What is the official website of Allianz Zagreb d.d. ?

The official website of Allianz Zagreb d.d. is http://www.allianz.hr.

What is Allianz Zagreb d.d.'s cybersecurity risk score?

Allianz Zagreb d.d. has an AI-generated cybersecurity risk score of 818 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Allianz Zagreb d.d. experienced?

According to Rankiteo, Allianz Zagreb d.d. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Allianz Zagreb d.d. been affected by any supply chain cyber incidents ?

According to Rankiteo, Allianz Zagreb d.d. has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Snowflake (Incident ID: MEREQUUNIMAEMGMGOOTOYSNOALLORARIPTIC1775528897) Gainsight (Incident ID: GAI0292402112125)

Does Allianz Zagreb d.d. have SOC 2 Type 1 certification ?

According to Rankiteo, Allianz Zagreb d.d. is not certified under SOC 2 Type 1.

Does Allianz Zagreb d.d. have SOC 2 Type 2 certification ?

According to Rankiteo, Allianz Zagreb d.d. does not hold a SOC 2 Type 2 certification.

Does Allianz Zagreb d.d. comply with GDPR ?

According to Rankiteo, Allianz Zagreb d.d. is not listed as GDPR compliant.

Does Allianz Zagreb d.d. have PCI DSS certification ?

According to Rankiteo, Allianz Zagreb d.d. does not currently maintain PCI DSS compliance.

Does Allianz Zagreb d.d. comply with HIPAA ?

According to Rankiteo, Allianz Zagreb d.d. is not compliant with HIPAA regulations.

Does Allianz Zagreb d.d. have ISO 27001 certification ?

According to Rankiteo,Allianz Zagreb d.d. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Allianz Zagreb d.d. operate in ?

Allianz Zagreb d.d. operates primarily in the Insurance industry.

How many employees does Allianz Zagreb d.d. have ?

Allianz Zagreb d.d. employs approximately 95 people worldwide.

Does Allianz Zagreb d.d. own any subsidiaries ?

Allianz Zagreb d.d. presently has no subsidiaries across any sectors.

How many LinkedIn followers does Allianz Zagreb d.d. have ?

Allianz Zagreb d.d.'s official LinkedIn profile has approximately followers.

What is the NAICS classification code for Allianz Zagreb d.d. ?

Allianz Zagreb d.d. is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does Allianz Zagreb d.d. have a Crunchbase profile ?

No, Allianz Zagreb d.d. does not have a profile on Crunchbase.

Does Allianz Zagreb d.d. have a LinkedIn profile ?

Yes, Allianz Zagreb d.d. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/allianz-zagreb-d-d-.

How many cybersecurity incidents has Allianz Zagreb d.d. experienced ?

As of September 14, 2026, Rankiteo reports that Allianz Zagreb d.d. has experienced 12 cybersecurity incidents.

How many peer or competitor companies does Allianz Zagreb d.d. have ?

Allianz Zagreb d.d. has an estimated 15,696 peer or competitor companies worldwide.

What types of cybersecurity incidents has Allianz Zagreb d.d. faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Ransomware and Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

AZD

Boost Score +25 with badge (5 left)

818

/1000

Good

843

/1000

Good

Allianz Zagreb d.d. Vendor Cyber Rating & Cyber Score

allianz.hr

Add Your Compliance Badge

Allianz je u Hrvatskoj prisutan od 1999. godine, kada njemački Allianz zajedno sa Zagrebačkom bankom preuzima tadašnje Adriatic osiguranje. Nastaje Allianz Zagreb d.d. koji u trenutku preuzimanja ima tržišni udio od 4,6%. U godinama koje slijede, Allianz u Hrvatskoj iz godine u godinu bilježi stalan rast poslovanja. Stope raste su iz godine u godinu bile značajno, čak i dvostruko veće od ostatka tržišta. Danas Allianz drži oko 13% tržišnog udjela i ukupno zauzima drugu poziciju među hrvatskim osiguravateljima. Snažan rast premijskog prihoda pratio je i rast prodajne mreže zastupnika te novih prodajnih mjesta. Allianz u Hrvatskoj posluje putem 5 Podružnica, odnosno preko 250 prodajnih mjesta širom Hrvatske. Proizvodi bankoosiguranja na

AZD

Allianz Zagreb d.d. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Allianz

Ransomware

100

12/2025

Snowflake

MEREQUUNIMAEMGM...

Allianz Zagreb d.d.

