What is the official website of U.S. Bank ?

The official website of U.S. Bank is https://www.usbank.com/index.html.

What is U.S. Bank's cybersecurity risk score?

U.S. Bank has an AI-generated cybersecurity risk score of 731 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has U.S. Bank experienced?

According to Rankiteo, U.S. Bank currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has U.S. Bank been affected by any supply chain cyber incidents ?

According to Rankiteo, U.S. Bank has been affected by a supply chain cyber incident involving Fisher & Paykel Appliances, with the incident ID US-1787336653.

Does U.S. Bank have SOC 2 Type 1 certification ?

According to Rankiteo, U.S. Bank is not certified under SOC 2 Type 1.

Does U.S. Bank have SOC 2 Type 2 certification ?

According to Rankiteo, U.S. Bank does not hold a SOC 2 Type 2 certification.

Does U.S. Bank comply with GDPR ?

According to Rankiteo, U.S. Bank is not listed as GDPR compliant.

Does U.S. Bank have PCI DSS certification ?

According to Rankiteo, U.S. Bank does not currently maintain PCI DSS compliance.

Does U.S. Bank comply with HIPAA ?

According to Rankiteo, U.S. Bank is not compliant with HIPAA regulations.

Does U.S. Bank have ISO 27001 certification ?

According to Rankiteo,U.S. Bank is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does U.S. Bank operate in ?

U.S. Bank operates primarily in the Banking industry.

How many employees does U.S. Bank have ?

U.S. Bank employs approximately 87,370 people worldwide.

Does U.S. Bank own any subsidiaries ?

U.S. Bank presently has no subsidiaries across any sectors.

How many LinkedIn followers does U.S. Bank have ?

U.S. Bank's official LinkedIn profile has approximately 633,938 followers.

What is the NAICS classification code for U.S. Bank ?

U.S. Bank is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does U.S. Bank have a Crunchbase profile ?

No, U.S. Bank does not have a profile on Crunchbase.

Does U.S. Bank have a LinkedIn profile ?

Yes, U.S. Bank maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/us-bank.

How many cybersecurity incidents has U.S. Bank experienced ?

As of September 14, 2026, Rankiteo reports that U.S. Bank has experienced 4 cybersecurity incidents.

How many peer or competitor companies does U.S. Bank have ?

U.S. Bank has an estimated 7,500 peer or competitor companies worldwide.

What types of cybersecurity incidents has U.S. Bank faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Ransomware and Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

U.S. Bank

Boost Score +25 with badge (5 left)

731

/1000

Moderate

756

/1000

Fair

U.S. Bank Vendor Cyber Rating & Cyber Score

usbank.com

Add Your Compliance Badge

At U.S. Bank, we help millions of clients achieve their goals with a balance of best-in-class technology and human expertise tailored to individual needs. As the fifth-largest commercial bank in the United States, we’ve built a reputation for strength and stability across a diversified mix of businesses, including commercial and institutional banking, business banking, payments, wealth management and consumer banking. We’ve been named one of the World’s Most Ethical Companies® by the Ethisphere Institute and the most admired superregional bank by Fortune. In addition to thousands of branches serving consumers, U.S. Bank offers a complete suite of products, services and strategic partnerships for business. Within our Wealth, Corporate,

U.S. Bank

U.S. Bank CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Bank

Ransomware

8/2026

Fisher & Paykel...

US-1787336653

U.S. Bank

Breach

9/2022

US-239072925

U.S. Bank

Cyber Attack

3/2021

US-356072525

U.S. Bank

Breach

100

7/2020

US-329072525

Loading…

A.I.

U.S. Bank Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for U.S. Bank

Incidents vs Banking Industry Avg (This Year)

U.S. Bank has 37.89% fewer incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

U.S. Bank has 2.91% fewer incidents than the average of all companies with at least one recorded incident.

Incident Types U.S. Bank vs Banking Industry Avg (This Year)

U.S. Bank reported 1 incidents this year: 0 cyber attacks, 1 ransomware, 0 vulnerabilities, 0 data breaches, compared to industry peers with at least 1 incident.

