADORES DE LA ADMINISTRACIÓN PÚBLICA FEDERAL, PENSIONADOS, JUBILADOS Y SUS FAMILIAS DE ACUERDO AL NUEVO PERFIL DEMOGRÁFICO DE LA DERECHOHABIENCIA, CON EL OTORGAMIENTO DE SEGUROS, PRESTACIONES Y SERVICIOS DE CONFORMIDAD CON LA NORMATIVIDAD VIGENTE, BAJO CÓDIGOS NORMADOS DE CALIDAD Y CALIDEZ, CON SOLVENCIA FINANCIERA, QUE PERMITAN GENERAR VALORES Y PRÁCTICAS QUE FOMENTEN LA MEJORA SOSTENIDA DE BIENESTAR, CALIDAD DE VIDA Y EL DESARROLLO DEL CAPITAL HUMANO. PARA CONOCER MAS DE NUESTRO INSTITUTO FAVOR DE CONSULTAR LA PAGINA INSTITUCIONAL WWW2.ISSSTE.GOB.MX EN DONDE SEGURAMENTE ENCONTRARAN MATERIAL DE ORIENTACION AMENO Y EXPLICATIVO ADEMAS DE LA HISTORIA DE INSTITUTO, SUS ALCANCES Y LOGROS ASI COMO LOS PROGRAMAS CON QUE CUENTA ACTUALMENTE EL INSTITUTO.

Texas Health and Human Services

texas.gov

Overview The Texas Health and Human Services Commission (HHSC) is an agency within the Texas Health and Human Services System. In September 2016, Texas began transforming how it delivers health and human services to qualified Texans, with a goal of making the Health and Human Services System more efficient and effective. Sept. 1, 2017, marked another major milestone in this transformation. The new accountable, restructured system: - Makes it easier for people to find out about the services or benefits for which they may qualify. - Better integrates programs by removing bureaucratic silos and grouping similar programs and services together. - Creates clear lines of accountability within the organization. - Includes well-defined and objective performance metrics for all organizational areas. Texas Health and Human Services now consists of 2 agencies: the Texas Health and Human Services Commission and the Texas Department of State Health Services (DSHS). HHS is headquartered in Austin, TX. Services Provided - Medicaid for families and children - Long-term care for people who are older or have disabilities - SNAP (Supplemental Nutrition Assistance Program) food benefits and TANF (Temporary Assistance For Needy Families) cash assistance for families Behavior health services - Services to help keep people who are older or who have disabilities in their homes or communities - Services for women or other people with special health needs Oversight of Regulatory Functions - Licensing and credentialing of long-term care facilities, such as nursing homes and assisted living - Licensing child care providers - Managing the day-to-day operations of state supported living centers and state hospitals

Loading…

NEWS

Urssaf Poitou-Charentes CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-10681

SUMMARY

In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permission index from the global _thread_idx_map[] bitmap without holding lists_lock. On SMP systems, two user-mode threads invoking the k_object_alloc(K_OBJ_THREAD) syscall concurrently can both observe the same low free bit, perform the same non-atomic RMW to clear it, and return the identical tidx. The two newly created K_OBJ_THREAD objects are then assigned the same thread_id, so the two user threads alias a single bit position in every kernel object's perms[] bitfield: any subsequent grant of access on a kernel object to one thread is implicitly a grant to the other, defeating userspace ACL isolation. A secondary lost-update window between the unlocked &=~BIT() in alloc and the locked |= BIT() in thread_idx_free() can also leak entries from the thread-index pool. The defect is reachable from any user-mode thread via the unrestricted __syscall k_object_alloc and is gated on CONFIG_USERSPACE, CONFIG_DYNAMIC_OBJECTS, and CONFIG_SMP. The flaw was introduced when the per-thread permission index was added in 2018 and is present in every release up to and including v4.4.0. Fixed by holding lists_lock across the bitmap RMW and the permissions clear (and inlining the obj_list traversal that previously took the lock itself).

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Impact Score

5.5

Exploitability

REFERENCES

CVE-2026-66013

SUMMARY

OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without authentication or ownership validation, redirecting notifications or denying delivery to legitimate consoles.

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-66012

SUMMARY

SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint, which is gated only by a general auth check (model.CheckAuth) with no admin-role or read-only enforcement. This exposes 31 MCP tools, including a file tool with list/read/write/delete/rename/copy actions across the entire workspace. When the Publish server is enabled in anonymous mode (Conf.Publish.Enable=true and Conf.Publish.Auth.Enable=false), the Publish reverse proxy attaches an anonymous RoleReader JWT to proxied requests, allowing a remote unauthenticated attacker to reach /mcp. The attacker can read conf/conf.json to extract accessAuthCode, api.token, and cookieKey in plaintext, write arbitrary files in the workspace, and plant a plugin into data/plugins/ that executes with nodeIntegration:true and no contextIsolation on the next desktop launch, leading to administrator takeover.

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: 10)

cvss3

Base Score: 10.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.9

REFERENCES

CVE-2026-66011

SUMMARY

ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed command-line arguments to consume system resources.

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-64529

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and IOCTLs The QAT driver exposes a character device (qat_adf_ctl) with IOCTLs for device configuration, start, stop, status query and enumeration. These IOCTLs are not part of any public uAPI header and have no known in-tree or out-of-tree users. Device lifecycle is already managed via sysfs. The ioctl interface also increases the attack surface and is the subject of a number of bug reports. Remove the character device, the IOCTL definitions, and the related data structures (adf_dev_status_info, adf_user_cfg_key_val, adf_user_cfg_section, adf_user_cfg_ctl_data). Drop the now-unused adf_cfg_user.h header and strip adf_ctl_drv.c down to the minimal module_init/module_exit hooks for workqueue, AER, and crypto/compression algorithm registration. Clean up leftover dead code that was only reachable from the removed IOCTL paths: adf_cfg_del_all(), adf_devmgr_verify_id(), adf_devmgr_get_num_dev(), adf_devmgr_get_dev_by_id(), adf_get_vf_real_id() and the unused ADF_CFG macros. Additionally, drop the entry associated to QAT IOCTLs in ioctl-number.rst.

Published

Date2026-07-25

Updated

Date2026-07-25

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…