Breach

10/2025

ALL229272210012...

Allianz Zagreb d.d.

Ransomware

100

8/2025

ALL316081425

Allianz

Breach

8/2025

Gainsight

GAI029240211212...

Allianz Life

Breach

7/2025

ALL1772058877

Allianz Zagreb d.d.

Cyber Attack

7/2025

ALL259272510012...

Allianz Zagreb d.d.

Ransomware

100

6/2025

ALL436204310012...

Allianz Zagreb d.d.

Breach

100

5/2025

ALL505090325

Allianz Zagreb d.d.

Ransomware

100

6/2024

ALL029340210092...

Allianz Zagreb d.d.

Breach

6/2024

ALL003320010032...

Allianz Zagreb d.d.

Breach

4/2024

ALL841080425

Allianz Zagreb d.d.

Ransomware

100

01/2023

ALL435050724

Loading…

A.I.

AZD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for AZD

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Zagreb d.d. in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Allianz Zagreb d.d. in 2026.

Incident Types AZD vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Zagreb d.d. in 2026.

Incident History - AZD (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Allianz Zagreb d.d. Subsidiaries

AZD

Insurance

Website: http://www.allianz.hr

Company Size: 95

107

AllianzFinancial Services

PIMCOInvestment Management

Bajaj Allianz General InsuranceInsurance

Allianz BrasilInsurance

Allianz PartnersInsurance

Allianz Partners BrasilSeguros e previdência complementar

Allianz Partners TürkiyeConsumer Services

Allianz Partners EspañaSeguros

Allianz Partners UK and IrelandInsurance

Allianz Partners FranceInsurance

Allianz Partners AustraliaInsurance

Allianz Global Assistance CanadaInsurance

Allianz Partners IndiaInsurance

Allianz Partners APACInsurance

Allianz Partners MalaysiaFinancial Services

Allianz Partners SwitzerlandVersicherungswesen

Allianz Partners USAInsurance

Allianz Partners MéxicoSeguros

Allianz Partners PortugalSeguros e previdência complementar

Allianz Partners BelgiumInsurance

Allianz Partners ColombiaAdministrative and Support Services

Allianz Partners NederlandInsurance

Allianz Partners ItalyAssicurazioni

Allianz Partners RéunionBusiness Consulting and Services

Allianz Partners DeutschlandVersicherungswesen

Allianz Partners Japan金融サービス

Allianz Partners Nordic & BalticsInsurance

Allianz Partners New ZealandInsurance

Allianz Global InvestorsFinancial Services

Allianz Global Investors ItaliaServizi finanziari

ACP | Allianz Capital PartnersInvestment Management

Allianz Global Investors DACHFinancial Services

Allianz Global Investors FranceServices financiers

アリアンツ・グローバル・インベスターズ・ジャパン金融サービス

risklab - the Investment and Risk Advisory Experts of Allianz Global InvestorsFinancial Services

Allianz Global Investors EspañaFinancial Services

Allianz FranceInsurance

Allianz Protection JuridiqueInsurance

Allianz TürkiyeInsurance

Allianz ServicesFinancial Services

Allianz Services IndiaFinancial Services

Allianz ConsultingBusiness Consulting and Services

Allianz TradeInsurance

Allianz TechnologyIT Services and IT Consulting

Allianz EgyptInsurance

Allianz MarocInsurance

Allianz LifeInsurance

Allianz ColombiaInsurance

Allianz EspañaInsurance

BBVA Allianz SegurosInsurance

Mutakamela InsuranceInsurance

Allianz AustraliaInsurance

Allianz Broker AustraliaInsurance

Allianz Australia Personal InjuryInsurance

Allianz Australia AutomotiveInsurance

Allianz Partners, HealthInsurance

Allianz ItaliaInsurance

Allianz MalaysiaInsurance

Allianz ArgentinaInsurance

Allianz IndonesiaInsurance

PIMCO Prime Real EstateReal Estate

Allianz MéxicoInsurance

Allianz PortugalInsurance

Allianz XVenture Capital and Private Equity Principals

Allianz Asia PacificInsurance

Allianz in DeutschlandInsurance

Allianz Lebensversicherungs-AGInsurance

Allianz Kunde und Markt GmbHInsurance

Allianz Versicherungs AGInsurance

Allianz Beratungs- und Vertriebs AGInsurance

Allianz Private Krankenversicherungs AGInsurance

Allianz ONE - Business Solutions GmbHInsurance

Allianz DirectInsurance

Allianz SuisseInsurance

ElectriX.swissDienstleistungen für Verbraucher

Allianz Broker AcademyVersicherungswesen

Allianz GreeceInsurance

SNA LebanonInsurance

Allianz BelgiumInsurance

Allianz-Tiriac AsigurariInsurance

Allianz NederlandFinancial Services

Allianz AyudhyaInsurance

Allianz Global Digital FactoryVersicherungswesen

Allianz CommercialInsurance

Mutakamela Insuranceالتأمين

Allianz Global BenefitsInsurance

Allianz IrelandInsurance

Allianz ReinsuranceInsurance

metafinanz Informationssysteme GmbHIT Services and IT Consulting

KOLETHE CONSULTING INC.,IT Services and IT Consulting

Kaiser X Labs. A company of AllianzDesign Services

Allianz Asset ManagementFinancial Services

Allianz ÖsterreichInsurance

Allianz - Slovenska poistovna, a.s.Insurance

SyncierInformation Technology & Services

Allianz BulgariaFinancial Services

Allianz pojišťovna Česká republikaInsurance

SulAmérica AutoInsurance

Allianz Hungária Zrt.Insurance

Darta Saving Life Assurance dacInsurance

Allianz LuxembourgInsurance

Allianz MadagascarInsurance

Allianz Life GhanaInsurance

Allianz Pension PartnersFinancial Services

PROJECT M MagazineFinancial Services

Allianz Reinsurance America, Inc.Insurance

IDS GmbH – Analysis and Reporting ServicesFinancial Services

Loading…

Allianz Zagreb d.d. Similar Companies

Intact

cb intactfc.com

We created a purpose-driven company based on Values and a belief that insurance is about people, not things. This is the foundation on which we have built Intact and it lives every day through our purpose, Values, what we aim to achieve and how. ___ Nous sommes là pour aider les gens, les entreprises et la société à aller de l’avant dans les bons moments et à être résilients dans le moments difficiles. Notre entreprise est basée sur des valeurs et la conviction que l’assurance doit d’abord s’intéresser aux personnes, et non aux choses. C’est dans cette optique que nous avons bâti Intact et ça se reflète chaque jour dans notre raison d’être, nos valeurs, nos facteurs de succès en leadership, notre promesse aux employés, nos objectifs et notre stratégie.

Star Health and Allied Insurance Co. Ltd

cb starhl.in

Star Health & Allied Insurance Co. Ltd. is an Indian health insurance company headquartered in Chennai. They began their operations in 2006 as India's first standalone Health Insurance provider. They offer innovative products in the health, personal accident and overseas & domestic travel insurance. With meticulously crafted insurance policies, Star Health addresses the unique health needs of people. Having covered more than 16.9 crore lives till now, the company is scaling up its services to ensure that all lives are covered under Health Insurance. Star Health is keen on providing timely assistance during emergency times. In that regard, they have a dedicated in-house claim settlement team to settle claims swiftly. They have an excellent track record of settling more than Rs. 4 crores as claim amount every hour. Star Health has been offering cashless treatment facilities in its 14,000+ Network Hospitals spread across the country and ensures the quality of healthcare services to its customers. With lakhs of agents serving the customers and driving the business on a huge scale, Star Health also operates through other channels including digital, brokers, etc., to cater to the needs of all sections of society. Star Health is also leading the bancassurance and has a long-standing partnership with numerous Banks. Star Health places a huge emphasis on customer experience and service. They have 24x7 multilingual call centre support and dedicated claims assistance. They also offer free Telehealth consultations with their expert team of in-house doctors, along with a free second medical opinion if necessary. In this digitally driven world, Star Health has adapted to the current trend by digitally transforming itself with innovative technologies to guarantee the quality of service, ease of access and seamless user experience for all its customers. Currently, Star Health has 14,000+ employees, 800+ branch offices and 5.8 Lakh agents all over India.

