What is the official website of Salesforce Work.com ?

The official website of Salesforce Work.com is https://http://Work.com.

What is Salesforce Work.com's cybersecurity risk score?

Salesforce Work.com has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Salesforce Work.com experienced?

According to Rankiteo, Salesforce Work.com currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Salesforce Work.com been affected by any supply chain cyber incidents ?

According to Rankiteo, Salesforce Work.com has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: CARADTSALCUS1778027258) Okta (Incident ID: ADT1777286874) Salesforce (Incident ID: PANADTSAL1777328877) Salesforce (Incident ID: ADT1777062235) Anodot by Glassbox (Incident ID: CARHOLPRI1776630318) Salesforce (Incident ID: KEM1776831908) Salesforce (Incident ID: MCGSAL1776191039) Salesforce (Incident ID: WYN7-E1779114946) Salesforce (Incident ID: WEASAL1778732635) Aqua Security (Incident ID: AQUUSEAMASALCIS1775046662) Mixpanel (Incident ID: ZEN1774628650) Salesforce (Incident ID: INFSAL1774362301) Amazon Web Services (AWS) (Incident ID: SALAMAMICPINRED1774269319) okta (Incident ID: NOROKTSAL1773854168) Salesforce (Incident ID: SAL1773146972) Salesforce Experience Cloud (Incident ID: SALLASAMDSNOSONOKT1773153462) Salesforce (Incident ID: SALHAL1775967850) Salesforce (Incident ID: TIFLVMCHR1770865579) Salesforce (Incident ID: EURODI1770907059) okta (Incident ID: OKTSALGOO1769222214) Agentforce Marketing (Incident ID: SALFOR1778063116) Salesforce (Incident ID: PLADRA1774449041) Drift, a Salesloft company (Incident ID: SAL4794547112625) Salesforce (Incident ID: SAL5592855100325) Salesforce (Incident ID: SAL2862828092525) Cisco (Incident ID: SAL5732257091825) Salesloft (Incident ID: DRI514090325) Salesforce Experience Cloud (Incident ID: ENTSAL1773088371) Salesforce (Incident ID: DRI635082925) Salesforce (Incident ID: SALFAR1767922939) Salesforce (Incident ID: WOR1768679649) moveIT Software (Incident ID: ORA4202442101025) Salesforce (Incident ID: SAL0562205100825) Salesforce (Incident ID: SALODI1772484824) Salesforce (Incident ID: GRU1768529823) Salesforce (Incident ID: GRU1769118538) Salesforce (Incident ID: LOUPARVOLTIFJAP1770908674) Salesforce (Incident ID: THEINGSALJAGORASYNDAV1769095448) Salesforce (Incident ID: QILCYBSALHALPLA1768955694)

Does Salesforce Work.com have SOC 2 Type 1 certification ?

According to Rankiteo, Salesforce Work.com is not certified under SOC 2 Type 1.

Does Salesforce Work.com have SOC 2 Type 2 certification ?

According to Rankiteo, Salesforce Work.com does not hold a SOC 2 Type 2 certification.

Does Salesforce Work.com comply with GDPR ?

According to Rankiteo, Salesforce Work.com is not listed as GDPR compliant.

Does Salesforce Work.com have PCI DSS certification ?

According to Rankiteo, Salesforce Work.com does not currently maintain PCI DSS compliance.

Does Salesforce Work.com comply with HIPAA ?

According to Rankiteo, Salesforce Work.com is not compliant with HIPAA regulations.

Does Salesforce Work.com have ISO 27001 certification ?

According to Rankiteo,Salesforce Work.com is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Salesforce Work.com operate in ?

Salesforce Work.com operates primarily in the IT Services and IT Consulting industry.

How many employees does Salesforce Work.com have ?

Salesforce Work.com employs approximately 13 people worldwide.

Does Salesforce Work.com own any subsidiaries ?

Salesforce Work.com presently has no subsidiaries across any sectors.

How many LinkedIn followers does Salesforce Work.com have ?

Salesforce Work.com's official LinkedIn profile has approximately 8,531 followers.

What is the NAICS classification code for Salesforce Work.com ?

Salesforce Work.com is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Salesforce Work.com have a Crunchbase profile ?

Yes, Salesforce Work.com has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/rypple.

Does Salesforce Work.com have a LinkedIn profile ?

Yes, Salesforce Work.com maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/workdotcom.

How many cybersecurity incidents has Salesforce Work.com experienced ?

As of June 10, 2026, Rankiteo reports that Salesforce Work.com has experienced 54 cybersecurity incidents.

How many peer or competitor companies does Salesforce Work.com have ?

Salesforce Work.com has an estimated 40,639 peer or competitor companies worldwide.

What types of cybersecurity incidents has Salesforce Work.com faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Salesforce Work.com

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

Salesforce Work.com Vendor Cyber Rating & Cyber Score

Work.com

cb in

Add Your Compliance Badge

Sell Better Together Sales Performance Management from Salesforce. Please follow us for the latest updates on the Salesforce LinkedIn Page.

Salesforce Work.com A.I CyberSecurity Scoring

Scoring History

Salesforce Work.com

Salesforce Work.com CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Salesforce

Cyber Attack

5/2026

Salesforce

CARADTSALCUS177...

Salesforce

Cyber Attack

4/2026

GOOSAL177791964...

Salesforce

Cyber Attack

4/2026

SAL1777395283

Salesforce

Cyber Attack

100

4/2026

Okta

ADT1777286874

Salesforce

Breach

4/2026

Salesforce

PANADTSAL177732...

Salesforce

Breach

4/2026

Salesforce

ADT1777062235

Salesforce

Breach

4/2026

Anodot by Glass...

CARHOLPRI177663...

Salesforce

Breach

4/2026

Salesforce

KEM1776831908

Salesforce

Vulnerability

4/2026

SAL1776299258

Salesforce

Breach

4/2026

Salesforce

MCGSAL177619103...

Salesforce

Vulnerability

4/2026

SAL1776084470

Salesforce

Breach

4/2026

Salesforce

WYN7-E177911494...

Salesforce

Vulnerability

4/2026

Salesforce

WEASAL177873263...

Salesforce

Vulnerability

100

4/2026

Aqua Security

AQUUSEAMASALCIS...

Salesforce

Ransomware

100

3/2026

Mixpanel

ZEN1774628650

Salesforce

Breach

3/2026

Salesforce

INFSAL177436230...

Salesforce

Vulnerability

100

3/2026

Amazon Web Serv...

SALAMAMICPINRED...

Salesforce

Breach

100

3/2026

okta

NOROKTSAL177385...

Salesforce

Breach

3/2026

Salesforce

SAL1773146972

Salesforce Experien...

Breach

3/2026

Salesforce Expe...

SALLASAMDSNOSON...

Salesforce

Breach

3/2026

Salesforce

SALHAL177596785...

Salesforce

Breach

2/2026

TOYOPTSAL177195...

Salesforce

Breach

2/2026

Salesforce

TIFLVMCHR177086...

Salesforce

Breach

2/2026

Salesforce

EURODI177090705...

Salesforce

Cyber Attack

1/2026

okta

OKTSALGOO176922...

Agentforce Marketin...

Vulnerability

1/2026

Agentforce Mark...

SALFOR177806311...

Salesforce

Cyber Attack

100

1/2026

SAL1768394538

Salesforce

Ransomware

100

1/2026

Salesforce

PLADRA177444904...

Salesforce

Breach

100

11/2025

Drift, a Salesl...

SAL479454711262...

Salesforce

Ransomware

100

10/2025

Salesforce

SAL559285510032...

Salesforce

Breach

100

9/2025

Salesforce

SAL286282809252...

Salesforce

Cyber Attack

100

9/2025

Cisco

SAL573225709182...

Salesforce

Cyber Attack

100

9/2025

Salesloft

DRI514090325

Salesforce Experien...

Breach

9/2025

Salesforce Expe...

ENTSAL177308837...

Salesforce

Breach

8/2025

Salesforce

DRI635082925

Salesforce

Vulnerability

100

8/2025

Salesforce

SALFAR176792293...

Salesforce

Breach

8/2025

Salesforce

WOR1768679649

Salesforce

Ransomware

100

7/2025

moveIT Software

ORA420244210102...

Salesforce Work.com

Cyber Attack

100

6/2025

SAL540255411062...

Salesforce

Cyber Attack

100

5/2025

Salesforce

SAL056220510082...

Salesforce

Vulnerability

5/2025

Salesforce

SALODI177248482...

Salesforce Work.com

Breach

3/2025

SAL313223110082...

Salesforce

Breach

2/2025

Salesforce

GRU1768529823

Salesforce

Breach

1/2025

Salesforce

GRU1769118538

Salesforce

Breach

1/2025

Salesforce

LOUPARVOLTIFJAP...

Salesforce

Ransomware

100

1/2025

Salesforce

THEINGSALJAGORA...

Salesforce Work.com

Cyber Attack

100

8/2024

SAL210212110042...

Salesforce

Cyber Attack

100

8/2024

SALARU177197435...

Salesforce Work.com

Cyber Attack

100

6/2024

SAL096210910082...

Salesforce

Ransomware

100

6/2024

Salesforce

QILCYBSALHALPLA...

Salesforce Work.com

Cyber Attack

100

5/2024

SAL500215010092...

Salesforce Work.com

Ransomware

100

10/2023

SAL560205610112...

Salesforce Work.com

Ransomware

100

6/2023

SAL423224210102...

Salesforce Work.com

Cyber Attack

05/2019

SAL215719323

Loading…

A.I.

Salesforce Work.com Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Salesforce Work.com

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Salesforce Work.com in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Salesforce Work.com in 2026.

Incident Types Salesforce Work.com vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Salesforce Work.com in 2026.

Incident History - Salesforce Work.com (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Salesforce Work.com Subsidiaries

Salesforce Work.com

IT Services and IT Consulting

Website: https://http://Work.com

Company Size: 13

SalesforceSoftware Development

SalesforceOrg PartnersIT Services and IT Consulting

TrailheadIT Services and IT Consulting

Vlocity, a Salesforce CompanySoftware Development

Agentforce CommerceTechnology, Information and Internet

PardotSoftware Development

ExactTargetSoftware Development

Salesforce Revenue CloudSoftware Development

Salesforce Trailhead SuperbadgesInformation Services

Salesforce Pathfinder Training ProgramIT Services and IT Consulting

Salesforce QuipSoftware Development

QuipSoftware Development

Clipboard, inc.Software Development

Navajo SystemsIT Services and IT Consulting

EdgeSpring (acquired by Salesforce)IT Services and IT Consulting

Model MetricsInformation Technology & Services

BlueTailInformation Technology & Services

GoInstantTechnology, Information and Internet

Salesforce Data 360Software Development

EntropySoftSoftware Development

ManymoonTechnology, Information and Internet

ThinkfuseSoftware Development

Ourglass.Technology, Information and Internet

GroupSwimSoftware Development

Etacts Inc.Computer Networking

Prior Knowledge, Inc.Software Development

SitemasherSoftware Development

Salesforce for Small BusinessSoftware Development

Salesforce DevelopersSoftware Development

Salesforce Experience CloudSoftware Development

Salesforce ArchitectsIT Services and IT Consulting

Salesforce.orgSoftware Development

Agentforce ServiceSoftware Development

Salesforce PartnersIT Services and IT Consulting

Agentforce 360 PlatformSoftware Development

Agentforce MarketingSoftware Development

Salesforce AdminsSoftware Development

Salesforce News & InsightsTechnology, Information and Internet

Salesforce Customer SuccessSoftware Development

Salesforce IndustriesTechnology, Information and Internet

DreamforceInternet Publishing

Salesforce for GovernmentTechnology, Information and Internet

Salesforce AppExchangeIT Services and IT Consulting

Salesforce DesignersSoftware Development

Agentforce SalesSoftware Development

Futureforce: Salesforce University RecruitingInternet Publishing

Loading…

Salesforce Work.com Similar Companies

Softtek

softtek.com

Founded in 1982 by a small group of entrepreneurs, Softtek started out in Mexico providing local IT services, and today is a global leader in next-generation digital solutions. The first company to introduce the Nearshore model, Softtek helps Global 2000 organizations build their digital capabilities constantly and seamlessly, from ideation and development to execution and evolution. Its entrepreneurial drive spans 20+ countries and more than 15,000 talented professionals. For more information on what we do, who we are, and career opportunities, visit www.softtek.com / Follow us on Instagram (@softtekofficial), on Twitter (@Softtek), and be our fan on Facebook www.facebook.com/softtek.

