What is the official website of Allianz Maroc ?

The official website of Allianz Maroc is https://www.allianz.ma.

What is Allianz Maroc's cybersecurity risk score?

Allianz Maroc has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Allianz Maroc experienced?

According to Rankiteo, Allianz Maroc currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Allianz Maroc been affected by any supply chain cyber incidents ?

According to Rankiteo, Allianz Maroc has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: ALLSALFARTRA1789577043) Snowflake (Incident ID: MEREQUUNIMAEMGMGOOTOYSNOALLORARIPTIC1775528897) Gainsight (Incident ID: GAI0292402112125)

Does Allianz Maroc have SOC 2 Type 1 certification ?

According to Rankiteo, Allianz Maroc is not certified under SOC 2 Type 1.

Does Allianz Maroc have SOC 2 Type 2 certification ?

According to Rankiteo, Allianz Maroc does not hold a SOC 2 Type 2 certification.

Does Allianz Maroc comply with GDPR ?

According to Rankiteo, Allianz Maroc is not listed as GDPR compliant.

Does Allianz Maroc have PCI DSS certification ?

According to Rankiteo, Allianz Maroc does not currently maintain PCI DSS compliance.

Does Allianz Maroc comply with HIPAA ?

According to Rankiteo, Allianz Maroc is not compliant with HIPAA regulations.

Does Allianz Maroc have ISO 27001 certification ?

According to Rankiteo,Allianz Maroc is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Allianz Maroc operate in ?

Allianz Maroc operates primarily in the Insurance industry.

How many employees does Allianz Maroc have ?

Allianz Maroc employs approximately 476 people worldwide.

Does Allianz Maroc own any subsidiaries ?

Allianz Maroc presently has no subsidiaries across any sectors.

How many LinkedIn followers does Allianz Maroc have ?

Allianz Maroc's official LinkedIn profile has approximately 91,441 followers.

What is the NAICS classification code for Allianz Maroc ?

Allianz Maroc is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does Allianz Maroc have a Crunchbase profile ?

No, Allianz Maroc does not have a profile on Crunchbase.

Does Allianz Maroc have a LinkedIn profile ?

Yes, Allianz Maroc maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/allianz-maroc.

How many cybersecurity incidents has Allianz Maroc experienced ?

As of October 20, 2026, Rankiteo reports that Allianz Maroc has experienced 13 cybersecurity incidents.

How many peer or competitor companies does Allianz Maroc have ?

Allianz Maroc has an estimated 15,747 peer or competitor companies worldwide.

What types of cybersecurity incidents has Allianz Maroc faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Vulnerability, Breach and Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Allianz Maroc

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Allianz Maroc Vendor Cyber Rating & Cyber Score

allianz.ma

Add Your Compliance Badge

Allianz Maroc a pour mission d’accompagner ses assurés particuliers et professionnels à chaque étape de leur vie pour aller de l’avant.

Allianz Maroc

Allianz Maroc CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Allianz

Vulnerability

100

9/2026

Salesforce

ALLSALFARTRA178...

Allianz

Ransomware

100

12/2025

Snowflake

MEREQUUNIMAEMGM...

Allianz Maroc

Breach

10/2025

ALL229272210012...

Allianz Maroc

Ransomware

100

8/2025

ALL316081425

Allianz

Breach

8/2025

Gainsight

GAI029240211212...

Allianz Life

Breach

7/2025

ALL1772058877

Allianz Maroc

Cyber Attack

7/2025

ALL259272510012...

Allianz Maroc

Ransomware

100

6/2025

ALL436204310012...

Allianz Maroc

Breach

100

5/2025

ALL505090325

Allianz Maroc

Ransomware

100

6/2024

ALL029340210092...

Allianz Maroc

Breach

6/2024

ALL003320010032...

Allianz Maroc

Breach

4/2024

ALL841080425

Allianz Maroc

Ransomware

100

01/2023

ALL435050724

Loading…

A.I.

Allianz Maroc Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Allianz Maroc

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Maroc in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Allianz Maroc in 2026.

Incident Types Allianz Maroc vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Maroc in 2026.

Incident History - Allianz Maroc (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Allianz Maroc Subsidiaries

Allianz Maroc

Insurance

Website: https://www.allianz.ma

Company Size: 476

107

AllianzFinancial Services

Allianz PartnersInsurance

Allianz Partners FranceInsurance

Allianz Partners BrasilSeguros e previdência complementar

Allianz Partners EspañaSeguros

Allianz Partners TürkiyeConsumer Services

Allianz Partners AustraliaInsurance

Allianz Partners IndiaInsurance

Allianz Partners UK and IrelandInsurance

Allianz Global Assistance CanadaInsurance

Allianz Partners MéxicoSeguros

Allianz Partners NederlandInsurance

Allianz Partners USAInsurance

Allianz Partners BelgiumInsurance

Allianz Partners PortugalSeguros e previdência complementar

Allianz Partners APACInsurance

Allianz Partners DeutschlandVersicherungswesen

Allianz Partners ItalyAssicurazioni

Allianz Partners RéunionBusiness Consulting and Services

Allianz Partners ColombiaAdministrative and Support Services

Allianz Partners New ZealandInsurance

Allianz Partners MalaysiaFinancial Services

Allianz Partners SwitzerlandVersicherungswesen

Allianz Partners Nordic & BalticsInsurance

Allianz Partners Japan金融サービス

Bajaj Allianz General InsuranceInsurance

PIMCOInvestment Management

Allianz TechnologyIT Services and IT Consulting

Allianz BrasilInsurance

Allianz FranceInsurance

Allianz Protection JuridiqueInsurance

Allianz Global InvestorsFinancial Services

Allianz Global Investors ItaliaServizi finanziari

ACP | Allianz Capital PartnersInvestment Management

Allianz Global Investors DACHFinancial Services

アリアンツ・グローバル・インベスターズ・ジャパン金融サービス

risklab - the Investment and Risk Advisory Experts of Allianz Global InvestorsFinancial Services

Allianz Global Investors FranceServices financiers

Allianz Global Investors EspañaFinancial Services

Allianz TürkiyeInsurance

Allianz ServicesFinancial Services

Allianz Services IndiaFinancial Services

Allianz ConsultingBusiness Consulting and Services

Allianz TradeInsurance

Allianz LifeInsurance

Allianz ColombiaInsurance

Allianz EgyptInsurance

Allianz EspañaInsurance

BBVA Allianz SegurosInsurance

Mutakamela InsuranceInsurance

Allianz Partners, HealthInsurance

Allianz AustraliaInsurance

Allianz Broker AustraliaInsurance

Allianz Australia Personal InjuryInsurance

Allianz Australia AutomotiveInsurance

Allianz ItaliaInsurance

Allianz MalaysiaInsurance

Allianz ArgentinaInsurance

PIMCO Prime Real EstateReal Estate

Allianz IndonesiaInsurance

Allianz MéxicoInsurance

Allianz DirectInsurance

Allianz XVenture Capital and Private Equity Principals

Allianz Asia PacificInsurance

SNA LebanonInsurance

Allianz in DeutschlandInsurance

Allianz Lebensversicherungs-AGInsurance

Allianz Kunde und Markt GmbHInsurance

Allianz Versicherungs AGInsurance

Allianz Beratungs- und Vertriebs AGInsurance

Allianz Private Krankenversicherungs AGInsurance

Allianz ONE - Business Solutions GmbHInsurance

Allianz SuisseInsurance

ElectriX.swissDienstleistungen für Verbraucher

Allianz Broker AcademyVersicherungswesen

Allianz BelgiumInsurance

Allianz GreeceInsurance

Allianz PortugalInsurance

Allianz Global Digital FactoryVersicherungswesen

Allianz CommercialInsurance

Mutakamela Insuranceالتأمين

Allianz Global BenefitsInsurance

Allianz-Tiriac AsigurariInsurance

Allianz AyudhyaInsurance

Allianz NederlandFinancial Services

Allianz ReinsuranceInsurance

Allianz ÖsterreichInsurance

Allianz IrelandInsurance

metafinanz Informationssysteme GmbHIT Services and IT Consulting

KOLETHE CONSULTING INC.,IT Services and IT Consulting

Allianz Asset ManagementFinancial Services

Kaiser X Labs. A company of AllianzDesign Services

Allianz pojišťovna Česká republikaInsurance

Allianz BulgariaFinancial Services

Allianz - Slovenska poistovna, a.s.Insurance

Allianz Hungária Zrt.Insurance

Darta Saving Life Assurance dacInsurance

Allianz LuxembourgInsurance

Allianz MadagascarInsurance

Allianz Life GhanaInsurance

Allianz Pension PartnersFinancial Services

Allianz Reinsurance America, Inc.Insurance

Allianz Zagreb d.d.Insurance

SulAmérica AutoInsurance

PROJECT M MagazineFinancial Services

SyncierInformation Technology & Services

IDS GmbH – Analysis and Reporting ServicesFinancial Services

Loading…

Allianz Maroc Similar Companies

Aviva

cb aviva.com

💛 We're a leading Insurance, Wealth & Retirement business. 📣 Follow for #LifeAtAviva. Aviva is nothing without our people. Living up to our purpose to be with you today for a better tomorrow applies to those we work with just as much as it does to our customers. We want Aviva to be a place where people can be themselves, and we want our workforce to reflect the customers and communities we serve. This means offering market-leading benefits and challenging ourselves to do more to build a workplace – and society – that works for all. It takes you. It takes Aviva.

USI Insurance Services

usi.com

USI is one of the largest insurance brokerage and consulting firms in the world, delivering property and casualty, employee benefits, personal risk, program and retirement solutions to large risk management clients, middle market companies, smaller firms and individuals. Headquartered in Valhalla, New York, USI connects more than 10,500 industry-leading professionals across approximately 200 offices to serve clients’ local, national and international needs. USI has become a premier insurance brokerage and consulting firm by leveraging the USI ONE Advantage®, an interactive platform that integrates proprietary and innovative client solutions, networked local resources and enterprise-wide collaboration to deliver customized results with positive, bottom-line impact. USI attracts best-in-class industry talent with a long history of deep and continuing investment in our local communities. For more information, visit usi.com.

Manulife

cb manulife.com

Manulife is a leading international financial services group that helps people make their decisions easier and lives better. With our global headquarters in Toronto, we operate as Manulife across our offices in Canada, Asia, and Europe, and primarily as John Hancock in the United States. We have more than 40,000 employees, over 116,000 agents serving ~34 million customers worldwide, and over $1.3 trillion in assets under management and administration. Visit www.Manulife.com to find out more. For Manulife terms of use, please visit http://bit.ly/SM_Terms

Allianz Partners

allianz-partners.com

Allianz Partners is a world leader in B2B2C insurance and assistance, offering global solutions that span international health and life, travel insurance, automotive and assistance. Customer driven, our innovative experts are redefining insurance services by delivering future-ready, high-tech high-touch products and solutions that go beyond traditional insurance. Our products are embedded seamlessly into our partners’ businesses or sold directly to customers, and are available through four commercial brands: Allianz Assistance, Allianz Automotive, Allianz Travel and Allianz Care. Present in 75 countries, our 21,100 employees speak 70 languages, handle over 71 million cases each year, and are motivated to go the extra mile to offer peace of mind to our customers around the world. As part of the Allianz Group, we are proud to be the Worldwide Insurance Partner of the Olympic and Paralympic Movements. For more information, please visit: www.allianz-partners.com

Liberty Mutual Insurance

cb libertymutualgroup.com

At Liberty Mutual, we believe progress happens when people feel secure. For more than 110 years we have helped people and businesses embrace today and confidently pursue tomorrow by providing protection for the unexpected and delivering it with care. A Fortune 100 company with more than 40,000 employees in 28 countries and economies, we are the ninth largest global property and casualty insurer and generate more than $50 billion in annual consolidated revenue. We operate through three strategic business units: US Retail Markets, providing auto, home, renters and other personal and small commercial lines property and casualty insurance to individuals and small businesses countrywide; Global Risk Solutions, delivering a full range of comprehensive commercial and specialty insurance, reinsurance and surety solutions to mid-size and large businesses worldwide; and Liberty Mutual Investments, deploying more than $100 billion of long-term capital globally across its integrated platform to drive economic growth, power innovation and secure Liberty Mutual’s promises. For more information, visit www.libertymutualinsurance.com.

HUB International

hubinternational.com

Hi, we’re HUB. We advise businesses and individuals on how to reach their goals. When you partner with us, you’re at the center of a vast network of risk, insurance, employee benefits, retirement and wealth management specialists that bring clarity to a changing world with tailored solutions and unrelenting advocacy. So you’re ready for tomorrow. About Hub International Headquartered in Chicago, Illinois, Hub International Limited (Hub) is a leading full-service global insurance broker providing property and casualty, life and health, employee benefits, investment and risk management products and services. From offices located throughout North America, Hub’s vast network of specialists provides peace of mind on what matters most by protecting clients through unrelenting advocacy and tailored insurance solutions. For more information, please visit hubinternational.com.

Blue Cross Blue Shield of Michigan

bcbsm.com

Blue Cross Blue Shield of Michigan is a nonprofit corporation and an independent licensee of the Blue Cross and Blue Shield Association. BCBSM's commitment to Michigan is what differentiates it from other health insurance companies doing business in the state. That mission has never changed. Nearly 70 years ago, Blue Cross Blue Shield of Michigan started with a purpose to provide people with the security of knowing they have health care when they need it. Today, that nonprofit mission is the same and the company is accomplishing it in many ways, including: Offering access to health care coverage for everyone, regardless of circumstances Never dropping your coverage for health reasons Partnering with the state to cover more than 32,000 children through MIChild Providing financial support to 30 free clinics statewide Contributing more money than any other company to provide Michigan with better health and health care Advocating and educating through Alliance for Advancing Nonprofit Health Care For more on the history of BCBSM, please visit our section on historical highlights: http://www.bcbsm.com/home/bcbsm/1930.shtml

ICICI Lombard

cb icicilombard.com

ICICI Lombard is one of the leading private general insurance company in the country. The Company offers a well-diversified range of products through multiple distribution channels, including motor, health, crop, fire, personal accident, marine, engineering, and liability insurance. With a legacy of over 2 decades, ICICI Lombard is committed to customer centricity with its brand philosophy of ‘Nibhaye Vaade’. The company has issued over 37.6 million policies, over 3.2 million claims processed and has a Gross Written Premium (GWP) of ₹282.58 billion for the year ended March 31, 2025. ICICI Lombard has 328 branches and 15,123 employees, as on March 31, 2025. ICICI Lombard has been a pioneer in the industry and is one of the first large-scale insurance company in India to migrate its entire core systems to the cloud. With a strong focus on being digital-led and agile, it has launched several tech-driven innovations — including one of the industry-first Face Scan feature on its signature insurance and wellness app, IL TakeCare, which has received over 16.6 million downloads, as on June 30, 2025. * The company has won several prestigious awards- including the Insurance Asia, ICC Emerging Asia Insurance, ET BFSI Exceller, ET CIO, ICAI, FICCI Insurance, Contact Center World Global, and CSR Times in recognition of its various initiatives. For more details log on to https://www.icicilombard.com/. You can also connect with us via IL TakeCare App | RIA WhatsApp: 7738282666 *As per public disclosure.

Bankers Life

careersatbankerslife.com

Bankers Life® focuses on the insurance and investment needs of middle-income Americans who are near or in retirement. The Bankers Life brand is part of CNO Financial Group, Inc. (NYSE: CNO), whose companies provide insurance and wealth management solutions that help protect the health and retirement needs of working and retired Americans. With a constant commitment to understanding and meeting the distinct needs of our clients, we have a strong reputation of excellence and reliability. As a national company with over 225 offices across the country, we have a team of approximately 4,200 Bankers Life exclusive insurance agents, including more than 700 financial representatives. We live and work in the communities we serve, and we take pride in our local presence, which allows us to build personal connections with our customers and truly understand their financial goals. At Bankers Life, we believe in the power of one-on-one consultations. Our agents take time to listen to our customers and gain a deep understanding of their needs, values, and aspirations. By doing so, we provide tailored solutions that align with our clients’ retirement objectives. We’re committed to delivering exceptional customer service and expertise. Our agents undergo rigorous training to stay up to date with the latest industry knowledge and trends. This helps ensure our customers receive the best possible guidance and support in navigating their financial futures. Bankers Life is a marketing brand of subsidiaries of CNO Financial Group, Inc., including Bankers Life Securities, Inc., Bankers Life Advisory Services, Inc., Bankers Life and Casualty Company, and select policies sold by Washington National Life Insurance Company and in NY by Bankers Conseco Life Insurance Company (BCLIC). BCLIC is authorized to sell insurance in New York. To learn more about our career opportunities, visit us at careersatbankerslife.com Bankers Life is a BBB Accredited Business.

Loading…

NEWS

Allianz Maroc CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 24, 2023 06:21 AM

Allianz Risk Barometer

The most important corporate concerns for the year ahead, as ranked by 3338 risk management experts from 97 countries and territories ➤ Learn more.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Allianz Maroc Vendor Cyber Rating & Cyber Score

Allianz Maroc A.I CyberSecurity Scoring

Allianz Maroc CyberSecurity News & History

Allianz Maroc Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Allianz Maroc

Incidents vs Insurance Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Allianz Maroc vs Insurance Industry Avg (This Year)

Incident History - Allianz Maroc (X = Date, Y = Severity)

Allianz Maroc Subsidiaries

Allianz Maroc

Allianz Maroc Similar Companies

Aviva

USI Insurance Services

Manulife

Allianz Partners

Liberty Mutual Insurance

HUB International

Blue Cross Blue Shield of Michigan

ICICI Lombard

Bankers Life

Allianz Maroc CyberSecurity News

Allianz Risk Barometer

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Allianz Maroc CyberSecurity News & History

Allianz Maroc Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Allianz Maroc

Incidents vs Insurance Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Allianz Maroc vs Insurance Industry Avg (This Year)

Incident History - Allianz Maroc (X = Date, Y = Severity)

Allianz Maroc Subsidiaries

Allianz Maroc

Allianz Maroc Similar Companies

Aviva

USI Insurance Services

Manulife

Allianz Partners

Liberty Mutual Insurance

HUB International

Blue Cross Blue Shield of Michigan

ICICI Lombard

Bankers Life

Allianz Maroc CyberSecurity News

Allianz Risk Barometer

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo