What is the official website of Allianz ONE ?

The official website of Allianz ONE is https://www.allianz.de.

What is Allianz ONE's cybersecurity risk score?

Allianz ONE has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Allianz ONE experienced?

According to Rankiteo, Allianz ONE currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Allianz ONE been affected by any supply chain cyber incidents ?

According to Rankiteo, Allianz ONE has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Snowflake (Incident ID: MEREQUUNIMAEMGMGOOTOYSNOALLORARIPTIC1775528897) Salesforce (Incident ID: TRA1021410090425)

Does Allianz ONE have SOC 2 Type 1 certification ?

According to Rankiteo, Allianz ONE is not certified under SOC 2 Type 1.

Does Allianz ONE have SOC 2 Type 2 certification ?

According to Rankiteo, Allianz ONE does not hold a SOC 2 Type 2 certification.

Does Allianz ONE comply with GDPR ?

According to Rankiteo, Allianz ONE is not listed as GDPR compliant.

Does Allianz ONE have PCI DSS certification ?

According to Rankiteo, Allianz ONE does not currently maintain PCI DSS compliance.

Does Allianz ONE comply with HIPAA ?

According to Rankiteo, Allianz ONE is not compliant with HIPAA regulations.

Does Allianz ONE have ISO 27001 certification ?

According to Rankiteo,Allianz ONE is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Allianz ONE operate in ?

Allianz ONE operates primarily in the Insurance industry.

How many employees does Allianz ONE have ?

Allianz ONE employs approximately 481 people worldwide.

Does Allianz ONE own any subsidiaries ?

Allianz ONE presently has no subsidiaries across any sectors.

How many LinkedIn followers does Allianz ONE have ?

Allianz ONE's official LinkedIn profile has approximately 2,067 followers.

What is the NAICS classification code for Allianz ONE ?

Allianz ONE is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does Allianz ONE have a Crunchbase profile ?

No, Allianz ONE does not have a profile on Crunchbase.

Does Allianz ONE have a LinkedIn profile ?

Yes, Allianz ONE maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/allianz-one-business-solutions-gmbh.

How many cybersecurity incidents has Allianz ONE experienced ?

As of July 7, 2026, Rankiteo reports that Allianz ONE has experienced 12 cybersecurity incidents.

How many peer or competitor companies does Allianz ONE have ?

Allianz ONE has an estimated 15,581 peer or competitor companies worldwide.

What types of cybersecurity incidents has Allianz ONE faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Allianz ONE

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Allianz ONE Vendor Cyber Rating & Cyber Score

allianz.de

Add Your Compliance Badge

Die Allianz ONE Business Solutions GmbH vereint über 1.800 Expert:innen unter einem Dach – mit einem einzigartig vielfältigen Portfolio interner Dienstleistungen für die Allianz in Deutschland. Ob IT, Gastronomie, Architektur, Security, HR, Medizin, Logistik oder Recht: Wir bieten unseren internen Partnern maßgeschneiderte Services, stabile Prozesse und exzellenten Support – aus einer Hand. Unser Anspruch: kundenorientiert, nachhaltig, kompetent. Mit langjähriger Erfahrung und einem starken Team schaffen wir die Basis für reibungslose Abläufe und ein attraktives Arbeitsumfeld – damit sich Allianz-Mitarbeitende ganz auf ihre Kernaufgaben konzentrieren können. Impressum: www.allianz.de/impressum Rechtlicher Hinweis. Es gilt die

Allianz ONE A.I CyberSecurity Scoring

Scoring History

Allianz ONE

Allianz ONE CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Allianz

Ransomware

100

12/2025

Snowflake

MEREQUUNIMAEMGM...

Allianz ONE

Breach

10/2025

ALL229272210012...

Allianz ONE

Ransomware

100

8/2025

ALL316081425

Allianz Trade in No...

Breach

7/2025

Salesforce

TRA102141009042...

Allianz Life

Breach

7/2025

ALL1772058877

Allianz ONE

Cyber Attack

7/2025

ALL259272510012...

Allianz ONE

Ransomware

100

6/2025

ALL436204310012...

Allianz ONE

Breach

100

5/2025

ALL505090325

Allianz ONE

Ransomware

100

6/2024

ALL029340210092...

Allianz ONE

Breach

6/2024

ALL003320010032...

Allianz ONE

Breach

4/2024

ALL841080425

Allianz ONE

Ransomware

100

01/2023

ALL435050724

Loading…

A.I.

Allianz ONE Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Allianz ONE

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz ONE in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Allianz ONE in 2026.

Incident Types Allianz ONE vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz ONE in 2026.

Incident History - Allianz ONE (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Allianz ONE Subsidiaries

Allianz ONE

Insurance

Website: https://www.allianz.de

Company Size: 1,001-5,000 employees

129

Allianz in DeutschlandInsurance

AllianzFinancial Services

PIMCOInvestment Management

Allianz PartnersInsurance

Allianz Partners TürkiyeConsumer Services

Allianz Partners BrasilSeguros e previdência complementar

Allianz Partners EspañaSeguros

Allianz Partners UK and IrelandInsurance

Allianz Partners FranceInsurance

Allianz Partners MéxicoSeguros

Allianz Partners AustraliaInsurance

Allianz Global Assistance CanadaInsurance

Allianz Partners IndiaInsurance

Allianz Partners NederlandInsurance

Allianz Partners ItalyAssicurazioni

Allianz Partners New ZealandInsurance

Allianz Partners BelgiumInsurance

Allianz Partners APACInsurance

Allianz Partners DeutschlandVersicherungswesen

Allianz Partners PortugalSeguros e previdência complementar

Allianz Partners RéunionBusiness Consulting and Services

Allianz Partners USAInsurance

Allianz Partners ColombiaAdministrative and Support Services

Allianz Partners Nordic & BalticsInsurance

Allianz Partners Japan金融サービス

Allianz Partners MalaysiaFinancial Services

Allianz Partners SwitzerlandVersicherungswesen

Bajaj Allianz General InsuranceInsurance

Allianz TechnologyIT Services and IT Consulting

Allianz Global InvestorsFinancial Services

ACP | Allianz Capital PartnersInvestment Management

Allianz Global Investors ItaliaServizi finanziari

Allianz Global Investors FranceServices financiers

アリアンツ・グローバル・インベスターズ・ジャパン金融サービス

Allianz Global Investors DACHFinancial Services

risklab - the Investment and Risk Advisory Experts of Allianz Global InvestorsFinancial Services

Allianz Global Investors EspañaServicios financieros

Allianz BrasilInsurance

Allianz CommercialInsurance

Allianz Global Corporate & Specialty (AGCS)Insurance

Allianz TradeInsurance

Allianz Trade in ItaliaInsurance

Allianz Trade in North AmericaInsurance

Allianz Trade en FranceInsurance

Allianz Trade in Middle EastInsurance

Allianz Trade in TurkeyInsurance

Allianz Trade in Asia PacificInsurance

Allianz Trade in DeutschlandInsurance

Allianz Trade in UK & IrelandInsurance

Allianz Trade in GreeceInsurance

Allianz Trade no BrasilInsurance

Allianz Trade au Maroc (par Euler Hermes ACMAR)Insurance

Allianz Trade in RomaniaInsurance

Allianz Trade in South AfricaInsurance

Allianz Trade in BeluxFinancial Services

Allianz Trade in The NetherlandsFinancial Services

Allianz Trade in PolandInsurance

Allianz Trade in SwitzerlandInsurance

Allianz Trade i DanmarkInsurance

Allianz Trade i NorgeInsurance

Allianz Trade SuomessaInsurance

Allianz Trade na SlovenskuInsurance

Allianz Trade MagyarországonInsurance

Allianz ServicesFinancial Services

Allianz ConsultingBusiness Consulting and Services

Allianz Services IndiaFinancial Services

Allianz MarocInsurance

Allianz EgyptInsurance

Allianz ColombiaInsurance

Allianz EspañaInsurance

BBVA Allianz SegurosInsurance

Allianz Partners, HealthInsurance

Allianz LifeInsurance

Allianz Saudi FransiInsurance

Allianz ItaliaInsurance

Allianz MalaysiaInsurance

Allianz ArgentinaInsurance

PIMCO Prime Real EstateReal Estate

Allianz AustraliaInsurance

Allianz Broker AustraliaInsurance

Allianz Australia Personal InjuryInsurance

Allianz Australia AutomotiveInsurance

Allianz MéxicoInsurance

Allianz PortugalInsurance

Allianz DirectInsurance

Allianz IndonesiaInsurance

Allianz XVenture Capital and Private Equity Principals

Allianz Asia PacificInsurance

Allianz SuisseInsurance

ElectriX.swissDienstleistungen für Verbraucher

Allianz Broker AcademyVersicherungswesen

SNA LebanonInsurance

Allianz GreeceInsurance

Allianz BelgiumInsurance

Allianz NederlandFinancial Services

Allianz Global Digital FactoryVersicherungswesen

Allianz IrelandInsurance

Allianz ÖsterreichInsurance

Allianz ReinsuranceInsurance

metafinanz Informationssysteme GmbHIT Services and IT Consulting

KOLETHE CONSULTING INC.,IT Services and IT Consulting

Allianz-Tiriac AsigurariInsurance

Allianz AyudhyaInsurance

Allianz Asset ManagementFinancial Services

Allianz - Slovenska poistovna, a.s.Insurance

Allianz BulgariaFinancial Services

SulAmérica AutoInsurance

Allianz Hungária Zrt.Insurance

Allianz Global BenefitsInsurance

Allianz Life GhanaInsurance

Allianz pojišťovna Česká republikaInsurance

Darta Saving Life Assurance dacInsurance

Allianz LuxembourgInsurance

Kaiser X Labs. A company of AllianzDesign Services

Allianz Pension PartnersFinancial Services

Allianz Reinsurance America, Inc.Insurance

PROJECT M MagazineFinancial Services

Allianz Zagreb d.d.Insurance

Allianz MadagascarInsurance

SyncierInformation Technology & Services

Allianz TürkiyeInsurance

Allianz FranceInsurance

Allianz Protection JuridiqueInsurance

IDS GmbH – Analysis and Reporting ServicesFinancial Services

Allianz Lebensversicherungs-AGInsurance

Allianz Kunde und Markt GmbHInsurance

Allianz Versicherungs AGInsurance

Allianz Beratungs- und Vertriebs AGInsurance

Allianz Private Krankenversicherungs AGInsurance

Loading…

Allianz ONE Similar Companies

Canada Life

canadalife.com

At Canada Life, we’re focused on improving the financial, physical and mental well-being of Canadians. Whether handling policy claims, help growing and protecting clients’ retirement and investment savings, providing workplace mental health support for all employers or helping build stronger communities by investing in community projects, we are committed to putting the customer first in all that we do. That trust is built on the dedication, skill and energy of our employees and advisors and their commitment to our customers and to our communities. Canada Life is a subsidiary of Great-West Lifeco Inc. and is a member of the Power Corporation group of companies.

MetLife

metlife.com

We live in a time of unprecedented change. A time when economies, regulations, and social safety nets are all in flux. Customers around the globe have told us they’re overwhelmed by the pace of change and are looking for a trusted partner to help them manage life’s twists and turns. MetLife is committed to being that partner. That’s why we’re transforming our business: Delivering greater value for the people we serve by becoming a simpler, more focused, and future-facing company. We’ll be introducing new ways to meet our customers’ evolving needs, with flexible products; simpler, more intuitive experiences and a range of new services. MetLife. Navigating life together. For customer service: https://www.metlife.com/support-and-manage/contact-us/ For social media notices: https://www.metlife.com/about-us/terms-and-conditions/social-media/ MetLife, Inc. (NYSE: MET), through its subsidiaries and affiliates (“MetLife”), is one of the world’s leading financial services companies, providing insurance, annuities, employee benefits and asset management to help its individual and institutional customers navigate their changing world. Founded in 1868, MetLife has operations in more than 40 markets globally and holds leading positions in the United States, Japan, Latin America, Asia, Europe and the Middle East.

Groupama

cb groupama-gan-recrute.com

« Etre là pour les autres, j'ai décidé d'en faire mon métier. » Portée par nos 32 000 collaborateurs, notre campagne de communication employeur souligne ce qui nous rassemble et nous rend fiers au quotidien : notre métier, le point de départ de belles histoires, humaines avant tout. Cette campagne met l’accent sur ce qui nous différencie de nos concurrents : notre ADN mutualiste. Au sein du Groupe Groupama, l’humain et le sens sont privilégiés. Nous recrutons des personnes et pas des diplômes, de belles personnalités qui seront demain au service de nos sociétaires et clients. La signature de cette campagne « Etre là pour les autres, j’ai décidé d’en faire mon métier » résonne avec notre raison d’être « Nous sommes là pour permettre au plus grand nombre de construire leur vie en confiance. » et notre positionnement de marque. Etre là pour les autres, c'est le point de départ de notre métier. Et c'est aussi le point de départ de belles histoires qui font notre Groupe et notre identité en tant qu'employeur. Des histoires vraies pleines d'humanité. Nos collaborateurs en ont plein à raconter ! Découvrez leurs belles histoires sur www.groupama-gan-recrute.com ! Vous aussi, vous voulez donner du sens à vos compétences ? Rejoignez nous ! Et sinon, le Groupe Groupama c'est plus de 50 entreprises dans 10 pays. Vous nous connaissez au travers de nos 2 marques commerciales Groupama et Gan. Nous accompagnons nos 12 millions de sociétaires et clients à chaque moment de leur vie grâce à nos experts et à notre savoir-faire.

Great Eastern

cb greateasternlife.com

For 117 years, we have been helping customers across generations by protecting, preserving and growing what matters to them. As One Great Eastern Group today, we are enabling the goals of over 15.5 million customers by taking care of their needs across life, health, wealth and general insurance, consistently innovating to help them #ReachforGreat!

Aflac

aflac.com

Over 50 Million people worldwide have chosen Aflac because of our commitment to providing customers with the confidence that comes from knowing they have assistance in being prepared for whatever life may bring. With Aflac, whether you're a large business or a small one, you can provide your employees with the kind of benefits they’d expect from a bigger company, helping your business stand out from the crowd. Hundreds of thousands of businesses across the United States already make Aflac available to their employees—at no direct cost to their company. Choose from a wide range of products that can help your employees with health events—from accidents, to disability, to cancer, to life insurance. Your employees enjoy benefits from Aflac, all employee-paid. Please check out Aflac.com for more information.

Mapfre

mapfre.com

At Mapfre, we’ve spent more than 90 years supporting people and businesses around the world, taking care of what matters most to them. We offer insurance, financial, and service solutions that evolve with you. Our experience and commitment, combined with a constant focus on innovation, allow us to anticipate challenges and deliver tailored responses. We believe in a shared future, where every action counts and every person matters. We work to build trust, promote inclusion, and care for the planet and society. Our goal is to contribute to making the world we all share a fairer and more sustainable place for everyone. Our team is made up of diverse, committed people united by a genuine vocation for helping others. We promote professional development, continuous learning, and the well-being of everyone who’s part of our group. Would you like to be part of a global company that believes in the power of talent to transform the world? Then this is the place for you. #MapfreWhereYourTimeIsMeaningful Learn more at mapfre.com Follow us on all our social media channels: @mapfre

Marsh McLennan Agency

marshmma.com

Marsh McLennan Agency, a business of Marsh (NYSE: MRSH), is a leading provider of business insurance, employee health & benefits, retirement & wealth, and private client insurance solutions across the US and Canada. Marsh is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $24 billion and more than 90,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information about Marsh McLennan Agency, visit marshmma.com.

Prudential Indonesia (PT Prudential Life Assurance)

prudential.co.id

Listening. Understanding. Delivering. At Prudential Indonesia we deliver excellence by consistently innovating, creating new opportunities and growing our business to cater all of our customers' needs. With a vision of becoming truly world class, Prudential Indonesia provides quality services and proven track record of market leadership in the country. Working at Prudential Indonesia gives you many opportunities to develop yourself and explore what you’re really capable of, as well as the perfect environment to collaborate, listen and care for others. Ask around. The more you find out about us, the more you’ll learn that we’re an insurance company that understands you. We are here to listen.

AIA

cb aia.com

AIA Group Limited and its subsidiaries (collectively “AIA” or the “Group”) comprise the largest independent publicly listed pan-Asian life insurance group. It has a presence in 18 markets – wholly-owned branches and subsidiaries in Mainland China, Hong Kong SAR(1), Thailand, Singapore, Malaysia, Australia, Cambodia, Indonesia, Myanmar, New Zealand, the Philippines, South Korea, Sri Lanka, Taiwan (China), Vietnam, Brunei and Macau SAR(2), and a 49 per cent joint venture in India. In addition, AIA has a 24.99 per cent shareholding in China Post Life Insurance Co., Ltd. The business that is now AIA was first established in Shanghai more than a century ago in 1919. It is a market leader in Asia (ex-Japan) based on life insurance premiums and holds leading positions across the majority of its markets. It had total assets of US$328 billion as of 30 June 2025. AIA meets the long-term savings and protection needs of individuals by offering a range of products and services including life insurance, accident and health insurance and savings plans. The Group also provides employee benefits, credit life and pension services to corporate clients. Through an extensive network of agents, partners and employees across Asia, AIA serves the holders of more than 43 million individual policies and over 16 million participating members of group insurance schemes. AIA Group Limited is listed on the Main Board of The Stock Exchange of Hong Kong Limited under the stock codes “1299” for HKD counter and “81299” for RMB counter with American Depositary Receipts (Level 1) traded on the over-the-counter market under the ticker symbol “AAGIY”. (1) Hong Kong SAR refers to the Hong Kong Special Administrative Region. (2) Macau SAR refers to the Macau Special Administrative Region.

Loading…

NEWS

Allianz ONE CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53646

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a previous unexpired reset request), subsequent calls to the `reset_password` guest API endpoint reuse the existing token instead of generating a new one. The 15-minute validity window is anchored to the first request's `created_at` timestamp, not the time of the most recent email. An attacker who obtained the original reset link remains able to use it even after the victim requests a new reset, because the original token is never invalidated or rotated. Version 0.8.0 patches the issue. Some workarounds are available. Configure a reverse proxy (e.g., Nginx, Apache, Cloudflare) to apply per-IP rate limiting to the `/client/reset-password` endpoint to minimize the window of opportunity, and/or manually clear expired `client_password_reset` records from the database after a client reports a suspected compromise.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 7.7

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-vp66-w6rc-x32p

CVE-2026-53645

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `/api/admin/staff/permissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and/or use a reverse proxy or WAF to restrict access to `/api/admin/staff/permissions_update` to specific trusted roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-4hf7-xxxw-64rm

CVE-2026-53644

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an `active` state (e.g., `suspended`, `canceled`). The root cause is missing order-state validation in two client API endpoints, despite an `isActive()` helper already existing in the `Serviceapikey` module and the frontend UI correctly gating access on `order.status == 'active'`. Version 0.8.0 contains a fix. Some workarounds are available. If the `Serviceapikey` module is not needed, uninstall it to remove the affected endpoints. One may also use a reverse proxy or WAF to restrict access to `/api/client/order/service` and `/api/client/serviceapikey/reset` based on application-level order-state logic.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-qf6j-vq68-qmfh

CVE-2026-53643

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the `can_always_access` module flag (which grants all staff access to certain modules) and insufficient permission checks or unsafe parameter handling on individual endpoints. Version 0.8.0 contains a fix. Some workarounds are available. Restrict staff accounts to only those who need access to sensitive settings and/or use a reverse proxy or WAF to restrict access to the affected endpoints to trusted IP addresses or higher-privilege roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-563q-g4r4-6f9m

CVE-2026-53642

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address (`email_approved = 0`) can access all client-area pages (e.g. `/client/balance`, `/client/order/list`, `/client/invoice`) and read real account data, including wallet balances and transaction history. The API-side enforcement correctly restricts unverified clients to only profile-related endpoints, but the page-side enforcement is overly permissive, allowing any request whose path starts with `/client`. Version 0.8.0 contains a fix. No known workarounds that don't involve modifying the source code are available.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-7v47-rh46-w923

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…