Blue Cross Blue Shield of Michigan

bcbsm.com

Blue Cross Blue Shield of Michigan is a nonprofit corporation and an independent licensee of the Blue Cross and Blue Shield Association. BCBSM's commitment to Michigan is what differentiates it from other health insurance companies doing business in the state. That mission has never changed. Nearly 70 years ago, Blue Cross Blue Shield of Michigan started with a purpose to provide people with the security of knowing they have health care when they need it. Today, that nonprofit mission is the same and the company is accomplishing it in many ways, including: Offering access to health care coverage for everyone, regardless of circumstances Never dropping your coverage for health reasons Partnering with the state to cover more than 32,000 children through MIChild Providing financial support to 30 free clinics statewide Contributing more money than any other company to provide Michigan with better health and health care Advocating and educating through Alliance for Advancing Nonprofit Health Care For more on the history of BCBSM, please visit our section on historical highlights: http://www.bcbsm.com/home/bcbsm/1930.shtml

State Farm

statefarm.com

At State Farm®, our mission is to help people manage the risks of everyday life, recover from the unexpected, and realize their dreams. We are passionate and driven to create possibilities, and we’re serious about helping customers by providing solutions for all of life’s moments. Like a good neighbor, State Farm is there.®

Humana

cb humana.com

Humana will never ask, nor require a candidate to provide money for work equipment and network access during the application process. If you become aware of any instances where you as a candidate are asked to provide information and do not believe it is a legitimate request from Humana or affiliate, please contact [email protected] to validate the request At Humana, our cultural foundation is aligned to helping members achieve their best health by delivering personalized, simplified, whole-person healthcare experiences. Recognizing healthcare needs continue to evolve for each person, for each family and for each community, Humana continuously creates innovative solutions and resources that help people live their healthiest lives on their terms –when and where they need it. Our employees are at the heart of making this happen and that’s why we are dedicated to building an organization of dynamic talent whose experience and passion center on putting the customer first.

Groupama

cb groupama-gan-recrute.com

« Etre là pour les autres, j'ai décidé d'en faire mon métier. » Portée par nos 32 000 collaborateurs, notre campagne de communication employeur souligne ce qui nous rassemble et nous rend fiers au quotidien : notre métier, le point de départ de belles histoires, humaines avant tout. Cette campagne met l’accent sur ce qui nous différencie de nos concurrents : notre ADN mutualiste. Au sein du Groupe Groupama, l’humain et le sens sont privilégiés. Nous recrutons des personnes et pas des diplômes, de belles personnalités qui seront demain au service de nos sociétaires et clients. La signature de cette campagne « Etre là pour les autres, j’ai décidé d’en faire mon métier » résonne avec notre raison d’être « Nous sommes là pour permettre au plus grand nombre de construire leur vie en confiance. » et notre positionnement de marque. Etre là pour les autres, c'est le point de départ de notre métier. Et c'est aussi le point de départ de belles histoires qui font notre Groupe et notre identité en tant qu'employeur. Des histoires vraies pleines d'humanité. Nos collaborateurs en ont plein à raconter ! Découvrez leurs belles histoires sur www.groupama-gan-recrute.com ! Vous aussi, vous voulez donner du sens à vos compétences ? Rejoignez nous ! Et sinon, le Groupe Groupama c'est plus de 50 entreprises dans 10 pays. Vous nous connaissez au travers de nos 2 marques commerciales Groupama et Gan. Nous accompagnons nos 12 millions de sociétaires et clients à chaque moment de leur vie grâce à nos experts et à notre savoir-faire.

Axis Max Life Insurance Limited

axismaxlife.com

Axis Max Life Insurance Limited (earlier known as Max Life Insurance Company Limited) is a Joint Venture between Max Financial Services Limited and Axis Bank Limited. Max Financial Services Ltd. is a part of the Max Group, an Indian multi-business corporation. Axis Max Life Insurance Limited has an individual death claims paid ratio of 99.70% as per the annual audited financials for FY24-25. We offer comprehensive protection and long-term savings life insurance solutions, through our multichannel distribution including agency and third party distribution partners. You can reach us at our: Customer Service Helpline - 1860 120 5577 (9:00 AM to 6:00 PM Monday to Saturday) or, Write to us at [email protected]. You can also contact us through our portal https://www.axismaxlife.com/contact-us/write-to-us. Axis Max Life Insurance Limited has built its operations over almost two decades through a need-based sales process, a customer-centric approach to engagement and service delivery and trained human capital. As per public disclosures, during the financial year 2024-25, • As on 31st March 2025 the Company has Rs. 175,072 crore of assets under management(AUM), and • A Sum Assured in Force of Rs. 2,191,857 crore. For more information, please visit the Company's website at www.axismaxlife.com

TATA AIG General Insurance Company Limited

tataaig.com

At TATA AIG General Insurance, we wear our achievements like a badge of honour – proudly and with gratitude! We have been recognized as one of India’s Top 100 Best Companies to Work For and among the Top 25 Best Workplaces in BFSI in 2024. As a joint venture between the TATA Group and American International Group (AIG), we bring together the best of both worlds, driving innovation and setting new standards in the insurance industry, while staying true to our core values of empathy, people, and customer-first that translates into: #WithYouAlways and #WithYouLikeFamily. This means we’re committed not only to our customers but also to our employees, peers, and partners — ensuring the highest level of dedication, care, and trust. Join us on this incredible journey as we continue to lead, innovate, and redefine the future of insurance. Together, we’re not just setting the standard — we’re building lasting relationships, one person at a time.