Incident History - U.S. Bank (X = Date, Y = Severity)

Loading…

SUBSIDIARY

U.S. Bank Subsidiaries

U.S. Bank

Banking

Website: https://www.usbank.com/index.html

Company Size: 10,001+ employees

Elavon, Inc.Financial Services

U.S. Bank Institutional Client GroupFinancial Services

U.S. Bancorp Investments, Inc.Financial Services

U.S. Bank Corporate Payment SystemsFinancial Services

Elavon EuropeFinancial Services

U.S. Bank Investment ServicesFinancial Services

Loading…

U.S. Bank Similar Companies

CIBC

cb cibc.com

CIBC is here to help all our clients reach their goals. We know the importance of reliable financial products and services, and we’re dedicated to providing them in a way that lets you bank however you want, whenever you want. With innovative tools designed around your priorities and a team fully focused on your success, you’ll get the insights you need to get even closer to achieving your goals. This culture of innovation and shared values of trust, teamwork and accountability are why we’ve been named a top employer in Canada. They’re also why a career at CIBC is more than a job—it’s an opportunity to grow and work alongside some of the brightest in Canada. La Banque CIBC est là pour aider tous nos clients à atteindre leurs objectifs. Nous connaissons l'importance de produits et services financiers fiables, et nous nous engageons à les fournir d'une manière qui vous permette d'effectuer vos opérations bancaires comme vous le souhaitez, quand vous le souhaitez. Avec des outils innovants conçus autour de vos priorités et une équipe entièrement centrée sur votre réussite, vous obtiendrez les informations dont vous avez besoin pour vous rapprocher encore plus de vos objectifs. Cette culture de l'innovation et les valeurs partagées de confiance, de travail d'équipe et de responsabilité sont la raison pour laquelle nous avons été nommés l'un des meilleurs employeurs au Canada. C'est aussi pourquoi une carrière à la Banque CIBC est plus qu'un emploi : c'est une occasion de grandir et de travailler aux côtés de certaines des personnes plus brillantes au Canada.

Garanti BBVA

cb garantibbva.com.tr

With a digitalization and people oriented vision, we contribute to our economy and society. We make great efforts to help you make the best financial decisions by offering you the opportunities of the future with our dynamic business model, pioneering technology and innovative products and services. In 2010, we joined BBVA Group, one of the world's leading digital banks with a 160-year-long history, 75 million customers and 125,749 employees. And as of June 2019, we now operate under the “Garanti BBVA” brand. By joining forces with the world’s leading technology bank as the leading technology bank in Turkey, we aim to provide you with more opportunities. We are working with the understanding that ‘we are one team’ and we base our operations on ‘clear, transparent and responsible banking’ with nearly 20,000 employees to provide the most advanced banking solutions to more than 16 million customers and to excel in the experience we deliver. If you want to learn more about life at Garanti BBVA, including our talent and culture initiatives that enable employee development, you can check out our “Life” tab.

PT Bank SMBC Indonesia Tbk

smbci.com

With a renewed vision for growth and innovation, we rebranded as PT Bank SMBC Indonesia Tbk (SMBC Indonesia) in 2024, formerly known as PT Bank BTPN Tbk. This rebranding reflects our response to the dynamic changes, allowing us to consolidate our strengths and deliver even more seamless, integrated solutions for millions of customers from diverse segments across Indonesia. This transformation signals our commitment to advancing and streamlining our business strategies, enabling us to better serve our customers and help them lead more meaningful and fulfilling lives. At the heart of this rebrand is our dedication to supporting Indonesia's long-term development goals, in alignment with the vision of Indonesia Emas 2045. In addition to these goals, we are excited to invite talented individuals and younger generations to join us, expand their careers and make a lasting impact. Together, we can drive positive change and build a brighter future for Indonesia.

Groupe BPCE

groupebpce.com

Groupe BPCE, at the service of its customers and the French economy Groupe BPCE pursues a full range of banking and insurance activities, working through its two major Banque Populaire and Caisse d’Epargne cooperative banking networks and through its different subsidiaries. Groupe BPCE, the 2nd largest banking group in France, has put down deep roots in its local markets. Its 117,000 employees serve a total of 36 million customers, 8.6 of whom have decided to become cooperative shareholders. The Group’s different subsidiaries pursue their activities in banking and insurance, tailoring their services as closely as possible to the needs of the individuals and regions they serve. With a total of 19 Banque Populaire banks, 17 Caisses d’Epargne, Natixis, Crédit Foncier, Banque Palatine, etc., Groupe BPCE offers its customers a comprehensive range of products and services: savings and investment solutions, cash management services, financing solutions, insurance, and wholesale banking services. Faithful to its status as a cooperative banking institution, the Group accompanies its customers in the realization of their different projects and develops long-lasting relationships with them, thereby contributing 20% to the drive to finance the French economy.

Federal Bank

cb federalbank.co.in

Federal Bank, one of the leading private sector banks with presence across the country, began its journey from humble backgrounds to reach the stature of an institution with national prominence & character. With a rich legacy of 7 decades, the Bank aspires to be the most admired Bank in the country and fueling its dreams are the 19 million and growing customer base who have always been loyal to the Bank as the Bank is to them. Headquartered in Aluva, Kerala, the Bank’s scrips are widely held and are listed in the Bombay Stock Exchange and National Stock Exchange in India. The Bank’s global depository receipts are listed on the London Stock Exchange. The Bank has built its empire on the twin values of ethics and excellence, and this has propelled the Bank throughout its journey. Over 1,588 branches, 2079+ ATMs/ Cash Recyclers and a committed, experienced & energetic workforce, Federal Bank now has its presence across the nation. To service the NRIs, who have been its pillars of strength, the Bank operates Representative Offices at Dubai and Abu Dhabi in the UAE. The Bank today handles one fifth of the total NR remittance to the country and this is testimony to its relationship with the NR diaspora. The Bank also has an IFSC Banking Unit (IBU) in Gujarat International Finance Tec-City (GIFT City). Transformation is inevitable and for Federal Bank it has been no different. The Bank believes in transforming itself, keeping its principles intact, to match the beats of the industry and the expectations of its stakeholders. Technology is the new buzzword, and it has left its indelible mark in the banking industry as well. Disclaimer: Federal Bank advices against sharing any confidential information on social media handles of the Bank

Banco Sabadell

sabadellcareers.com

Banco Sabadell es el cuarto grupo bancario privado español, integrado por diferentes bancos, marcas, sociedades filiales y sociedades participadas que abarcan todos los ámbitos del negocio financiero bajo un denominador común: profesionalidad y calidad. Un equipo humano joven y bien preparado, dotado de los recursos tecnológicos y comerciales más modernos, y una organización multimarca y multicanal enfocada al cliente permiten a Banco Sabadell ocupar una destacada posición en el mercado en banca personal y de empresas. Sitio web corporativo: www.grupobancosabadell.com

Bank Mega

bankmega.com

Sebagai bagian dari CT Corp, Bank Mega terus menghadirkan layanan perbankan yang modern, inklusif, dan berorientasi pada kebutuhan masyarakat Indonesia. Mengusung visi “Menjadi Kebanggaan Bangsa”, kami berkomitmen menciptakan nilai tambah bagi nasabah dan karyawan melalui sinergi ekosistem terintegrasi, sekaligus menjadi tempat terbaik bagi talenta untuk tumbuh dan berkontribusi bagi kemajuan bangsa. Bank Mega juga konsisten mengembangkan layanan perbankan digital dengan menyediakan solusi yang mudah, aman, dan efisien bagi nasabah. Sebagai salah satu pelopor implementasi QRIS Cross Border untuk transaksi lintas negara dan QRIS TAP untuk layanan transportasi, Bank Mega memperkuat komitmennya melalui aplikasi M-Smile untuk menciptakan pengalaman transaksi yang nyaman. Langkah ini menegaskan tekad Bank Mega untuk memberikan pengalaman perbankan yang modern, relevan, dan turut mendukung pertumbuhan ekonomi digital Indonesia. Didukung oleh sumber daya manusia yang profesional, budaya kerja Dynamics, Entrepreneurship, Trust, Ethics, Commitment, dan Synergy (DETECS) menjadi fondasi kami dalam menciptakan lingkungan kerja yang kolaboratif dan berdaya saing tinggi. Melalui berbagai inisiatif, penghargaan, dan program berkelanjutan, Bank Mega terus memperkuat perannya sebagai lembaga keuangan yang mendorong pertumbuhan ekonomi nasional sekaligus memberikan dampak positif bagi masyarakat. Pencapaian terbaru Bank Mega di tahun 2025: * Investortrust – The Best Bank 2025 untuk kategori KBMI 3 * Stellar Workplace Recognition in Employee Commitment 2025 * Stellar Workplace Recognition in Employee Satisfaction 2025 * 100 Indonesia's Biggest Companies 2025 versi Fortune Indonesia * Katadata ESG Index Awards sebagai Green Economy Winner untuk sektor (Finance - Bank Sector) Dan masih banyak pencapaian lainnya. Jika Anda mencari tempat untuk berkembang, berkontribusi, dan menjadi bagian dari transformasi industri perbankan Indonesia, inilah saatnya #SuksesBarengMega

ING

ing.com

ING is a pioneer in digital banking and on the forefront as one of the most innovative banks in the world. As ING, we have a clear purpose that represents our conviction of people’s potential. We don’t judge, coach, or tell people how to live their lives. However big or small, modest or grand, we empower people and businesses to realise their vision for a better future. We made the promise to make banking frictionless, removing barriers to progress, and make people confident in their financial decisions. As a global bank we have a huge opportunity – and responsibility – to make an impact for the better. We can play a role by financing change, sharing knowledge, and innovating. Being sustainable is in all the choices we make—as a lender, as a partner and through the services we offer our customers

Societe Generale

societegenerale.com

Societe Generale is one of the leading European financial services groups. Based on a diversified and integrated banking model, the Group combines financial strength and proven expertise in innovation with a strategy of sustainable growth. Committed to the positive transformations of the world’s societies and economies, Societe Generale and its teams seek to build, day after day, together with its clients, a better and sustainable future through responsible and innovative financial solutions. Active in the real economy for over 150 years, with a solid position in Europe and connected to the rest of the world, Societe Generale has over 117,000 members of staff in 66 countries and supports on a daily basis 25 million individual clients, businesses and institutional investors around the world by offering a wide range of advisory services and tailored financial solutions. The Group is built on three complementary core businesses: - French Retail Banking which encompasses the SG and Boursorama brands. Each offers a full range of financial services with omnichannel products at the cutting edge of digital innovation; - International Retail Banking, Insurance and Financial Services, with networks in Africa, Central and Eastern Europe and specialised businesses that are leaders in their markets; - Global Banking and Investor Solutions, which offers recognised expertise, key international locations and integrated solutions. Societe Generale is included in the principal socially responsible investment indices: DJSI (Europe), FTSE4Good (Global and Europe), Bloomberg Gender-Equality Index, Refinitiv Diversity and Inclusion Index, Euronext Vigeo (Europe and Eurozone), STOXX Global ESG Leaders indexes, and the MSCI Low Carbon Leaders Index (World and Europe).

Loading…

NEWS

U.S. Bank CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 16, 2026 07:00 AM

Who's Hiring Cybersecurity Professionals in Minneapolis, MN in 2026?

Cybersecurity professionals in Minneapolis 2026: Dive into the complete guide on hiring trends, top employers like Target and U.S. Bank,...

Read Article

March 12, 2026 07:00 AM

Bank regulators warn of increased cyber risk from Iran war

California and New York agencies urged lenders to practice heightened cyber awareness amid the military strikes on Iran, saying “recent...

Read Article

March 09, 2026 07:00 AM

State-linked actors targeted US networks in lead-up to Iran war

Researchers found backdoors installed on U.S. company networks in the weeks prior to the U.S. and Israeli bombing campaign.

Read Article

March 08, 2026 08:00 AM

Securing Critical Infrastructure in a Time of War

A deep dive into Iranian cyber warfare and actionable defenses for network operators.

Read Article

March 06, 2026 08:00 AM

Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor

Iran-linked MuddyWater hackers breached U.S. networks with new Dindoor malware as regional cyber attacks escalate amid Middle East conflict.

Read Article

March 05, 2026 01:45 PM

Seedworm: Iranian APT on Networks of U.S. Bank, Airport, Software Company

This activity began in early February and has continued in recent days. What organizations should expect next from Iran-aligned groups and the steps they...

Read Article

March 03, 2026 08:00 AM

US banks on high alert for cyberattacks as Iran war escalates

By Pete Schroeder and Michelle Price WASHINGTON, March 3 (Reuters) - The U.S. financial services industry is on heightened alert for...

Read Article

February 27, 2026 08:00 AM

Cybersecurity, Fraud Mitigation Strategies for Family-Owned Businesses Detailed in New Family Enterprise USA, Bank OZK Webcast

Bank OZK Cyber Security Experts Speak with Pat Soldano of Family Enterprise USA about Protecting Legacy of Family-owned Businesses.

Read Article

February 11, 2026 08:00 AM

Citi Puts a Multi-Trillion-Dollar Price Tag on The Quantum Cybersecurity Threat

Citi estimates that a quantum-enabled cyberattack on U.S. bank's access to Fedwire could put $2.0–$3.3 trillion of U.S. GDP at risk.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90603

SUMMARY

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90602

SUMMARY

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-90601

SUMMARY

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90600

SUMMARY

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15892

SUMMARY

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_name buffer (and, for read, a data buffer) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled, relying on the end: label to k_free() them. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning status MGMT_CB_ERROR_RC, the handler executed return ret_rc; directly, bypassing end: and leaking the heap allocation on every rejected request. The settings handlers are reachable over the unauthenticated SMP transport (Bluetooth LE, UART, or UDP, depending on product configuration). The access hook is the mechanism applications use to deny unauthorized settings access, and MGMT_CB_ERROR_RC is a common rejection style, so an attacker who can send settings read/write/delete commands that the hook rejects triggers a heap leak on each attempt. Because the leaked memory is never reclaimed until reboot, a sustained stream of rejected requests monotonically exhausts the kernel heap until k_malloc() fails, denying mcumgr service and impacting any other heap consumer on the device — a denial of service. The impact is availability-only; there is no memory corruption or information disclosure. Only configurations that select the heap buffer type, enable the access hook, and register a hook that returns MGMT_CB_ERROR_RC are affected (the default stack buffer type cannot leak).

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

U.S. Bank Vendor Cyber Rating & Cyber Score

U.S. Bank A.I CyberSecurity Scoring

U.S. Bank CyberSecurity News & History

U.S. Bank Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for U.S. Bank

Incidents vs Banking Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types U.S. Bank vs Banking Industry Avg (This Year)

Incident History - U.S. Bank (X = Date, Y = Severity)

U.S. Bank Subsidiaries

U.S. Bank

U.S. Bank Similar Companies

CIBC

Garanti BBVA

PT Bank SMBC Indonesia Tbk

Groupe BPCE

Federal Bank

Banco Sabadell

Bank Mega

ING

Societe Generale

U.S. Bank CyberSecurity News

Who's Hiring Cybersecurity Professionals in Minneapolis, MN in 2026?

Bank regulators warn of increased cyber risk from Iran war

State-linked actors targeted US networks in lead-up to Iran war

Securing Critical Infrastructure in a Time of War

Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor

Seedworm: Iranian APT on Networks of U.S. Bank, Airport, Software Company

US banks on high alert for cyberattacks as Iran war escalates

Cybersecurity, Fraud Mitigation Strategies for Family-Owned Businesses Detailed in New Family Enterprise USA, Bank OZK Webcast

Citi Puts a Multi-Trillion-Dollar Price Tag on The Quantum Cybersecurity Threat

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

U.S. Bank CyberSecurity News & History

U.S. Bank Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for U.S. Bank

Incidents vs Banking Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types U.S. Bank vs Banking Industry Avg (This Year)

Incident History - U.S. Bank (X = Date, Y = Severity)

U.S. Bank Subsidiaries

U.S. Bank

U.S. Bank Similar Companies

CIBC

Garanti BBVA

PT Bank SMBC Indonesia Tbk

Groupe BPCE

Federal Bank

Banco Sabadell

Bank Mega

ING

Societe Generale

U.S. Bank CyberSecurity News

Who's Hiring Cybersecurity Professionals in Minneapolis, MN in 2026?

Bank regulators warn of increased cyber risk from Iran war

State-linked actors targeted US networks in lead-up to Iran war

Securing Critical Infrastructure in a Time of War

Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor

Seedworm: Iranian APT on Networks of U.S. Bank, Airport, Software Company

US banks on high alert for cyberattacks as Iran war escalates

Cybersecurity, Fraud Mitigation Strategies for Family-Owned Businesses Detailed in New Family Enterprise USA, Bank OZK Webcast

Citi Puts a Multi-Trillion-Dollar Price Tag on The Quantum Cybersecurity Threat

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo