What is the official website of Allianz Direct ?

The official website of Allianz Direct is http://www.allianzdirect.de.

What is Allianz Direct's cybersecurity risk score?

Allianz Direct has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Allianz Direct experienced?

According to Rankiteo, Allianz Direct currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Allianz Direct been affected by any supply chain cyber incidents ?

According to Rankiteo, Allianz Direct has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Snowflake (Incident ID: MEREQUUNIMAEMGMGOOTOYSNOALLORARIPTIC1775528897) Gainsight (Incident ID: GAI0292402112125)

Does Allianz Direct have SOC 2 Type 1 certification ?

According to Rankiteo, Allianz Direct is not certified under SOC 2 Type 1.

Does Allianz Direct have SOC 2 Type 2 certification ?

According to Rankiteo, Allianz Direct does not hold a SOC 2 Type 2 certification.

Does Allianz Direct comply with GDPR ?

According to Rankiteo, Allianz Direct is not listed as GDPR compliant.

Does Allianz Direct have PCI DSS certification ?

According to Rankiteo, Allianz Direct does not currently maintain PCI DSS compliance.

Does Allianz Direct comply with HIPAA ?

According to Rankiteo, Allianz Direct is not compliant with HIPAA regulations.

Does Allianz Direct have ISO 27001 certification ?

According to Rankiteo,Allianz Direct is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Allianz Direct operate in ?

Allianz Direct operates primarily in the Insurance industry.

How many employees does Allianz Direct have ?

Allianz Direct employs approximately 904 people worldwide.

Does Allianz Direct own any subsidiaries ?

Allianz Direct presently has no subsidiaries across any sectors.

How many LinkedIn followers does Allianz Direct have ?

Allianz Direct's official LinkedIn profile has approximately 27,290 followers.

What is the NAICS classification code for Allianz Direct ?

Allianz Direct is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does Allianz Direct have a Crunchbase profile ?

No, Allianz Direct does not have a profile on Crunchbase.

Does Allianz Direct have a LinkedIn profile ?

Yes, Allianz Direct maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/allianzdirect.

How many cybersecurity incidents has Allianz Direct experienced ?

As of September 14, 2026, Rankiteo reports that Allianz Direct has experienced 10 cybersecurity incidents.

How many peer or competitor companies does Allianz Direct have ?

Allianz Direct has an estimated 15,696 peer or competitor companies worldwide.

What types of cybersecurity incidents has Allianz Direct faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Ransomware and Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Allianz Direct

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Allianz Direct Vendor Cyber Rating & Cyber Score

allianzdirect.de

Add Your Compliance Badge

In 2019 we embarked on a journey, to build the ‘future of insurance’. At Allianz Direct, our mission is very simple: we want to become the most customer-oriented and efficient insurer on the market. At Allianz Direct we see ourselves as a technology company with an insurance license. With love for data and customer obsession at the core of our culture, we want to deliver an experience that really makes our customers say: “WOW, that was great!” Legal Notice: The LinkedIn Privacy Policy applies: https://www.linkedin.com/legal/privacy-policy

Allianz Direct

Allianz Direct CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Allianz

Ransomware

100

12/2025

Snowflake

MEREQUUNIMAEMGM...

Allianz Direct

Breach

10/2025

ALL229272210012...

Allianz Direct

Ransomware

100

8/2025

ALL316081425

Allianz

Breach

8/2025

Gainsight

GAI029240211212...

Allianz Life

Breach

7/2025

ALL1772058877

Allianz Direct

Cyber Attack

7/2025

ALL259272510012...

Allianz Direct

Breach

100

5/2025

ALL505090325

Allianz Direct

Breach

6/2024

ALL003320010032...

Allianz Direct

Breach

4/2024

ALL841080425

Allianz Direct

Ransomware

100

01/2023

ALL435050724

Loading…

A.I.

Allianz Direct Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Allianz Direct

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Direct in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Allianz Direct in 2026.

Incident Types Allianz Direct vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Direct in 2026.

Incident History - Allianz Direct (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Allianz Direct Subsidiaries

Allianz Direct

Insurance

Website: http://www.allianzdirect.de

Company Size: 1,001-5,000 employees

AllianzFinancial Services

Allianz PartnersInsurance

Allianz Partners BrasilInsurance

Allianz Partners FranceInsurance

Allianz Partners TürkiyeConsumer Services

Allianz Partners UK and IrelandInsurance

Allianz Global Assistance CanadaInsurance

Allianz Partners EspañaInsurance

Allianz Partners IndiaInsurance

Allianz Partners AustraliaInsurance

Allianz Partners DeutschlandVersicherungswesen

Allianz Partners USAInsurance

Allianz Partners ItalyInsurance

Allianz Partners RéunionBusiness Consulting and Services

Allianz Partners PortugalInsurance

Allianz Partners BelgiumInsurance

Allianz Partners MalaysiaFinancial Services

Allianz Partners New ZealandInsurance

Allianz Partners SwitzerlandInsurance

Allianz Partners ColombiaAdministrative and Support Services

Allianz Partners NederlandInsurance

Allianz Partners APACInsurance

Allianz Partners Nordic & BalticsInsurance

Allianz Partners MexicoInsurance

Allianz Partners JapanFinancial Services

Allianz Partners PolskaInsurance

PIMCOInvestment Management

Allianz ServicesFinancial Services

Allianz ConsultingBusiness Consulting and Services

Allianz Services IndiaFinancial Services

Allianz TürkiyeInsurance

Allianz BrasilInsurance

Mutakamela InsuranceInsurance

Allianz FranceInsurance

Allianz Global InvestorsFinancial Services

Allianz Global Investors ItaliaFinancial Services

Allianz Global Investors FranceFinancial Services

アリアンツ・グローバル・インベスターズ・ジャパンFinancial Services

Allianz Global Investors DACHFinancial Services

risklab - the Investment and Risk Advisory Experts of Allianz Global InvestorsFinancial Services

Allianz Global Investors EspañaFinancial Services

Allianz EgyptInsurance

Allianz ColombiaInsurance

Allianz TechnologyIT Services and IT Consulting

Allianz LifeInsurance

Allianz MarocInsurance

Allianz EspañaInsurance

Allianz Partners, HealthInsurance

Allianz AustraliaInsurance

Allianz Broker AustraliaInsurance

Allianz Australia Personal InjuryInsurance

Allianz Australia AutomotiveInsurance

Allianz MalaysiaInsurance

Allianz ItaliaInsurance

Allianz ArgentinaInsurance

PIMCO Prime Real EstateReal Estate

Allianz PortugalInsurance

Allianz in DeutschlandInsurance

Allianz Lebensversicherungs-AGInsurance

Allianz Kunde und Markt GmbHInsurance

Allianz Beratungs- und Vertriebs AGInsurance

Allianz Versicherungs AGInsurance

Allianz ONE - Business Solutions GmbHInsurance

Allianz Private Krankenversicherungs AGInsurance

Allianz SuisseInsurance

ElectriX.swissConsumer Services

Allianz Broker AcademyInsurance

Allianz XVenture Capital and Private Equity Principals

Allianz Asia PacificInsurance

Allianz GreeceInsurance

Allianz BelgiumInsurance

Allianz NederlandFinancial Services

Allianz IndonesiaInsurance

Allianz IrelandInsurance

Allianz-Tiriac AsigurariInsurance

SNA LebanonInsurance

Allianz AyudhyaInsurance

Allianz ÖsterreichInsurance

Allianz ReinsuranceInsurance

metafinanz Informationssysteme GmbHIT Services and IT Consulting

Kaiser X Labs. A company of AllianzDesign Services

Allianz pojišťovna Česká republikaInsurance

KOLETHE CONSULTING INC.,IT Services and IT Consulting

Allianz - Slovenska poistovna, a.s.Insurance

Allianz Darta SavingInsurance

Allianz LuxembourgInsurance

Allianz Life GhanaInsurance

Allianz Pension PartnersFinancial Services

Allianz Hungária Zrt.Insurance

PROJECT M MagazineFinancial Services

Allianz BulgariaFinancial Services

Allianz Asset ManagementFinancial Services

SyncierInformation Technology & Services

Allianz Zagreb d.d.Insurance

Allianz Reinsurance America, Inc.Insurance

Loading…

Allianz Direct Similar Companies

Anthem Blue Cross and Blue Shield

anthem.com

At Anthem Blue Cross and Blue Shield we understand our health connects us to each other. What we all do impacts those around us. So Anthem is dedicated to delivering better care to our members, providing greater value to our customers and helping improve the health of our communities. Independent licensees of the Blue Cross and Blue Shield Association. ANTHEM is a registered trademark of Anthem Insurance Companies, Inc. Products vary by state. Learn more about our plans and legal information at www.anthem.com

ICICI Lombard

cb icicilombard.com

ICICI Lombard is one of the leading private general insurance company in the country. The Company offers a well-diversified range of products through multiple distribution channels, including motor, health, crop, fire, personal accident, marine, engineering, and liability insurance. With a legacy of over 2 decades, ICICI Lombard is committed to customer centricity with its brand philosophy of ‘Nibhaye Vaade’. The company has issued over 37.6 million policies, over 3.2 million claims processed and has a Gross Written Premium (GWP) of ₹282.58 billion for the year ended March 31, 2025. ICICI Lombard has 328 branches and 15,123 employees, as on March 31, 2025. ICICI Lombard has been a pioneer in the industry and is one of the first large-scale insurance company in India to migrate its entire core systems to the cloud. With a strong focus on being digital-led and agile, it has launched several tech-driven innovations — including one of the industry-first Face Scan feature on its signature insurance and wellness app, IL TakeCare, which has received over 16.6 million downloads, as on June 30, 2025. * The company has won several prestigious awards- including the Insurance Asia, ICC Emerging Asia Insurance, ET BFSI Exceller, ET CIO, ICAI, FICCI Insurance, Contact Center World Global, and CSR Times in recognition of its various initiatives. For more details log on to https://www.icicilombard.com/. You can also connect with us via IL TakeCare App | RIA WhatsApp: 7738282666 *As per public disclosure.

Nationwide

nationwide.com

Nationwide, a Fortune 100 company based in Columbus, Ohio, is one of the largest and strongest diversified insurance and financial services organizations in the United States. Nationwide is rated A+ by Standard & Poor's. An industry leader in driving customer-focused innovation, Nationwide provides a full range of insurance and financial services products including auto, business, homeowners, farm and life insurance; public and private sector retirement plans, annuities and mutual funds; excess & surplus, specialty and surety; and pet, motorcycle and boat insurance. For more information, visit www.nationwide.com.

MetLife

metlife.com

We live in a time of unprecedented change. A time when economies, regulations, and social safety nets are all in flux. Customers around the globe have told us they’re overwhelmed by the pace of change and are looking for a trusted partner to help them manage life’s twists and turns. MetLife is committed to being that partner. That’s why we’re transforming our business: Delivering greater value for the people we serve by becoming a simpler, more focused, and future-facing company. We’ll be introducing new ways to meet our customers’ evolving needs, with flexible products; simpler, more intuitive experiences and a range of new services. MetLife. Navigating life together. For customer service: https://www.metlife.com/support-and-manage/contact-us/ For social media notices: https://www.metlife.com/about-us/terms-and-conditions/social-media/ MetLife, Inc. (NYSE: MET), through its subsidiaries and affiliates (“MetLife”), is one of the world’s leading financial services companies, providing insurance, annuities, employee benefits and asset management to help its individual and institutional customers navigate their changing world. Founded in 1868, MetLife has operations in more than 40 markets globally and holds leading positions in the United States, Japan, Latin America, Asia, Europe and the Middle East.

Aflac

aflac.com

Over 50 Million people worldwide have chosen Aflac because of our commitment to providing customers with the confidence that comes from knowing they have assistance in being prepared for whatever life may bring. With Aflac, whether you're a large business or a small one, you can provide your employees with the kind of benefits they’d expect from a bigger company, helping your business stand out from the crowd. Hundreds of thousands of businesses across the United States already make Aflac available to their employees—at no direct cost to their company. Choose from a wide range of products that can help your employees with health events—from accidents, to disability, to cancer, to life insurance. Your employees enjoy benefits from Aflac, all employee-paid. Please check out Aflac.com for more information.

Seguros SURA

segurossura.com

SURA es una compañía que integra en diferentes empresas soluciones en seguros y seguridad social. Su marca se presenta a los clientes como Seguros SURA, ARL SURA y EPS SURA. Existen otras marcas y empresas, especialmente de prestación de servicios, que hacen parte de la Compañía. Nuestra experiencia y solidez está soportada en 80 años de trayectoria en el mercado de los seguros. Tiempo en el que hemos acompañado a los latinoamericanos en todas las etapas de la vida con productos que se ajustan a sus necesidades de protección. Para responder a nuestras promesas de aseguramiento contamos con una estructura sólida de negocios, permitiéndonos construir relaciones de largo plazo con nuestros clientes basadas en la tranquilidad de estar bien protegidos. La vida y el patrimonio económico son una prioridad para SURA, por ello ofrecemos un amplio portafolio de soluciones.

China Life Insurance Co.Ltd

chinalife.com.cn

China Life Insurance (Group) Company, headquartered in Beijing, is a large state-owned financial and insurance company. Its predecessor,PICC was founded in 1949 and the PICC (Life) Co.,Ltd was set up in 1996 after its separation from the former PICC. In 1999, it was renamed China Life Insurance Company. With the approval of the State Council and the China Insurance Regulatory Commission, the former China Life Insurance Company was restructured as China Life Insurance (Group) Company in 2003. It has China Life Insurance Company Limited, China Life Asset Management Company Limited, China Life Property & Casualty Insurance Company Limited, China Life Pension Company Limited, China Life Ecommerce Company Limited, China Life Insurance (Overseas) Company Limited, China Life Investment Holding Company Limited and Insurance Professional College as its subsidiaries. Its business covers life insurance, property & casualty insurance, pension plans (corporate annuity), asset management, alternative investment, overseas operations and e-commerce. Through capital-links, it has invested in several banks, security firms and other non-financial institutions.

AXA XL

axaxl.com

We are a leading provider of insurance and reinsurance offering innovative risk management solutions for businesses worldwide. We partner with those who move the world forward, navigating complex risks and working across diverse industries to support and empower our clients. Note: We are currently experiencing some technical issues with our recruitment platform which we hope to resolve shortly, please be patient with us, thank you for your interest in jobs at AXA XL.

Marsh Risk

marsh.com

We help our clients and colleagues grow — and our communities thrive — by protecting and promoting possibility. We seek better ways to manage risk and define more effective paths to the right outcome. We go beyond risk to rewards for our clients, our company, our colleagues, and the communities in which we serve. Marsh Risk is a part of Marsh. Together with Mercer, Guy Carpenter, and Oliver Wyman, we help organizations build resilience and competitive advantages from every angle. With annual revenue over $24 billion and more than 90,000 colleagues in 130 countries, Marsh helps build the confidence to thrive through the power of perspective.

Loading…

NEWS

Allianz Direct CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

August 11, 2025 07:00 AM

ShinyHunters Salesforce cyber attacks explained: What you need to know

Computer Weekly gets under the skin of an ongoing wave of ShinyHunters cyber attacks orchestrated via social engineering against Salesforce...

Read Article

August 04, 2025 07:00 AM

Supply chain breaches and sophisticated mobile malware rattle the industry

Latest financial cybersecurity threats, including third-party data breaches, evolving mobile banking trojans, and zero-day exploits.

Read Article

July 31, 2025 07:00 AM

Allianz Life Insurance Data Breach by Scattered Spider Ransomware Gang Impacts 1.4 Million People

Allianz Life Insurance Company of North America (Allianz Life) is notifying 1.4 million customers, financial professionals, and employees of...

Read Article

July 30, 2025 07:00 AM

Hackers stole Social Security numbers during Allianz Life cyberattack

The U.S. insurance giant tells state regulators that Social Security numbers were among the personal information stolen in its mid-July...

Read Article

July 28, 2025 07:00 AM

Allianz Life suffers third-party CRM breach affecting 1.4m

Social engineering attack on third-party cloud CRM exposes customer data at North American subsidiary, with Allianz SE confirming breach...

Read Article

July 26, 2025 07:00 AM

Allianz Life: Insurance giant says most US customer data stolen in cyber-attack

Hackers accessed "personally identifiable data" of the firm's customers, financial professionals and staff.

Read Article

June 20, 2025 07:00 AM

Allianz Direct to acquire French motor insurer Eurofil

Allianz Direct has agreed to acquire the insurance portfolio, brand, and operational assets of Eurofil, a brand under Abeille Assurances.

