What is the official website of USCG Contracting & Procurement Enterprise ?

The official website of USCG Contracting & Procurement Enterprise is https://www.dcms.uscg.mil/Our-Organization/Assistant-Commandant-for-Acquisitions-CG-9/.

What is USCG Contracting & Procurement Enterprise's cybersecurity risk score?

USCG Contracting & Procurement Enterprise has an AI-generated cybersecurity risk score of 762 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has USCG Contracting & Procurement Enterprise experienced?

According to Rankiteo, USCG Contracting & Procurement Enterprise currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has USCG Contracting & Procurement Enterprise been affected by any supply chain cyber incidents ?

According to Rankiteo, USCG Contracting & Procurement Enterprise has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: SolarWinds (Incident ID: SOL1780734225) LiteSpeed Technologies (Incident ID: CISLIT1779899124) Nightwing (Incident ID: CISNIG1779150346) Arista Networks (Incident ID: ARICIS1781094274) F5 (Incident ID: F51774844643) SolarWinds (Incident ID: SOL1770194061) Cisco (Incident ID: CIS1766051696) Notepad++ (Incident ID: NOT1765821620) Nightwing (Incident ID: NIGCIS1779216319) Cisco (Incident ID: US-1776976007) Microsoft Security Response Center (Incident ID: CISMIC1771331760) VMware (Incident ID: BRO1769309760) Fortinet (Incident ID: CISSYMFBIFOR1768715192)

Does USCG Contracting & Procurement Enterprise have SOC 2 Type 1 certification ?

According to Rankiteo, USCG Contracting & Procurement Enterprise is not certified under SOC 2 Type 1.

Does USCG Contracting & Procurement Enterprise have SOC 2 Type 2 certification ?

According to Rankiteo, USCG Contracting & Procurement Enterprise does not hold a SOC 2 Type 2 certification.

Does USCG Contracting & Procurement Enterprise comply with GDPR ?

According to Rankiteo, USCG Contracting & Procurement Enterprise is not listed as GDPR compliant.

Does USCG Contracting & Procurement Enterprise have PCI DSS certification ?

According to Rankiteo, USCG Contracting & Procurement Enterprise does not currently maintain PCI DSS compliance.

Does USCG Contracting & Procurement Enterprise comply with HIPAA ?

According to Rankiteo, USCG Contracting & Procurement Enterprise is not compliant with HIPAA regulations.

Does USCG Contracting & Procurement Enterprise have ISO 27001 certification ?

According to Rankiteo,USCG Contracting & Procurement Enterprise is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does USCG Contracting & Procurement Enterprise operate in ?

USCG Contracting & Procurement Enterprise operates primarily in the Government Administration industry.

How many employees does USCG Contracting & Procurement Enterprise have ?

USCG Contracting & Procurement Enterprise employs approximately None employees people worldwide.

Does USCG Contracting & Procurement Enterprise own any subsidiaries ?

USCG Contracting & Procurement Enterprise presently has no subsidiaries across any sectors.

How many LinkedIn followers does USCG Contracting & Procurement Enterprise have ?

USCG Contracting & Procurement Enterprise's official LinkedIn profile has approximately 6,069 followers.

What is the NAICS classification code for USCG Contracting & Procurement Enterprise ?

USCG Contracting & Procurement Enterprise is classified under the NAICS code 92, which corresponds to Public Administration.

Does USCG Contracting & Procurement Enterprise have a Crunchbase profile ?

No, USCG Contracting & Procurement Enterprise does not have a profile on Crunchbase.

Does USCG Contracting & Procurement Enterprise have a LinkedIn profile ?

Yes, USCG Contracting & Procurement Enterprise maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/uscg-contracting-enterprise.

How many cybersecurity incidents has USCG Contracting & Procurement Enterprise experienced ?

As of July 18, 2026, Rankiteo reports that USCG Contracting & Procurement Enterprise has experienced 57 cybersecurity incidents.

How many peer or competitor companies does USCG Contracting & Procurement Enterprise have ?

USCG Contracting & Procurement Enterprise has an estimated 13,046 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UCPE

Boost Score +25 with badge (5 left)

762

/1000

Fair

787

/1000

Fair

USCG Contracting & Procurement Enterprise Vendor Cyber Rating & Cyber Score

uscg.mil

Add Your Compliance Badge

Welcome to the USCG Procurement and Contracting Enterprise! We spend ~$3B annually in support of a variety of missions. Here you will find information about doing business with the USCG, best practices and job opportunities.

UCPE A.I CyberSecurity Scoring

Scoring History

UCPE

USCG Contracting & Procurement Enterprise CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Cybersecurity and I...

Vulnerability

100

6/2026

SolarWinds

SOL1780734225

Cybersecurity and I...

Vulnerability

100

5/2026

LiteSpeed Techn...

CISLIT177989912...

U.S. Department of ...

Cyber Attack

100

5/2026

US-1782931085

Cybersecurity and I...

Breach

100

5/2026

Nightwing

CISNIG177915034...

Cybersecurity and I...

Vulnerability

100

5/2026

Arista Networks

ARICIS178109427...

Cybersecurity and I...

Vulnerability

100

4/2026

LINCISMIC177793...

Cybersecurity and I...

Vulnerability

100

3/2026

F51774844643

U.S. Department of ...

Cyber Attack

100

2/2026

SCOUS-177246174...

Cybersecurity and I...

Cyber Attack

100

2/2026

CISPAL177036707...

Cybersecurity and I...

Vulnerability

100

2/2026

SolarWinds

SOL1770194061

Cybersecurity and I...

Breach

2/2026

CIS1770197400

U.S. Department of ...

Breach

1/2026

US-CUSU-S176859...

U.S. Immigration an...

Breach

100

1/2026

HOMU-S176832898...

Cybersecurity and I...

Cyber Attack

100

1/2026

FBICISUS-UNI176...

U.S. Department of ...

Vulnerability

100

12/2025

US-1767173563

Cybersecurity and I...

Vulnerability

100

12/2025

Cisco

CIS1766051696

Cybersecurity and I...

Vulnerability

12/2025

Notepad++

NOT1765821620

USCG Contracting & ...

Breach

11/2025

USC373373711252...

Cybersecurity and I...

Breach

100

11/2025

Nightwing

NIGCIS177921631...

Cybersecurity and I...

Vulnerability

10/2025

VERCIS177923186...

Cybersecurity and I...

Cyber Attack

100

9/2025

Cisco

US-1776976007

USCG Contracting & ...

Breach

9/2025

FEM319293109302...

Cybersecurity and I...

Cyber Attack

100

8/2025

CIS1770890877

U.S. Department of ...

Ransomware

100

7/2025

US-1771976815

U.S. Department of ...

Cyber Attack

100

7/2025

US-NOZTRE177433...

USCG Contracting & ...

Cyber Attack

100

7/2025

CIS1765368172

USCG Contracting & ...

Breach

7/2025

FEM180271810022...

USCG Contracting & ...

Breach

6/2025

FEM536235310012...

USCG Contracting & ...

Cyber Attack

100

6/2025

CIS1765251340

Cybersecurity and I...

Breach

5/2025

CIS1779207877

USCG Contracting & ...

Cyber Attack

100

5/2025

CIS119221110142...

USCG Contracting & ...

Cyber Attack

100

4/2025

US-598525911262...

USCG Contracting & ...

Breach

100

1/2025

CIS001012825

U.S. Immigration an...

Breach

1/2025

UNIU-S177046516...

USCG Contracting & ...

Cyber Attack

100

12/2024

CIS000122124

USCG Contracting & ...

Vulnerability

100

12/2024

US-001010525

Cybersecurity and I...

Vulnerability

100

10/2024

Microsoft Secur...

CISMIC177133176...

USCG Contracting & ...

Breach

8/2024

FEM309233009302...

USCG Contracting & ...

Vulnerability

100

8/2024

CIS005080624

USCG Contracting & ...

Cyber Attack

100

6/2024

CIS000080624

USCG Contracting & ...

Cyber Attack

100

6/2024

FEM153321510062...

USCG Contracting & ...

Cyber Attack

100

1/2024

CIS1765238766

Cybersecurity and I...

Vulnerability

100

1/2024

VMware

BRO1769309760

USCG Contracting & ...

Ransomware

10/2023

CYB2047151023

Cybersecurity and I...

Vulnerability

9/2023

CIS1769475575

USCG Contracting & ...

Breach

100

5/2023

DEP190311909232...

USCG Contracting & ...

Breach

100

5/2023

US-464164610052...

USCG Contracting & ...

Ransomware

100

1/2023

CIS427092125

USCG Contracting & ...

Breach

12/2022

USI233311222

Cybersecurity and I...

Ransomware

100

7/2021

CISTHEFBI177484...

Cybersecurity and I...

Cyber Attack

6/2021

Fortinet

CISSYMFBIFOR176...

USCG Contracting & ...

Ransomware

100

6/2020

US-341071125

USCG Contracting & ...

Vulnerability

100

6/2018

CIS000122224

USCG Contracting & ...

Breach

01/2018

USD331181223

USCG Contracting & ...

Breach

100

6/2017

FEM74612323

USCG Contracting & ...

Data Leak

02/2016

USD181261023

USCG Contracting & ...

Cyber Attack

100

6/2015

CIS033210310112...

Loading…

A.I.

UCPE Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UCPE

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for USCG Contracting & Procurement Enterprise in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for USCG Contracting & Procurement Enterprise in 2026.

Incident Types UCPE vs Government Administration Industry Avg (This Year)

No incidents recorded for USCG Contracting & Procurement Enterprise in 2026.

Incident History - UCPE (X = Date, Y = Severity)

Loading…

SUBSIDIARY

USCG Contracting & Procurement Enterprise Subsidiaries

UCPE

Government Administration

Website: https://www.dcms.uscg.mil/Our-Organization/Assistant-Commandant-for-Acquisitions-CG-9/

Company Size: 10,001+ employees

U.S. Department of Homeland SecurityGovernment Administration

Cybersecurity and Infrastructure Security AgencyGovernment Administration

CISA Alumni GroupComputer and Network Security

FEMAGovernment Administration

FEMA TrainingGovernment Administration

FEMA Region 6Government Administration

National Flood Insurance Program FEMAInsurance

FEMA Region 5Government Administration

FEMA Region 8Government Administration

FEMA Region 2Emergency and Relief Services

FEMA Region 4Government Administration

FEMA Region 7Government Administration

FEMA National Advisory Council (NAC)Government Administration

U.S. Secret ServiceLaw Enforcement

Federal Law Enforcement Training CentersLaw Enforcement

DHS Science and Technology DirectorateGovernment Administration

Transportation Security Administration (TSA)Government Administration

USCISGovernment Administration

U.S. Department of Homeland Security, Office of Intelligence and Analysis, Private Sector EngagementGovernment Administration

Office of the Citizenship and Immigration Services Ombudsman (CIS Ombudsman)Government Administration

Department of Homeland Security Office of the Chief Financial OfficerGovernment Administration

U.S. Immigration and Customs Enforcement (ICE)Law Enforcement

U.S. Customs and Border ProtectionGovernment Administration

CBP Office of Professional ResponsibilityGovernment Administration

U. S. Coast Guard Office of LeadershipArmed Forces

U.S. Coast Guard CiviliansGovernment Administration

U.S. Coast GuardArmed Forces

U.S. Coast Guard Maritime CommonsMaritime Transportation

Loading…

USCG Contracting & Procurement Enterprise Similar Companies

I work for NSW

nsw.gov.au

The NSW public sector includes ten departments and many agencies and organisations working together to develop policy and deliver important services such as health, education, housing, transport and infrastructure across NSW. We are over 300,000 dedicated people who share the same values - making a difference, giving back and responding to the future. Read our community guidelines: bit.ly/PD-community-guidelines

Gouvernement du Québec – Carrières

quebec.ca

Travailler dans la fonction publique du Québec, c'est plus qu'une carrière! Réparti(e)s dans une vingtaine de ministères et une soixantaine d'organismes à travers le Québec, tous les gestes posés par les employé(e)s de la fonction publique façonnent l’avenir de la société et contribuent à améliorer la vie des Québécoises et Québécois; nous rendons nos routes sécuritaires; nous protégeons nos richesses naturelles; nous faisons rayonner notre culture; nous améliorons nos milieux de vie; etc. Pour nous, être au service de la population, c’est bien plus qu’une carrière! Travailler dans la fonction publique québécoise permet d’œuvrer dans différentes organisations tout en maintenant ses conditions de travail. Nous adhérons aux valeurs de compétence, d’impartialité, d’intégrité, de loyauté et de respect; nous offrons de bonnes conditions de travail, de même que des milieux de travail sains et motivants, nous valorisons l’équité, la diversité et l’inclusion par notre Programme d’accès à l’égalité en emploi dont l’objectif principal est d’assurer une meilleure représentativité des groupes victimes de discrimination en emploi, nous favorisons l’équilibre entre la vie professionnelle et personnelle, nous misons sur le développement des compétences, nous sommes fier(ères) et dévoué(e)s. Nous sommes la fonction publique du Québec!

Ville de Montréal

montreal.ca

Montréal est la plus grande ville francophone d’Amérique et elle se distingue par sa vitalité culturelle exceptionnelle et des forces créatrices reconnues mondialement. Elle se développe un peu plus chaque jour en une ville contemporaine, inclusive et dynamique sur les plans économique, culturel et social. Visant à offrir aux Montréalaises et aux Montréalais un lieu de vie agréable et prospère, la Ville de Montréal veut rester à l’écoute des besoins changeants de sa population afin de s’y adapter de façon continue. Pour ce faire, elle mise sur les compétences et l’expertise de ses 28 000 employés au service de 1,8 million de citoyens.

U.S. Census Bureau

census.gov

The Census Bureau serves as the nation’s leading provider of quality data about its people and economy. We have been headquartered in Suitland, Maryland since 1942, and currently employ about 4,285 staff members. We are part of the U.S. Department of Commerce and overseen by the Economics and Statistics Administration (ESA). We honor privacy, protect confidentiality, share our expertise globally, and conduct our work openly. We are guided on this mission by our strong and capable workforce, our readiness to innovate, and our abiding commitment to our customers. View our comment policy: https://www.census.gov/about/contact-us/comment-policy.html View our privacy policy: https://www.census.gov/about/policies/privacy/privacy-policy.html

Assurance Maladie

ameli.fr

Travailler à l’Assurance Maladie, c’est donner une nouvelle dimension à votre métier et agir au quotidien pour la protection de notre système de santé. Participez à une grande diversité de projets dans un cadre bienveillant et soyez fier de contribuer à une mission essentielle : agir ensemble, protéger chacun. Depuis près de 80 ans, l'Assurance Maladie joue un rôle majeur au service de la solidarité nationale. Nous sommes convaincus que la clé de la pérennité du système de santé relève d'une responsabilité collective et réside dans l'implication forte de chacun de ses acteurs. Au sein de ce système, l'Assurance Maladie assume une triple mission : ⏺️ garantir un accès universel aux droits et permettre l'accès aux soins ⏺️ accompagner chacun dans la préservation de sa santé ⏺️ améliorer l'efficacité du système Toutes ses missions, l’Assurance Maladie les mène avec le souci d’assurer la meilleure qualité de service. Elle s’appuie pour cela sur un réseau de proximité qui couvre l’ensemble du territoire et l’engagement de plus de 80 000 collaborateurs qui agissent jour après jour à l’échelle départementale, régionale et nationale. Ensemble, au quotidien, ils font vivre ses valeurs d’universalité, de solidarité, de responsabilité et d’innovation.

CONICET

conicet.gov.ar

El Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) es el principal organismo dedicado a la promoción de la ciencia y la tecnología en la Argentina. Su actividad se desarrolla en cuatro grandes áreas: • Ciencias agrarias, ingeniería y de materiales • Ciencias biológicas y de la salud • Ciencias exactas y naturales • Ciencias sociales y humanidades En el CONICET, además promovemos y gestionamos la transferencia de tecnologías, servicios y capacidades de Investigación y Desarrollo (I+D) que genera su comunidad científica hacia los sectores socioproductivos, Pymes, Gobiernos, organismos públicos y la sociedad civil. En ese sentido: • Conectamos recursos humanos altamente especializados con empresarios/as para generar oportunidades conjuntas. • Impulsamos la participación con cámaras y asociaciones empresarias, parques tecnológicos e industriales, organismos del Estado, ONG, organizaciones civiles, y redes nacionales e internacionales de vinculación tecnológica. • Facilitamos la transferencia al sector productivo mediante procesos de escalado, pruebas de concepto, entre otros. • Promovemos la creación de Empresas de Base Tecnológica. El CONICET es un ente autárquico del Estado Nacional en jurisdicción del Ministerio de Ciencia, Tecnología e Innovación.

Government of Alberta

alberta.ca

Work with the Alberta government to build a stronger province for current and future generations. We offer diverse and rewarding employment opportunities in an environment that encourages continuous learning and career growth. We are one of the largest employers in Alberta with over 27,000 employees throughout the province. We are an award winning organization that values respect, accountability, integrity, and excellence. Our employees share a common vision of proudly working together to build a stronger province and make a positive and lasting difference in the lives of Albertans. The people of Alberta enjoy a very high quality of life, including the lowest overall taxes in Canada. www.jobs.alberta.ca Please see our comment policy: https://www.alberta.ca/social-media-comment-policy.aspx

Ministry of Health Saudi Arabia

moh.gov.sa

The Ministry of Health (MOH), by way of its objectives, policies and projects included in this strategy, seeks to accomplish a promising future vision; namely, delivering best-quality integrated and comprehensive healthcare services. Carrying health conditions or health status of Saudi inhabitants to the best and highest possible level, in terms of justice and equality in providing healthcare, and in terms of effectiveness and the possibility of incurring the financial burden of the treatment and healthcare. In doing so, the MOH takes as its target meeting citizens’ aspirations in this regard, by providing them with high-quality general and specialized health services, and covering all the population with these services. Creating a sole and exclusive entity to formulate health policies including health insurance services, etc. (such as operating the recently established Health Services Council.) Adopting a public and national health strategy which focuses of the main morbidity burdens; including non-communicable diseases, nutrition, reproductive health, smoking (tobacco-use), AIDS, traffic accidents, and injuries. The system must have an effective and fair method for estimating risks and benefits. Working to diversify sources of revenues to finance the system effectively. These sources must include also public revenues and insurance premiums, in addition to the equally allocated costs and taxes.

State of Minnesota

mn.gov

Minnesota State Government is the third largest employer in the state of Minnesota, employing over 50,000 diverse and talented employees in more than 100 state agencies, boards, commissions, colleges, and universities. Our workplaces can be found across the state in 86 out of 87 Minnesota counties and a small share of employees work in out-of-state locations. When you bring your career to the State of Minnesota, the work you do affects the quality of life of millions of Minnesotans. From those who shape policy, to those who keep us safe, preserve our environment, or take care of our most vulnerable populations, we take our responsibilities to the public seriously. Join us as we continue to serve our great state and build a better Minnesota. To learn more about our career opportunities and comprehensive benefits, visit www.mn.gov/careers. To learn more about our state agencies, boards, commissions, colleges, and universities, visit http://mn.gov/portal/government/state/agencies-boards-commissions.

Loading…

NEWS

USCG Contracting & Procurement Enterprise CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 25, 2026 08:00 AM

Unlocking New Contracting Opportunities with the U.S. Coast Guard

It's been a year since the U.S. Coast Guard (USCG) launched its Force Design 2028 (FD28) initiative to enhance agility, capability, and...

Read Article

February 11, 2026 08:00 AM

US Coast Guard Seals $3.5 Billion Icebreaker Deal With Davie

The US Coast Guard awarded a $3.5 billion contract to Davie Defense to construct five icebreakers as President Donald Trump's administration...

Read Article

January 14, 2026 11:31 PM

Coast Guard awards record $200 million contract to rebuild Station South Padre Island, Texas

WASHINGTON — The U.S. Coast Guard has awarded a $200 million design-build contract to The Haskell Company for the comprehensive recapitalization and...

Read Article

January 14, 2026 08:00 AM

U.S. Coast Guard Awards its Biggest Shoreside Construction Contract Ever

The U.S. Coast Guard is moving swiftly to capitalize on the multi-billion-dollar cash infusion it received from the One Big Beautiful Bill...

Read Article

December 30, 2025 08:00 AM

Bollinger Shipyards to Build Arctic Security Cutters Under $2.1B Coast Guard Contract

Bollinger Shipyards to Build Arctic Security Cutters Under $2.1B Coast Guard Contract ... Bollinger Shipyards has secured a firm-fixed-price...

Read Article

November 19, 2025 08:00 AM

Coast Guard envisions using AI to develop acquisition ‘superhighway’

The U.S. Coast Guard is conducting market research with an eye toward adopting commercial technologies and AI that could boost the...

Read Article

November 11, 2025 08:00 AM

Parsons Awarded Coast Guard Contract to Modernize Biometrics System

The U.S. Coast Guard's Biometrics at Sea System components include Parsons' JavelinXL mobile devices and Ares Gateway software.

Read Article

October 25, 2025 07:00 AM

New H-60 Helicopter Fleet: Strategic Modernization for the U.S. Coast Guard

ABSTRACT. The modernization of the United States Coast Guard (USCG) rotary-wing fleet marks a transformative moment in the institutional...

Read Article

October 24, 2025 07:00 AM

5 Consequential Coast Guard Technology Investments in 2025

The USCG has always been one of the U.S.' most technologically-advanced services. Dive into its most consequential contracts in 2025.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-57980

SUMMARY

Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

2.8

REFERENCES

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57980

CVE-2026-56741

SUMMARY

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS() in TelnetIO.java:856-879 reads client-supplied width and height as 16-bit unsigned integers and passes values such as 65535x65535 to setTerminalGeometry(), allowing an unauthenticated remote attacker to repeatedly alternate values and trigger continuous expensive rendering work that causes CPU exhaustion and denial of service. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-56740

SUMMARY

JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not limit the number of environment variables a client may inject via the Telnet NEW-ENVIRON option, and TelnetIO.readNEVariables() in TelnetIO.java:1127-1180 stores each variable pair in a HashMap held by ConnectionData, allowing an unauthenticated attacker to flood unique variable pairs before the terminating IAC SE byte and exhaust JVM heap memory with an OutOfMemoryError. This issue is fixed in versions 3.30.14, 4.0.16, and 4.2.1.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

3.9

REFERENCES

CVE-2026-56171

SUMMARY

Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Impact Score

4.2

Exploitability

2.8

REFERENCES

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56171

CVE-2026-54335

SUMMARY

Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. In 5.0.44 and earlier, the _.merge(target, source) utility exported by @feathersjs/commons recursively merges source into target by iterating Object.keys(source). When source was produced by JSON.parse and contains a __proto__, constructor, or prototype key, that key is returned as an own-enumerable property; the recursive merge then resolves target['__proto__'] to Object.prototype and writes attacker-supplied properties onto it, polluting the prototype for all plain objects in the process for the lifetime of the Node process. This issue is fixed in version 5.0.45.

Published

Date2026-07-17

Updated

Date2026-07-17

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…