What is the official website of VDL Bus & Coach España S.L. ?

The official website of VDL Bus & Coach España S.L. is http://www.vdlbuscoach.com.

What is VDL Bus & Coach España S.L.'s cybersecurity risk score?

VDL Bus & Coach España S.L. has an AI-generated cybersecurity risk score of 744 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has VDL Bus & Coach España S.L. experienced?

According to Rankiteo, VDL Bus & Coach España S.L. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has VDL Bus & Coach España S.L. been affected by any supply chain cyber incidents ?

According to Rankiteo, VDL Bus & Coach España S.L. has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does VDL Bus & Coach España S.L. have SOC 2 Type 1 certification ?

According to Rankiteo, VDL Bus & Coach España S.L. is not certified under SOC 2 Type 1.

Does VDL Bus & Coach España S.L. have SOC 2 Type 2 certification ?

According to Rankiteo, VDL Bus & Coach España S.L. does not hold a SOC 2 Type 2 certification.

Does VDL Bus & Coach España S.L. comply with GDPR ?

According to Rankiteo, VDL Bus & Coach España S.L. is not listed as GDPR compliant.

Does VDL Bus & Coach España S.L. have PCI DSS certification ?

According to Rankiteo, VDL Bus & Coach España S.L. does not currently maintain PCI DSS compliance.

Does VDL Bus & Coach España S.L. comply with HIPAA ?

According to Rankiteo, VDL Bus & Coach España S.L. is not compliant with HIPAA regulations.

Does VDL Bus & Coach España S.L. have ISO 27001 certification ?

According to Rankiteo,VDL Bus & Coach España S.L. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does VDL Bus & Coach España S.L. operate in ?

VDL Bus & Coach España S.L. operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does VDL Bus & Coach España S.L. have ?

VDL Bus & Coach España S.L. employs approximately 6 people worldwide.

Does VDL Bus & Coach España S.L. own any subsidiaries ?

VDL Bus & Coach España S.L. presently has no subsidiaries across any sectors.

How many LinkedIn followers does VDL Bus & Coach España S.L. have ?

VDL Bus & Coach España S.L.'s official LinkedIn profile has approximately 841 followers.

What is the NAICS classification code for VDL Bus & Coach España S.L. ?

VDL Bus & Coach España S.L. is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does VDL Bus & Coach España S.L. have a Crunchbase profile ?

No, VDL Bus & Coach España S.L. does not have a profile on Crunchbase.

Does VDL Bus & Coach España S.L. have a LinkedIn profile ?

Yes, VDL Bus & Coach España S.L. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/vdl-bus-coach-espana.

How many cybersecurity incidents has VDL Bus & Coach España S.L. experienced ?

As of August 22, 2026, Rankiteo reports that VDL Bus & Coach España S.L. has not experienced any cybersecurity incidents.

How many peer or competitor companies does VDL Bus & Coach España S.L. have ?

VDL Bus & Coach España S.L. has an estimated 13,032 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

VBCES

Boost Score +25 with badge (5 left)

744

/1000

Moderate

769

/1000

Fair

VDL Bus & Coach España S.L. Vendor Cyber Rating & Cyber Score

vdlbuscoach.com

Add Your Compliance Badge

Bienvenido a la página oficial de LinkedIn de VDL Bus & Coach España S.L. VDL Bus & Coach, perteneciente al grupo VDL Groep, se encarga del diseño, la fabricación, la comercialización y el servicio de postventa de una amplia gama de autobuses, autocares, chasis, minibuses y midibuses, así como a la compraventa de autobuses usados. Entre su gama de productos también se incluye una variedad de soluciones de movilidad eléctrica para el transporte público. La fabricación de los productos de VDL Bus & Coach tiene lugar en los Países Bajos y Bélgica. La marca aporta un gran valor en la calidad, la seguridad, la durabilidad, la sostenibilidad del medio ambiente, el bajo consumo de combustible, la comodidad y los bajos costos de mantenimiento.

VBCES A.I CyberSecurity Scoring

Scoring History

VBCES

VDL Bus & Coach España S.L. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

VBCES Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for VBCES

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for VDL Bus & Coach España S.L. in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for VDL Bus & Coach España S.L. in 2026.

Incident Types VBCES vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for VDL Bus & Coach España S.L. in 2026.

Incident History - VBCES (X = Date, Y = Severity)

Loading…

SUBSIDIARY

VDL Bus & Coach España S.L. Subsidiaries

VBCES

Motor Vehicle Manufacturing

Website: http://www.vdlbuscoach.com

Company Size: 6

VDL GroepInternational Trade and Development

VDL Enabling Technologies Group (ETG)Industrial Machinery Manufacturing

VDL Bus & Coach bvMotor Vehicle Manufacturing

VDL AgrotechFarming

VDL JansenFarming

VDL Jansen - Broiler sectorAkkerbouw

VDL Jansen - Breeder sectorAkkerbouw

VDL Jansen - Layer sectorAkkerbouw

VDL Jansen - Manure handlingFarming

VDL NedcarAutomotive

VDL Enabling Technologies Group (ETG) AlmeloMechanical Or Industrial Engineering

VDL SteelweldIndustrial Machinery Manufacturing

De MeeuwConstruction

VDL Special VehiclesIndustrial Machinery Manufacturing

VDL NederlandIndustrial Machinery Manufacturing

VDL ETG EindhovenMechanical Or Industrial Engineering

VDL Carbon captureMaritime Transportation

VDL ETG Precision B.V.Industrial Machinery Manufacturing

VDL Container SystemsConstruction

VDL Van Hool MacedoniaMotor Vehicle Manufacturing

VDL Bus RoeselareMotor Vehicle Manufacturing

VDL TBP ElectronicsWholesale Appliances, Electrical, and Electronics

VDL Energy SystemsIndustrial Machinery Manufacturing

VDL Industrial Modules B.V.Machinery Manufacturing

VDL Defence TechnologiesDefense and Space Manufacturing

VDL Insect SystemsFarming

VDL Packaging bvMachinery Manufacturing

VDL RENA ElectronicaAppliances, Electrical, and Electronics Manufacturing

Werken bij Rena Electronica in ZundertProductie huishoudelijke apparaten en consumentenelektronica

VDL SystemsMachinery Manufacturing

VDL Automated Vehicles BV.Transportation, Logistics, Supply Chain and Storage

VDL Weweler bvManufacturing

VDL Mast SolutionsConstruction

VDL ETG Technology & Development B.V.Industrial Machinery Manufacturing

VDL Enabling Transport SolutionsIndustrial Machinery Manufacturing

VDL Smart SpacesMechanical Or Industrial Engineering

VDL KoningsAutomation Machinery Manufacturing

VDL Translift bvMotor Vehicle Manufacturing

VDL KTIIndustrial Machinery Manufacturing

VDL GL Precision B.V.Industrial Machinery Manufacturing

VDL KunststoffenPlastics Manufacturing

VDL De Meeuw Belgium-modulair bouwbedrijf-construction modulaireConstruction

VDL Industrial Products B.V.Machinery Manufacturing

VDL ParreeMotor Vehicle Manufacturing

VDL StaalserviceIndustrial Machinery Manufacturing

VDL ETG Projects B.V.Industrial Machinery Manufacturing

VDL AssemblyManufacturing

VDL HMI BVIndustrial Machinery Manufacturing

VDL Bus Center GmbHMotor Vehicle Manufacturing

VDL TIM Hapert B.V.Machinery Manufacturing

VDL Fibertech Industries BVPlastics Manufacturing

VDL KlimaInternational Trade and Development

VDL Parts B.V.Motor Vehicle Manufacturing

VDL TechnicsMetal Treatments

VDL ETG SwitzerlandIndustrial Machinery Manufacturing

VDL VDS Technische IndustrieIndustrial Machinery Manufacturing

VDL NSA MetaalIndustrial Machinery Manufacturing

VDL Weweler PartsTruck Transportation

VD Leegte MetaalMining

VDL Bus Valkenswaard B.V.Motor Vehicle Manufacturing

VDL MPCMachinery Manufacturing

VDL Hapro B.V.Manufacturing

VDL Industries GainesvilleIndustrial Machinery Manufacturing

VDL Services B.V.Renewable Energy Semiconductor Manufacturing

VDL CastingsIndustrial Machinery Manufacturing

VDL GereedschapmakerijIndustrial Machinery Manufacturing

VDL BelgiumAutomotive

VDL Bus & Coach FranceAutomotive

VDL Bike Frame TechnologiesManufacturing

VDL Lasindustrie B.V.Machinery Manufacturing

VDL Wientjes Emmen B.V.Plastics Manufacturing

VDL Rotech SRLIndustrial Machinery Manufacturing

VDL Wientjes Roden B.V.Plastics Manufacturing

VDL Mobility Innovation CentreMotor Vehicle Manufacturing

VDL PostmaMechanical Or Industrial Engineering

VDL Weweler-ColaertIndustrial Machinery Manufacturing

VDL Holding BelgiumInternational Trade and Development

Loading…

VDL Bus & Coach España S.L. Similar Companies

Marelli

cb marelli.com

Marelli is a global, independent technology partner to the automotive industry, with a strong and established track record in innovation and manufacturing excellence. As mobility is evolving fast and global trends drive unprecedented innovation, we leverage our expertise in integrating software and hardware to position ourselves as key enablers of the Software Defined Vehicle. Our Netiquette: Welcome to the Marelli LinkedIn page! On this LinkedIn Page, Marelli will share the most important news about its technological innovations, Corporate and Motorsport activities, using different kinds of media contents. Each user can participate and share his point of view. The comments are monitored and moderated following specific guidelines that we want to share with you, in order to establish an open and clear relationship with our fanbase. The administrators will participate in the conversations of the community – when the number of interactions allows them to do it – and they’ll respond to the questions of the users, only if these questions are not direct competence of the Marelli Customer Service. We reserve the right to remove comments that: - are not pertinent to the posts of the page; - consist in a violation of user’s privacy (ex. to share a user’s telephone number); - have vulgar, offensive or sexual content; - have the purpose to intimidate or discredit other people, institutions and religions; - violate any user’s rights; - promote illegal activities; - promote products, events or commercial services, even if they’re not direct competitors of Marelli; - have a political, ideological or religious content. In case of disagree among users or between users and administrators of the page, we invite all the members of the community to debate and contribute with respect for all the opinions, following the aim of the page itself. Every user assumes the full responsibility for all the content that he shares on the Marelli LinkedIn page.

Volvo Trucks

volvotrucks.com

Volvo Trucks supplies complete transport solutions for discerning professional customers with its full range of medium- and heavy-duty trucks. Customer support is provided via a global network of dealers with 2,200 service points in about 130 countries. Volvo trucks are assembled in 12 countries across the globe. In 2024 approximately 134,000 Volvo trucks were delivered worldwide. Volvo Trucks is part of the Volvo Group, one of the world’s leading manufacturers of trucks, buses, construction equipment and marine and industrial engines. The group also provides complete solutions for financing and service. Volvo Trucks’ work is based on the core values of quality, safety and environmental care.

American Honda Motor Company, Inc.

honda.com

We are Honda. A company built on dreams and the determination to make them come true. Driven by our commitment to society and the planet, our work brings joy to our customers and enhances mobility, as we work to help people everywhere expand their life’s potential. Our products, from cars and trucks, to advanced light jets and other forms of mobility, reflect our belief that the purpose of technology is to help people. Together, we are building an inclusive culture where people feel seen and celebrated. Where associates from a variety of backgrounds can apply their unique ideas and experiences to help us create a cleaner, safer, more exciting mobile world. You’re invited to join Honda on this journey. Your individual skills, passion, persistence, innovative mindset and challenging spirit are needed to help Honda Bring the Future. Bring the Future at honda.com/careers

Royal Enfield

royalenfield.com

The oldest motorcycle brand in continuous production, Royal Enfield made its first motorcycle in 1901. A division of Eicher Motors Limited, Royal Enfield has created the mid-sized motorcycle segment in India with its unique and distinctive modern classic bikes. Royal Enfield operates in 60+ countries across the world with more than 3000 retail touch points globally, 5 CKD units (Argentina, Brazil, Colombia, Nepal, & Thailand), 3 state-of-the-art manufacturing facilities based out of Chennai, India and two technical centers - in India and in the UK. Watch Royal Enfield's incredible journey here - https://youtu.be/QbHgJ6flUt4

General Motors

gm.com

General Motors’ vision is to create a world with Zero Crashes, Zero Emissions and Zero Congestion, and we have committed ourselves to leading the way toward this future. Today, we are in the midst of a transportation revolution, and we have the ambition, the talent and the technology to realize the safer, better and more sustainable world we want. As an open, inclusive company, we’re also creating an environment where everyone feels welcomed and valued for who they are. One team, where all ideas are considered and heard, where everyone can contribute to their fullest potential, with a culture based in respect, integrity, accountability and equality. Our team brings wide-ranging perspectives and experiences to solving the complex transportation challenges of today and tomorrow. For information on the GM Privacy Statement, please visit http://www.gm.com/privacy-statement.html

Visteon Corporation

visteon.com

Visteon is advancing mobility through innovative technology solutions that enable a software-defined and electric future. With next-generation digital cockpit and electrification products, Visteon leverages the strength and agility of its global network with a local footprint to deliver a cleaner, safer and more connected vehicle experience. Headquartered in Van Buren Township, Michigan, Visteon operates in 17 countries worldwide, recorded approximately $3.76 billion in annual sales and booked $6 billion of new business in 2022.

Joyson Group

joyson.com

Joyson Group is a young, ambitious high-tech company, its headquarter is located in Ningbo, China. With more than 100 bases in 30 countries, over 40000 employees globally. Founded in 2004, Joyson 's main products used to be automotive functional components. Since 2011, the company has acquired several companies: automotive electronics company, PREH GmbH; robotic company IMA and QUIN GmbH in Germany, and a global automotive safety system from United States: KSS, and German smart car connect industry leader TS GmbH，and Takata, a Japanese automotive safety parts maker successively. Through enterprise innovation, product upgrade and multiple international mergers and acquisitions, the company has transformed into a global market leader. Through leading innovative design, stable manufacturing, quality management and excellent service, Joyson become a long-term partner of global automotive manufacturers as BMW, Mercedes Benz, Audi, Volkswagen, General Motors and Ford. Joyson is also awarded constantly by Porsche, BMW, Mercedes Benz, Volkswagen, General Motors as Quality Supplier Excellence Award. Joyson aims to be the most accountable partner for outstanding global automotive manufacturers, and the innovative market leader in car safety and intelligent driving industries.

Mahindra and Mahindra Limited [Automotive and Farm Equipment Business]

mahindracareers.com

A USD 19.4 billion multinational group based in Mumbai, India, Mahindra provides employment opportunities to over 256,000 people across 100 countries. Mahindra operates in the key industries that drive economic growth, enjoying a leadership position in tractors, utility vehicles, information technology, financial services and vacation ownership. In addition, Mahindra enjoys a strong presence in the agribusiness, aerospace, components, consulting services, defence, energy, industrial equipment, logistics, real estate, retail, steel, commercial vehicles and two wheeler industries. The Automotive and Farm Equipment Business is the largest contributor of the Mahindra Group’s revenue. With 30,000+ full time employees spread across 20 locations, Mahindra has a strong presence in India. Further it propels an entire manufacturing ecosystem of 1,200 suppliers and 3,500 dealers, thereby creating direct and indirect employment for over 200,000 individuals. Our Farm Equipment business is the number 1 tractor company in the world by volume. In addition to our focus on maintaining a leading position in the core tractor mechanization business, we strive to deliver on our aspiration of “Farm Tech Prosperity” thus enabling our customers and our communities to RISE. Our Automotive business is a full-range mobility player with a presence in almost every segment of the automobile industry. Our product portfolio ranges from world class SUVs, premium luxury UVs, sedans, pick-ups, light, medium and heavy commercial vehicles to three-wheelers. All these cater to a diverse customer base spanning across rural and semi-urban customers. Leveraging our growing dominance, domestic & international market penetration and recent strategic acquisitions, we aim to provide world class exeperience to our customers and team members.

Nissan Motor Corporation

nissan-global.com

Nissan Motor Corporation is a global car manufacturer that sells a full line of vehicles under the Nissan and INFINITI brands. Nissan’s global headquarters in Yokohama, Japan, manages operations in four regions: Japan-ASEAN, China, Americas, and AMIEO (Africa, Middle East, India, Europe & Oceania). For more information about our products, services and commitment to sustainable mobility, visit nissan-global.com. You can also follow us on Facebook, Instagram, Twitter and LinkedIn and see all our latest videos on YouTube.

Loading…

NEWS

VDL Bus & Coach España S.L. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 27, 2026 08:00 AM

Metro Mass spare parts: We cleared 3 out of 4 containers and 30 VDL buses from the port before leaving office - Former MMTL boss

Mr Adu Boahen was reacting to an announcement by the current MD of MMTL, Kale Cezar that a container loaded with spare parts supplied by Dutch...

Read Article

January 26, 2026 08:00 AM

VDL delivers first Futura 3s

NETHERLANDS The VDL Bus Group has delivered the first four of its new VDL Futura 3 coaches to customers. The vehicles were handed over on Friday...

Read Article

January 23, 2026 08:00 AM

VDL delivers first Futura 3 coaches to home market customers

VDL has quickly followed the global debut of its Futura 3 coach with delivery of the first customer examples to operators in the...

Read Article

November 27, 2025 08:00 AM

Ellisons Travel receives a team-spec Van Hool TDX21 Altano

Ellisons Travel has taken delivery of a Van Hool TDX21 Altano, supplied by VDL Bus UK. It is to Premier League football team specification.

Read Article

November 22, 2025 08:00 AM

Alarm in Europe over China-linked bus technology amid deepening security worries

This sudden scrutiny of Chinese buses comes as Europe is reassessing its exposure to Chinese technology across multiple sectors.

Read Article

November 10, 2025 08:00 AM

FT: Britain explores possibility of remote access to Yutong electric buses

The UK government is investigating whether hundreds of Chinese-made electric buses on British roads could be remotely deactivated,...

Read Article

November 06, 2025 08:00 AM

Concern in Norway after test shows Chinese-made buses can be disabled remotely

Transport operator Ruter says the manufacturer has access to the vehicles' control systems, which could in theory be used to turn them off.

Read Article

October 07, 2025 06:37 AM

Gov’t procures 100 buses worth US$17.5M for Metro Mass

Government has procured one hundred (100) intercity buses at the cost of 17.5 million United States Dollars for the Metro Mass Transit Limited (MMTL) since.

Read Article

October 06, 2025 07:00 AM

VDL Bus Group launched to capture two ‘complementary’ brands

Described as an “integrated” company, it has brought together the former VDL Bus and Coach and VDL Van Hool operations. The latter was formed in...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53541

SUMMARY

OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a special case allows any argument whose name starts with `ot_` to bypass this filter. While two system arguments (`ot_executionTrackingId` and `ot_username`) are injected by OliveTin and overridden, all other `ot_`-prefixed arguments supplied by the user pass through unmodified. These bypassed arguments are not type-checked — the validation loop only iterates over the action's defined arguments, so `ot_`-prefixed arguments skip all type safety checks entirely; set as environment variables — via `buildEnv()`, with completely unvalidated values, and passed to the executed command; and included in the template context — available as `.Arguments.ot_*` in template rendering. Commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d contains a patch.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-53525

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions (weechat_strcasecmp and strcmp) to verify password hashes and plaintext passwords. An attacker can exploit timing differences to extract the server-computed hash character by character, then authenticate using the correct hash without knowing the password. Version 4.9.1 fixes the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.2

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-vhv8-g2r9-cwcc

CVE-2026-53524

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate decompression function relay_websocket_inflate() has no upper bound on output size. An authenticated relay user can send a small compressed WebSocket frame (~100 bytes) that decompresses to gigabytes, exhausting all server memory and crashing the entire WeeChat process. The api protocol enables permessage-deflate and requires authentication before WebSocket upgrade. Version 4.9.1 patches the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-v2v4-45wm-5cr3

CVE-2026-53499

SUMMARY

FORT Validator is a Resource Public Key Infrastructure (RPKI) relying-party validator that produces validated route-origin data. FORT Validator versions through 1.6.7 contain an origin-validation error in their RRDP processing: a delegated CA under the same Trust Anchor Locator (TAL) can reference a victim CA’s public RRDP notification and snapshot URLs, causing FORT’s URL-based download cache to report success after deleting the victim’s local snapshot. Following a routine victim publication, this can silently remove the victim’s VRPs and other signed objects from FORT’s output, potentially enabling route hijacking or loss of reachability. Version 1.6.8 contains a patch that rejects cross-origin RRDP snapshot and delta URLs; as a workaround, administrators can disable HTTP/RRDP with --http.enabled=false while keeping rsync enabled, although this can leave data unavailable or stale where rsync is not supported.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/NICMx/FORT-validator/security/advisories/GHSA-qfm3-577x-rh54

CVE-2026-49360

SUMMARY

Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured with a DuckDB-backed project, an attacker can use DuckDB filesystem primitives to read and write files accessible to the Recce server process. The impact depends on how Recce is deployed, but may include disclosure of local files, tampering with Recce/dbt artifacts, modification of browser-served static files leading to stored XSS, and modification of application files if those paths are writable. If Recce is run as root, file access occurs with root privileges inside that host or container. This issue has been patched in Recce `v1.50.0`. Users should upgrade to Recce `v1.50.0` or later. The patch restricts unsafe file read/write behavior for DuckDB-backed query execution and hardens the affected query path. Other warehouse adapters have also been reviewed for similar exposure. Users who cannot upgrade immediately should avoid exposing `recce server` to the public internet or any untrusted network. Recommended mitigations include enabling authentication or placing Recce behind an authenticated reverse proxy/VPN, running Recce as a non-root user, using a read-only application filesystem where possible, and ensuring that sensitive files or credentials are not available to the Recce process.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…