Read Article

May 29, 2025 07:00 AM

Cloud Innovation on Your Terms: Allianz Direct’s Sergiu Petean on Platform Sovereignty

Sergiu Petean, Director of Cloud Engineering and Operations at Allianz Direct, shares how European organisations can navigate complexity and drive real...

Read Article

March 20, 2025 07:00 AM

Frankfurt 2025: Register for Tech Show Now

Tech Show Frankfurt 2025 is officially open for registration! Taking place on 4-5 June 2025, at Messe Frankfurt, this premier event brings together four co-...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90603

SUMMARY

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90602

SUMMARY

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-90601

SUMMARY

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90600

SUMMARY

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15892

SUMMARY

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_name buffer (and, for read, a data buffer) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled, relying on the end: label to k_free() them. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning status MGMT_CB_ERROR_RC, the handler executed return ret_rc; directly, bypassing end: and leaking the heap allocation on every rejected request. The settings handlers are reachable over the unauthenticated SMP transport (Bluetooth LE, UART, or UDP, depending on product configuration). The access hook is the mechanism applications use to deny unauthorized settings access, and MGMT_CB_ERROR_RC is a common rejection style, so an attacker who can send settings read/write/delete commands that the hook rejects triggers a heap leak on each attempt. Because the leaked memory is never reclaimed until reboot, a sustained stream of rejected requests monotonically exhausts the kernel heap until k_malloc() fails, denying mcumgr service and impacting any other heap consumer on the device — a denial of service. The impact is availability-only; there is no memory corruption or information disclosure. Only configurations that select the heap buffer type, enable the access hook, and register a hook that returns MGMT_CB_ERROR_RC are affected (the default stack buffer type cannot leak).

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Allianz Direct Vendor Cyber Rating & Cyber Score

Allianz Direct A.I CyberSecurity Scoring

Allianz Direct CyberSecurity News & History

Allianz Direct Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Allianz Direct

Incidents vs Insurance Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Allianz Direct vs Insurance Industry Avg (This Year)

Incident History - Allianz Direct (X = Date, Y = Severity)

Allianz Direct Subsidiaries

Allianz Direct

Allianz Direct Similar Companies

Anthem Blue Cross and Blue Shield

ICICI Lombard

Nationwide

MetLife

Aflac

Seguros SURA

China Life Insurance Co.Ltd

AXA XL

Marsh Risk

Allianz Direct CyberSecurity News

ShinyHunters Salesforce cyber attacks explained: What you need to know

Supply chain breaches and sophisticated mobile malware rattle the industry

Allianz Life Insurance Data Breach by Scattered Spider Ransomware Gang Impacts 1.4 Million People

Hackers stole Social Security numbers during Allianz Life cyberattack

Allianz Life suffers third-party CRM breach affecting 1.4m

Allianz Life: Insurance giant says most US customer data stolen in cyber-attack

Allianz Direct to acquire French motor insurer Eurofil

Cloud Innovation on Your Terms: Allianz Direct’s Sergiu Petean on Platform Sovereignty

Frankfurt 2025: Register for Tech Show Now

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Allianz Direct CyberSecurity News & History

Allianz Direct Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Allianz Direct

Incidents vs Insurance Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Allianz Direct vs Insurance Industry Avg (This Year)

Incident History - Allianz Direct (X = Date, Y = Severity)

Allianz Direct Subsidiaries

Allianz Direct

Allianz Direct Similar Companies

Anthem Blue Cross and Blue Shield

ICICI Lombard

Nationwide

MetLife

Aflac

Seguros SURA

China Life Insurance Co.Ltd

AXA XL

Marsh Risk

Allianz Direct CyberSecurity News

ShinyHunters Salesforce cyber attacks explained: What you need to know

Supply chain breaches and sophisticated mobile malware rattle the industry

Allianz Life Insurance Data Breach by Scattered Spider Ransomware Gang Impacts 1.4 Million People

Hackers stole Social Security numbers during Allianz Life cyberattack

Allianz Life suffers third-party CRM breach affecting 1.4m

Allianz Life: Insurance giant says most US customer data stolen in cyber-attack

Allianz Direct to acquire French motor insurer Eurofil

Cloud Innovation on Your Terms: Allianz Direct’s Sergiu Petean on Platform Sovereignty

Frankfurt 2025: Register for Tech Show Now

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo