What is the official website of Volkswagen Financial Services (China) ?

The official website of Volkswagen Financial Services (China) is http://www.vwfs.com.cn/.

What is Volkswagen Financial Services (China)'s cybersecurity risk score?

Volkswagen Financial Services (China) has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Volkswagen Financial Services (China) experienced?

According to Rankiteo, Volkswagen Financial Services (China) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Volkswagen Financial Services (China) been affected by any supply chain cyber incidents ?

According to Rankiteo, Volkswagen Financial Services (China) has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: CARIAD (Incident ID: NISSCATOYVOLKAWAVIJAG1775680268) Dimensional Control Systems (Incident ID: DIM4992449100425) AUDI AG (Incident ID: AUDCHA1782073550)

Does Volkswagen Financial Services (China) have SOC 2 Type 1 certification ?

According to Rankiteo, Volkswagen Financial Services (China) is not certified under SOC 2 Type 1.

Does Volkswagen Financial Services (China) have SOC 2 Type 2 certification ?

According to Rankiteo, Volkswagen Financial Services (China) does not hold a SOC 2 Type 2 certification.

Does Volkswagen Financial Services (China) comply with GDPR ?

According to Rankiteo, Volkswagen Financial Services (China) is not listed as GDPR compliant.

Does Volkswagen Financial Services (China) have PCI DSS certification ?

According to Rankiteo, Volkswagen Financial Services (China) does not currently maintain PCI DSS compliance.

Does Volkswagen Financial Services (China) comply with HIPAA ?

According to Rankiteo, Volkswagen Financial Services (China) is not compliant with HIPAA regulations.

Does Volkswagen Financial Services (China) have ISO 27001 certification ?

According to Rankiteo,Volkswagen Financial Services (China) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Volkswagen Financial Services (China) operate in ?

Volkswagen Financial Services (China) operates primarily in the Financial Services industry.

How many employees does Volkswagen Financial Services (China) have ?

Volkswagen Financial Services (China) employs approximately 382 people worldwide.

Does Volkswagen Financial Services (China) own any subsidiaries ?

Volkswagen Financial Services (China) presently has no subsidiaries across any sectors.

How many LinkedIn followers does Volkswagen Financial Services (China) have ?

Volkswagen Financial Services (China)'s official LinkedIn profile has approximately 6,452 followers.

What is the NAICS classification code for Volkswagen Financial Services (China) ?

Volkswagen Financial Services (China) is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does Volkswagen Financial Services (China) have a Crunchbase profile ?

No, Volkswagen Financial Services (China) does not have a profile on Crunchbase.

Does Volkswagen Financial Services (China) have a LinkedIn profile ?

Yes, Volkswagen Financial Services (China) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/volkswagen-financial-services-china.

How many cybersecurity incidents has Volkswagen Financial Services (China) experienced ?

As of July 7, 2026, Rankiteo reports that Volkswagen Financial Services (China) has experienced 12 cybersecurity incidents.

How many peer or competitor companies does Volkswagen Financial Services (China) have ?

Volkswagen Financial Services (China) has an estimated 32,220 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

VFS

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Volkswagen Financial Services (China) Vendor Cyber Rating & Cyber Score

vwfs.com.cn

Add Your Compliance Badge

Volkswagen Finance (China) Co., Ltd. and Volkswagen New Mobility Services Investment Co., Ltd (Volkswagen Financial Services China) is a wholly-owned subsidiary of Volkswagen Financial Services AG. It is also the first wholly foreign-owned professional automobile financial service company in China. Since its inception in 2004, VWFS China currently has more than 900 employees nationwide. Volkswagen Financial Services China established close collaboration with SAIC Volkswagen, FAW – Volkswagen and Volkswagen Group Import (China), providing innovative financial services to Volkswagen Group brands, covering Volkswagen, Audi, Skoda, Porsche, Scania, SEAT, Lamborghini and MAN. Business lines cover areas of new car and used car retail finance,

VFS A.I CyberSecurity Scoring

Scoring History

VFS

Volkswagen Financial Services (China) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Volkswagen Group Au...

Ransomware

100

5/2026

GENVOL177915750...

Volkswagen Group

Ransomware

100

11/2025

CARIAD

NISSCATOYVOLKAW...

Bentley Motors

Ransomware

100

10/2025

SEASKOBENPORVOL...

Volkswagen Financia...

Cyber Attack

10/2025

GRO310203111042...

Volkswagen

Ransomware

100

10/2025

Dimensional Con...

DIM499244910042...

AUDI AG

Cyber Attack

100

9/2025

AUDI AG

AUDCHA178207355...

Volkswagen Financia...

Breach

100

8/2025

VOL225081225

Volkswagen Financia...

Ransomware

9/2024

VOL233262310222...

Volkswagen Financia...

Vulnerability

100

6/2024

AUD303373009092...

Volkswagen Financia...

Breach

03/2021

VOL125417222

Volkswagen Financia...

Breach

8/2019

VOL026072725

Volkswagen Financia...

Vulnerability

100

6/2012

VOL207081225

Loading…

A.I.

VFS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for VFS

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for Volkswagen Financial Services (China) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Volkswagen Financial Services (China) in 2026.

Incident Types VFS vs Financial Services Industry Avg (This Year)

No incidents recorded for Volkswagen Financial Services (China) in 2026.

Incident History - VFS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Volkswagen Financial Services (China) Subsidiaries

VFS

Financial Services

Website: http://www.vwfs.com.cn/

Company Size: 501-1,000 employees

Volkswagen Financial ServicesFinancial Services

Volkswagen GroupMotor Vehicle Manufacturing

Volkswagen Group Investor RelationsMotor Vehicle Manufacturing

AUDI AGMotor Vehicle Manufacturing

Volkswagen do BrasilMotor Vehicle Manufacturing

Volkswagen MXWholesale Motor Vehicles and Parts

Bentley MotorsMotor Vehicle Manufacturing

Volkswagen IndiaAutomotive

SKODA IndiaAutomotive

Volkswagen of America, IncMotor Vehicle Manufacturing

Volkswagen Group ArgentinaMotor Vehicle Manufacturing

Volkswagen Group España DistribuciónAutomotive

Volkswagen Group Italia S.p.A.Automotive

Volkswagen AutoeuropaMotor Vehicle Manufacturing

Volkswagen Group ChinaAutomotive

Volkswagen Pon Financial ServicesFinancial Services

Volkswagen RAutomotive

Volkswagen Group SverigeMotor Vehicle Manufacturing

Volkswagen Group AustraliaMotor Vehicle Manufacturing

Volkswagen Group FranceMotor Vehicle Manufacturing

MAN Diesel & TurboIndustrial Machinery Manufacturing

Volkswagen Commercial Vehicles UKAutomotive

Audi UKMotor Vehicle Manufacturing

SAIC VOLKSWAGENMotor Vehicle Manufacturing

VolkswagenJapanMotor Vehicle Manufacturing

Volkswagen Group Sverige AB / Volkswagen Parts Logistics Sverige ABTransportation, Logistics, Supply Chain and Storage

Distribuidora Volkswagen Central S.A. de C.V.Automotive

VolkswagenMotor Vehicle Manufacturing

Volkswagen Financial Services | BrazilFinancial Services

Volkswagen Financial Services | FranceFinancial Services

Volkswagen Financial Services | FlottenkundenFinancial Services

Volkswagen Group Fleet InternationalAutomotive

Volkswagen Financial Services | ItalyFinancial Services

Volkswagen Semler Finans Danmark A/SFinancial Services

Volkswagen Financial Services IrelandFinancial Services

Volkswagen Financial Services AustraliaFinancial Services

Loading…

Volkswagen Financial Services (China) Similar Companies

Westpac Group

westpac.com.au

From rescue helicopters to signing the Equator Principles, from paying super during parental leave to adding 'Touch ID' biometric technology to our banking apps and being first on the scene with a helping hand in times of crisis... we have a proud history of stepping up to be first for our customers, communities and people. As Australia’s first bank and Australia’s first company we put service at the heart of everything we do and our people are our priority. We've grown up as a company and expanded both in Australia and throughout Asia, the United Kingdom and the United States. Now we are made up of your favourite financial institution names including Westpac, BankSA, St.George Bank, BT Financial Group, RAMs and Bank of Melbourne, a change of job doesn’t mean a change of employer at Westpac Group. We've made a commitment to put our customers first in everything we do. This means creating fundamentally superior customer experiences for each customer, every time. We promise that when you meet with someone from Westpac Group, you'll be touched by their genuine dedication to helping our customers prosper and grow. Westpac Group acknowledges the traditional owners as the custodians of this land, recognising their connection to land, waters and community. We pay our respects to Australia's First Peoples, and to their Elders, past and present.

LPL Financial

lpl.com

LPL Financial Holdings Inc. (Nasdaq: LPLA) is among the fastest growing wealth management firms in the U.S. As a leader in the financial advisor-mediated marketplace, LPL supports over 29,000 financial advisors and the wealth management practices of approximately 1,100 financial institutions, servicing and custodying approximately $1.9 trillion in brokerage and advisory assets on behalf of approximately 7 million Americans. The firm provides a wide range of advisor affiliation models, investment solutions, fintech tools and practice management services, ensuring that advisors and institutions have the flexibility to choose the business model, services, and technology resources they need to run thriving businesses.

Tata Capital

cb tatacapital.com

Tata Capital Limited is a subsidiary of Tata Sons Limited. The Company is registered with the Reserve Bank of India as a Core Investment Company and offers through itself and its subsidiaries fund and fee-based financial services to its customers, under the Tata Capital brand. As a trusted and customer-centric, one-stop financial services provider, Tata Capital caters to the diverse needs of retail, corporate and institutional customers, across various areas of business namely the Commercial Finance, Infrastructure Finance, Cleantech Finance, Wealth Management, Consumer Loans and distribution and marketing of Tata Cards. Tata Capital has over 500+ branches spanning all critical markets in India.

Grupo Salinas

gruposalinas.com

Grupo Salinas es un conjunto de empresas dinámicas, que se caracterizan por la evolución constante y la innovación, enfocadas en la creación de valor económico, social y ambiental. Estamos en industrias diversas como comercio especializado, servicios financieros, telecomunicaciones y medios de comunicación, entre otros sectores. Nuestra Visión: Crear valor y prosperidad para millones de familias con base en una visión de negocios incluyente. Nuestra Misión: Ser el grupo empresarial mexicano más influyente con el mejor equipo de trabajo y con un modelo de gestión de alto desempeño; que permita la innovación permanente e impulsar la libertad, el estado de derecho y la igualdad de oportunidades. Sabemos que entender al cliente y ofrecerle todo lo que necesita para mejorar su calidad de vida es la vía para crear valor. Las acciones y estrategias del Grupo están alineadas a los más altos estándares internacionales en beneficio de la sociedad. Nuestro propósito es ofrecer excelentes productos y servicios que mejoren la calidad de vida de la población, sobre todo en los sectores menos favorecido. Grupo Salinas está integrada por: • Más de 100,000 colaboradores. • Banco Azteca, Tiendas Elektra, Italika, TV Azteca, Totalplay, Grupo Dragón, UPAX, Tiendas Neto, entre otras. • Estamos cerca de nuestros clientes en más de 6,000 puntos de contacto. • Presencia en 5 países: México, Estados Unidos, Guatemala, Honduras y Panamá.

Fifth Third Bank

53.com

At Fifth Third Bank, everything we do is rooted in our purpose: to improve the lives of our customers and the well-being of our communities. Since our founding in 1858, we’ve been committed to creating a better financial experience by empowering our customers and clients to achieve what matters most. Our unified strength is grounded in the individual passion and diversity of more than 20,000 employees who work collaboratively to deliver a better tomorrow to everyone we serve. We offer a strong culture, opportunities for growth 401k match, wellness options, comprehensive insurance plans and additional resources you need to build a lasting and rewarding career path here. Headquartered in Cincinnati, Ohio, we are among the largest money managers in the Midwest. We operate four main businesses—Commercial Banking, Branch Banking, Consumer Lending, and Wealth & Asset Management—and a network of financial centers in Ohio, Kentucky, Indiana, Michigan, Illinois, Florida, Tennessee, West Virginia, Georgia, North Carolina and South Carolina. Consumers also have access to approximately 54,000 Fifth Third fee-free ATMs across the United States. Fifth Third Bancorp is a diversified financial services company and is the indirect parent company of Fifth Third Bank, National Association, a federally chartered institution. Explore Fifth Third career opportunities at: https://www.53.com/content/fifth-third/en/careers.html Fifth Third Bank, N.A., Member FDIC. Fifth Third Bank is proud to be an affirmative action/equal opportunity employer. M/F/D/V

Banco Davivienda

cb davivienda.com

En Davivienda creemos en un mundo financiero sin barreras que facilite la vida a las personas, las empresas, las ciudades y municipios. Por esta razón hoy somos más de 19.000 personas innovando y creando cada día soluciones y ofertas exclusivas para 10 millones de clientes que permitan una mayor inclusión financiera y un mayor desarrollo sostenible.

KKR

kkr.com

KKR is a leading global investment firm that offers alternative asset management as well as capital markets and insurance solutions. KKR aims to generate attractive investment returns by following a patient and disciplined investment approach, employing world-class people, and supporting growth in its portfolio companies and communities. KKR sponsors investment funds that invest in private equity, credit and real assets and has strategic partners that manage hedge funds. KKR’s insurance subsidiaries offer retirement, life and reinsurance products under the management of Global Atlantic Financial Group. References to KKR’s investments may include the activities of its sponsored funds and insurance subsidiaries. For additional information about KKR (NYSE: KKR), please visit www.kkr.com. For additional information about Global Atlantic Financial Group, please visit www.globalatlantic.com. KKR will never request personal information, account details, payments and transfers over digital chat applications, social media, email or through SMS: https://www.kkr.com/security-and-fraud-awareness

Bajaj Finserv

cb bajajfinserv.in

Founded in April 2007, Bajaj Finserv is the financial arm of the Bajaj group. We believe in a simple philosophy to never settle for good and go for great. This reflects in our extensive product portfolio that spans across 3 broad categories- lending, insurance and wealth advisory. With 24 products spread across 12 product lines, we're one of the fastest growing and most diversified NBFCs in India. Our footprint spans the length and breadth of India.

TMF Group

tmf-group.com

We provide employee, financial and legal administration so that firms can invest and operate safely around the world. TMF Group is a single global team with over 11,000 colleagues in more than 125 offices across 87 jurisdictions, covering 92% of world GDP and 95% of FDI inflow. We bring common culture and ways of working, investing heavily in our people and platform to provide a high level of quality and security to our clients. We exist to give clients a global solution to what otherwise requires many local providers, each with their individual operational complexity and risk. Our clients include the majority of the Fortune Global 500, FTSE 100 and top 300 private equity firms. We see ourselves as a partner to them, keeping them on top of complex rules and regulations in the countries where they are active. We recognise that what we do is critical to our clients’ reputation and integrity. That is why we have made flawless service our single obsession. Great service starts with our people, so colleague and client engagement are the two measures we care most about, driving our management agenda and investment.

Loading…

NEWS

Volkswagen Financial Services (China) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 08, 2025 08:00 AM

Volkswagen sets out €160bn investment plan through 2030

Volkswagen Group is looking to invest €160bn ($186bn) through to 2030, according to its CEO Oliver Blume, reported by Reuters.

Read Article

December 06, 2025 08:00 AM

Volkswagen to invest $186 billion through 2030, CEO says

Volkswagen Group plans to invest 160 billion euros ($186 billion) through 2030, its CEO Oliver Blume said, reflecting belt-tightening as...

Read Article

November 26, 2025 08:00 AM

Volkswagen considers expansion of China-developed car exports to global markets

Volkswagen is considering opportunities for China-developed car exports to additional international markets, according to Volkswagen Group...

Read Article

November 25, 2025 08:00 AM

VW says it can halve EV development costs with ‘Made in China’ car

Volkswagen has said it can produce an electric vehicle entirely made in China for half the cost of doing so elsewhere, as the German...

Read Article

November 04, 2025 08:00 AM

VW starts developing AI chip in bid to claw back China sales

Volkswagen is developing its own AI chip for advanced driving capabilities in China as the German group fights to survive in the world's...

Read Article

September 11, 2025 07:00 AM

Artificial Intelligence in the Automotive Industry

Artificial intelligence is changing the automotive industry. We show how AI and data are redefining vehicles, development and production.

Read Article

September 10, 2025 07:00 AM

Volkswagen vows to defend Europe crown in fightback against Chinese EVs

Competition in region's electric vehicle market intensifies as German carmaker launch new models and software.

Read Article

March 17, 2025 07:00 AM

Volkswagen and FAW to introduce 11 new models in China

The lineup will include plans for two electric models, two plug-in hybrids, and two range-extended EVs.

Read Article

January 26, 2025 08:00 AM

Volkswagen open to Chinese rivals taking over excess production lines in Europe

German group scales down manufacturing as it struggles with falling demand and shift to electric vehicles.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53646

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a previous unexpired reset request), subsequent calls to the `reset_password` guest API endpoint reuse the existing token instead of generating a new one. The 15-minute validity window is anchored to the first request's `created_at` timestamp, not the time of the most recent email. An attacker who obtained the original reset link remains able to use it even after the victim requests a new reset, because the original token is never invalidated or rotated. Version 0.8.0 patches the issue. Some workarounds are available. Configure a reverse proxy (e.g., Nginx, Apache, Cloudflare) to apply per-IP rate limiting to the `/client/reset-password` endpoint to minimize the window of opportunity, and/or manually clear expired `client_password_reset` records from the database after a client reports a suspected compromise.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 7.7

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-vp66-w6rc-x32p

CVE-2026-53645

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `/api/admin/staff/permissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and/or use a reverse proxy or WAF to restrict access to `/api/admin/staff/permissions_update` to specific trusted roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-4hf7-xxxw-64rm

CVE-2026-53644

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an `active` state (e.g., `suspended`, `canceled`). The root cause is missing order-state validation in two client API endpoints, despite an `isActive()` helper already existing in the `Serviceapikey` module and the frontend UI correctly gating access on `order.status == 'active'`. Version 0.8.0 contains a fix. Some workarounds are available. If the `Serviceapikey` module is not needed, uninstall it to remove the affected endpoints. One may also use a reverse proxy or WAF to restrict access to `/api/client/order/service` and `/api/client/serviceapikey/reset` based on application-level order-state logic.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-qf6j-vq68-qmfh

CVE-2026-53643

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the `can_always_access` module flag (which grants all staff access to certain modules) and insufficient permission checks or unsafe parameter handling on individual endpoints. Version 0.8.0 contains a fix. Some workarounds are available. Restrict staff accounts to only those who need access to sensitive settings and/or use a reverse proxy or WAF to restrict access to the affected endpoints to trusted IP addresses or higher-privilege roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-563q-g4r4-6f9m

CVE-2026-53642

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address (`email_approved = 0`) can access all client-area pages (e.g. `/client/balance`, `/client/order/list`, `/client/invoice`) and read real account data, including wallet balances and transaction history. The API-side enforcement correctly restricts unverified clients to only profile-related endpoints, but the page-side enforcement is overly permissive, allowing any request whose path starts with `/client`. Version 0.8.0 contains a fix. No known workarounds that don't involve modifying the source code are available.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-7v47-rh46-w923

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…