Coforge

cb coforge.com

Coforge is a global digital services and solutions provider that fuses deep domain expertise with emerging technologies to deliver real-world business impact. With a sharp focus on select industries and an execution intensity that’s uniquely our own, Coforge has emerged as the 7th largest Indian IT services firm, with a revenue growth rate nearly 8x the industry average. We help enterprises transform into intelligent, high-growth businesses through a wide gamut of digital transformation capabilities and deep experience across industries, including Agentic AI, Cloud, Data & Analytics, Low-Code Platforms, Intelligent Automation, Cybersecurity, and the setup and scaling of Global Capability Centers (GCCs). We deliver a wide range of digital engineering services—enabling modernization, operational agility, customer experience transformation, and industry-specific platform solutions. We operate across 24 countries, with 30 global delivery centers and a thriving workforce of 33,497 employees. “We are somewhat atypical in our approach to solving business problems. We are specialists, not just engineers and technologists, who spend an inordinate amount of time understanding the targeted functional spaces that we focus on.” — Sudhir Singh, CEO Coforge is a certified Great Place to Work® (5 years in a row), recognized for excellence in Employee Engagement, Learning & Development, and Corporate Social Responsibility. Our Greater Noida HQ runs entirely on 100% green energy. Through initiatives like The Coforge Public Library, we provide free, inclusive access to knowledge in Noida and Gurugram—and intend to expand this network across India. Coforge has been recognized by leading analysts and advisory firms, including Gartner, Forrester, Everest Group, Zinnov, and more.

Oracle

oracle.com

We’re a cloud technology company that provides organizations around the world with computing infrastructure and software to help them innovate, unlock efficiencies and become more effective. We also created the world’s first – and only – autonomous database to help organize and secure our customers’ data. Oracle Cloud Infrastructure offers higher performance, security, and cost savings. It is designed so businesses can move workloads easily from on-premises systems to the cloud, and between cloud and on-premises and other clouds. Oracle Cloud applications provide business leaders with modern applications that help them innovate, attain sustainable growth, and become more resilient. The work we do is not only transforming the world of business--it's helping defend governments, and advance scientific and medical research. From nonprofits to companies of all sizes, millions of people use our tools to streamline supply chains, make HR more human, quickly pivot to a new financial plan, and connect data and people around the world. At work, we embrace diversity, encourage personal and professional growth, and celebrate a global team of passionate people developing innovative technologies that help people and companies tackle real-world problems head-on. If you’d like to join us, please visit our Careers page: https://www.oracle.com/corporate/careers/ For investor news, SEC filings, and financial information about Oracle (NYSE:ORCL), please visit https://investor.oracle.com/home/. Follow us on X: x.com/oracle Like our page on Facebook: facebook.com/Oracle/ Follow us on Instagram: instagram.com/oracle/

Globant

cb globant.link

At Globant, we create the digitally-native products that people love. We bridge the gap between businesses and consumers through technology and creativity, leveraging our experience as an AI powerhouse. We dare to digitally transform organizations and strive to delight their customers. - We have more than 30,000 employees and are present in 33 countries across 5 continents, working for companies like Google, Electronic Arts, and Santander, among others. - We were named a Worldwide Leader in AI Services (2023) and a Worldwide Leader in CX Improvement Services (2020) by IDC MarketScape report. - We are the fastest-growing IT brand and the 5th strongest IT brand globally (2024), according to Brand Finance. - We were featured as a business case study at Harvard, MIT, and Stanford. - We are active members of The Green Software Foundation (GSF) and the Cybersecurity Tech Accord. For more information, visit https://bit.ly/globant_com Follow us: http://www.twitter.com/globant http://www.youtube.com/Globant http://www.facebook.com/Globant https://instagram.com/Globant https://www.tiktok.com/@globant

NEC Corporation

cb nec.com

NEC Corporation has established itself as a leader in the integration of IT and network technologies while promoting the brand statement of “Orchestrating a brighter world.” NEC enables businesses and communities to adapt to rapid changes taking place in both society and the market as it provides for the social values of safety, security, fairness and efficiency to promote a more sustainable world where everyone has the chance to reach their full potential. For more information, visit NEC at http://www.nec.com NEC's Strengths and Competencies ・Named "2017 Global 100 Most Sustainable Corporations in the World" an Index Listing the World’s 100 Most Sustainable Corporations ・Named one of the "World's Top 100 Most Innovative Organizations for 2016" by Thomson Reuters ・Face recognition technology achieved No. 1 in the recent Face in Video Evaluation (FIVE, *1) testing performed by the U.S. National Institute of Standards and Technology (NIST) (*2) (*1) https://www.nist.gov/programs-projects/face-video-evaluation-five (*2) Results shown from the Face In Video Evaluation (FIVE), the Multiple Biometric Grand Challenge (MBGC), the Multiple Biometric Evaluation (MBE) and the Face Recognition Vendor Test (FRVT) do not constitute endorsement of any particular product by the U.S. Government. ** Please note that we reserve the right to delete any comments posted on NEC Corporation’s LinkedIn page that are deemed extremely defamatory or libelous to any company or individual, or that may be offensive to others.

NTT DATA, Inc.

global.ntt

NTT DATA, Inc. is a trusted global innovator of business and technology services. We're committed to helping clients innovate, optimize and transform for long-term success. Our R&D investments help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure, and connectivity.

AlmavivA Experience

almavivaexperience.com.br

Líder em transformação digital nos mercados de Customer Experience e Debt Collection na América Latina. Combinamos tecnologia, inteligência e excelência operacional para entregar soluções completas que antecipam as necessidades dos nossos Clientes. São mais de 530 milhões de interações anuais, metade em canais digitais, para um portfólio de 60+ clientes. Siga-nos e acompanhe como transformamos experiências em resultados.

TransUnion

transunion.com

TransUnion is a global information and insights company that makes trust possible in the modern economy. We do this by providing an actionable picture of each person so they can be reliably represented in the marketplace. As a result, businesses and consumers can transact with confidence and achieve great things. This picture is grounded in our legacy as a credit reporting agency which enables us to tap into both credit and public record data; our data fusion methodology that helps us link, match and tap into the awesome combined power of that data; and our knowledgeable and passionate team, who stewards the information with expertise, and in accordance with local legislation around the world. A leading presence in more than 30 countries across five continents, TransUnion provides solutions that help create economic opportunity, great experiences and personal empowerment for hundreds of millions of people. We call this Information for Good® — it’s our purpose, and what drives us every day. Contact Us Customer support: https://transu.co/60024D64I Business support: https://transu.co/60044D67G

eClerx

eclerx.com

eClerx is a productized services company, bringing together people, technology and domain expertise to amplify business results. Our mission is to set the benchmark for client service and success in our industry. Our vision is to be the innovation partner of choice for technology, data analytics and process management services.

Loading…

NEWS

Salesforce Work.com CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 28, 2025 08:00 AM

Gainsight Verifies Token Breach Linked to Salesforce Advisory, Issues New IOCs

Gainsight, the leading customer success platform, has confirmed that a security incident involving its Salesforce integration compromised...

Read Article

November 28, 2025 08:00 AM

Salesforce (CRM) Stock Before the Bell: AI Bets, Informatica Deal and Cybersecurity Risks – What to Watch on November 28, 2025

Salesforce shares closed at $228.27 on November 26, down 2.5% for the day and about 30% year-to-date.

Read Article

November 26, 2025 08:00 AM

Gainsight CEO promises transparency as it responds to compromise of Salesforce integration

The company has been in regular contact with customers, and says only a handful have seen data directly impacted.

Read Article

November 24, 2025 08:00 AM

Gainsight says additional applications put on hold after Salesforce customers breached

The company said that Zendesk and Hubspot integrations have been deactivated as the probe continues.

Read Article

November 24, 2025 08:00 AM

⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

Fortinet exploit, Chrome 0-Day, BadIIS malware, SaaS breach, and record DDoS — plus 15+ top stories shaping this week in cybersecurity.

Read Article

November 20, 2025 08:00 AM

Salesforce says some of its customers’ data was accessed after Gainsight breach

Salesforce said it's investigating an incident where hackers compromised some of its customers' data after breaching customer experience...

Read Article

November 20, 2025 08:00 AM

Salesforce investigating campaign targeting customer environments connected to Gainsight app

Researchers warn that ShinyHunters has been compromising OAuth tokens to gain potential access to customer data.

Read Article

October 17, 2025 07:00 AM

Salesforce defends security practices after Qantas hack

Key points. Salesforce defended its security at a US conference days after hackers released data from 5.7 million Qantas customers.

Read Article

October 14, 2025 07:00 AM

Anthropic and Salesforce expand partnership to bring Claude to regulated industries

Anthropic is an AI safety and research company that's working to build reliable, interpretable, and steerable AI systems.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-9754

SUMMARY

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-122207

CVE-2026-9753

SUMMARY

The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

cvss4

Base Score: 7.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-124959

CVE-2026-9752

SUMMARY

An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-123440

CVE-2026-9751

SUMMARY

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 6.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

1.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-123370

CVE-2026-9750

SUMMARY

An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.

Published

Date2026-06-09

Updated

Date2026-06-09

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://jira.mongodb.org/browse/SERVER-123633

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…