Bajaj General Insurance

bajajgeneralinsurance.com

Bajaj General Insurance Limited (formerly known as Bajaj Allianz General Insurance Company Limited) is one of India’s leading, most trusted and dynamic private general insurance companies. It is a subsidiary of Bajaj Finserv Limited, India’s leading and most diversified financial services group. Bajaj General offers a broad portfolio of innovative and customer-focused insurance solutions, spanning motor, health, and home insurance, along with specialised products such as pet insurance, wedding insurance, event protection, cyber insurance, and rural insurance. Established in 2001, the company has grown its footprint to nearly 1,500 towns and cities across India, ensuring easy access and a close connection to its customers. With a strong legacy, a forward-looking mindset, and an unwavering focus on its ‘Customer-First’ philosophy, Bajaj General remains committed to protecting what matters most, empowering individuals, families, and businesses to live with confidence and peace of mind.

Loading…

NEWS

Allianz Zagreb d.d. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 11, 2018 04:25 AM

Insurance and Asset Management worldwide | Allianz

As an international financial services provider, Allianz offers worldwide products and solutions in insurance and asset management.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90603

SUMMARY

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90602

SUMMARY

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-90601

SUMMARY

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90600

SUMMARY

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15892

SUMMARY

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_name buffer (and, for read, a data buffer) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled, relying on the end: label to k_free() them. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning status MGMT_CB_ERROR_RC, the handler executed return ret_rc; directly, bypassing end: and leaking the heap allocation on every rejected request. The settings handlers are reachable over the unauthenticated SMP transport (Bluetooth LE, UART, or UDP, depending on product configuration). The access hook is the mechanism applications use to deny unauthorized settings access, and MGMT_CB_ERROR_RC is a common rejection style, so an attacker who can send settings read/write/delete commands that the hook rejects triggers a heap leak on each attempt. Because the leaked memory is never reclaimed until reboot, a sustained stream of rejected requests monotonically exhausts the kernel heap until k_malloc() fails, denying mcumgr service and impacting any other heap consumer on the device — a denial of service. The impact is availability-only; there is no memory corruption or information disclosure. Only configurations that select the heap buffer type, enable the access hook, and register a hook that returns MGMT_CB_ERROR_RC are affected (the default stack buffer type cannot leak).

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Allianz Zagreb d.d. Vendor Cyber Rating & Cyber Score

AZD A.I CyberSecurity Scoring

Allianz Zagreb d.d. CyberSecurity News & History

AZD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for AZD

Incidents vs Insurance Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types AZD vs Insurance Industry Avg (This Year)

Incident History - AZD (X = Date, Y = Severity)

Allianz Zagreb d.d. Subsidiaries

AZD

Allianz Zagreb d.d. Similar Companies

Intact

Star Health and Allied Insurance Co. Ltd

Blue Cross Blue Shield of Michigan

State Farm

Humana

Groupama

Axis Max Life Insurance Limited

TATA AIG General Insurance Company Limited

Bajaj General Insurance

Allianz Zagreb d.d. CyberSecurity News

Insurance and Asset Management worldwide | Allianz

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Allianz Zagreb d.d. CyberSecurity News & History

AZD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for AZD

Incidents vs Insurance Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types AZD vs Insurance Industry Avg (This Year)

Incident History - AZD (X = Date, Y = Severity)

Allianz Zagreb d.d. Subsidiaries

AZD

Allianz Zagreb d.d. Similar Companies

Intact

Star Health and Allied Insurance Co. Ltd

Blue Cross Blue Shield of Michigan

State Farm

Humana

Groupama

Axis Max Life Insurance Limited

TATA AIG General Insurance Company Limited

Bajaj General Insurance

Allianz Zagreb d.d. CyberSecurity News

Insurance and Asset Management worldwide | Allianz

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo