What is the official website of ALTEN Mexico ?

The official website of ALTEN Mexico is https://www.alten.com/country/mexico/.

What is ALTEN Mexico's cybersecurity risk score?

ALTEN Mexico has an AI-generated cybersecurity risk score of 755 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has ALTEN Mexico experienced?

According to Rankiteo, ALTEN Mexico currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has ALTEN Mexico been affected by any supply chain cyber incidents ?

According to Rankiteo, ALTEN Mexico has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does ALTEN Mexico have SOC 2 Type 1 certification ?

According to Rankiteo, ALTEN Mexico is not certified under SOC 2 Type 1.

Does ALTEN Mexico have SOC 2 Type 2 certification ?

According to Rankiteo, ALTEN Mexico does not hold a SOC 2 Type 2 certification.

Does ALTEN Mexico comply with GDPR ?

According to Rankiteo, ALTEN Mexico is not listed as GDPR compliant.

Does ALTEN Mexico have PCI DSS certification ?

According to Rankiteo, ALTEN Mexico does not currently maintain PCI DSS compliance.

Does ALTEN Mexico comply with HIPAA ?

According to Rankiteo, ALTEN Mexico is not compliant with HIPAA regulations.

Does ALTEN Mexico have ISO 27001 certification ?

According to Rankiteo,ALTEN Mexico is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does ALTEN Mexico operate in ?

ALTEN Mexico operates primarily in the IT Services and IT Consulting industry.

How many employees does ALTEN Mexico have ?

ALTEN Mexico employs approximately 377 people worldwide.

Does ALTEN Mexico own any subsidiaries ?

ALTEN Mexico presently has no subsidiaries across any sectors.

How many LinkedIn followers does ALTEN Mexico have ?

ALTEN Mexico's official LinkedIn profile has approximately 56,730 followers.

What is the NAICS classification code for ALTEN Mexico ?

ALTEN Mexico is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does ALTEN Mexico have a Crunchbase profile ?

No, ALTEN Mexico does not have a profile on Crunchbase.

Does ALTEN Mexico have a LinkedIn profile ?

Yes, ALTEN Mexico maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/altenmx.

How many cybersecurity incidents has ALTEN Mexico experienced ?

As of September 9, 2026, Rankiteo reports that ALTEN Mexico has not experienced any cybersecurity incidents.

How many peer or competitor companies does ALTEN Mexico have ?

ALTEN Mexico has an estimated 41,576 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ALTEN Mexico

Boost Score +25 with badge (5 left)

755

/1000

Fair

780

/1000

Fair

ALTEN Mexico Vendor Cyber Rating & Cyber Score

alten.com

Add Your Compliance Badge

We are ALTEN Mexico, an engineering company that provides specialized solutions for engineering, technology and product development projects. Our team of more than 500 people work across industries including: Automotive, Energy, Aeronautics, Banking & insurance, Telecom & Multimedia and Rail. We offer project design development, test/validation, programming, implementation, and manufacturing solutions through different levels of service that ensure quality and autonomy to our client’s projects. ALTEN Mexico is a subsidiary of ALTEN Group. ALTEN group has been a leader in engineering and information technology for more than 30 years and operates in more than 30 countries across Europe, North America, Asia, Africa, and the Middle East and

ALTEN Mexico

ALTEN Mexico CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

ALTEN Mexico Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ALTEN Mexico

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for ALTEN Mexico in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for ALTEN Mexico in 2026.

Incident Types ALTEN Mexico vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for ALTEN Mexico in 2026.

Incident History - ALTEN Mexico (X = Date, Y = Severity)

Loading…

SUBSIDIARY

ALTEN Mexico Subsidiaries

ALTEN Mexico

IT Services and IT Consulting

Website: https://www.alten.com/country/mexico/

Company Size: 377

ALTENEngineering Services

MIGSO-PCUBEDBusiness Consulting and Services

CORTAC GroupBusiness Consulting and Services

ALTEN SpainIT Services and IT Consulting

ALTEN PolskaIT Services and IT Consulting

ALTEN CanadaInformation Technology & Services

ATEXISIT Services and IT Consulting

ALTEN NederlandIT Services and IT Consulting

ALTEN FinlandIT Services and IT Consulting

FT ServicesOil and Gas

ALTEN AustriaIT Services and IT Consulting

ALTEN LuxembourgIT Services and IT Consulting

AVENIR CONSEILIT Services and IT Consulting

ALTEN ChinaEngineering Services

ALTEN KOREAIT Services and IT Consulting

ALTEN LTD - UKEngineering Services

ALTEN Technology USAEngineering Services

ALTEN BelgiumEngineering Services

NexeoBusiness Consulting and Services

NexDotNetInformation Technology & Services

ALTEN IndiaIT Services and IT Consulting

Lincoln FranceIT Services and IT Consulting

ALTEN PortugalEngineering Services

ALTEN GermanyIT Services and IT Consulting

ALTEN ItaliaIT Services and IT Consulting

ALTEN DenmarkEngineering Services

Orion EngineeringStaffing and Recruiting

AnotechEngineering Services

AIXIAL GROUPResearch Services

ALTEN RomaniaIT Services and IT Consulting

Kepler-RominfoIT Services and IT Consulting

ALTEN KEPLER DivisionServicii IT și consultanță IT

ALTEN TECHNO DivisionServicii IT și consultanță IT

ALTEN SwitzerlandEngineering Services

OptimissaIT Services and IT Consulting

ALTEN SwedenIT Services and IT Consulting

CaduceumBusiness Consulting and Services

ALTEN MAROCIT Services and IT Consulting

Loading…

ALTEN Mexico Similar Companies

Dimension Data

cb dimensiondata.com

Dimension Data is a leading African born technology provider operating in the Middle East and Africa, offering a portfolio of services including systems integration, managed services infrastructure, cloud solutions, business applications, customer experience, and intelligent security solutions. We provide innovative solutions that optimise today’s evolving technology environments, enabling clients to leverage data in a digital age. Founded in 1983, and headquartered in Johannesburg, Dimension Data is a proud member of the NTT Group, one of the world’s leading information communication technology (ICT) companies, comprising a group of global technology companies. In 2020, Dimension Data completed its transition to operate as one entity consolidating all its subsidiaries under a single Dimension Data brand employing over 10 000 employees across 15 countries. We continue to invest heavily in innovation bringing together the world’s best technologies, from consulting, technical and support services to a fully managed service. Dimension Data is currently a level 2 BBBEE contributor after successfully concluding a significant BBBEE transaction in 2019. Dimension Data will continue to implement strategies to ensure it contributes meaningfully to transformation towards an inclusive society.

Oracle

cb oracle.com

Oracle is a global leader in AI, delivering the cloud infrastructure, data, and applications that organizations across the world trust to successfully achieve business outcomes at scale. Oracle Cloud Infrastructure (OCI) provides fast, flexible, scalable AI infrastructure. With superior compute performance and network design, a comprehensive choice of AI services for developing and orchestrating agentic AI workflows at scale, and unrivaled data control, security, privacy, and governance, OCI is designed for AI workloads. It also gives customers the flexibility to run their workloads wherever they need by supporting public cloud, multicloud, hybrid cloud, sovereign, and on-premises deployments. The Oracle AI Database is the only database with AI natively built in everywhere. By bringing AI to where data lives, the Oracle AI Database delivers enterprise-grade AI securely, cost-effectively, and at scale. In-database machine learning and vector search enable AI models to run where data resides. Support for multi-modal data (structured, unstructured, graph, vector) enables richer AI use cases. The Oracle AI Data Platform enables organizations to build, deploy, and govern AI agents and applications on top of private, secure, and distributed enterprise data. This enables organizations to operationalize AI without compromising data security or control. Oracle Applications embed AI directly into business workflows and industry processes to ensure AI is delivered in context, where work happens. They include the only applications suite that brings AI to every aspect of a business, with AI-powered ERP, HCM, and CX applications, and the Oracle Health Suite which provides applications for managing the entire healthcare ecosystem. Oracle also provides industry-specific cloud application suites for more than two dozen industries and NetSuite, the world’s first cloud computing company. This LinkedIn page serves as Oracle’s official global company page.

Akkodis

akkodis.com

Akkodis is a global digital engineering company and Smart Industry leader. We enable clients to advance in their digital transformation with Talent, Academy, Consulting, and Solutions services. Our 50,000 experts combine best-in-class technologies, R&D, and deep sector know-how for purposeful innovation. We are passionate about Engineering a Smarter Future Together. With a shared passion for technology and talent, 50,000 engineers and digital experts deliver deep cross-sector expertise in 30 countries across North America, EMEA and APAC. Akkodis offers broad industry experience, and strong know-how in key technology sectors such as mobility, software & technology services, robotics, testing, simulations, data security, AI & data analytics. The combined IT and engineering expertise brings a unique end-to-end solution offering, with four service lines – Consulting, Solutions, Talents and Academy – to support clients in rethinking their product development and business processes, improve productivity, minimize time to market and shape a smarter and more sustainable tomorrow. Akkodis is part of the Adecco Group. The Adecco Group is a leader in delivering expertise in talent and technology, enabling organizations to succeed and people to thrive. www.akkodis.com

GFT Technologies

gft.com

GFT Technologies is an AI-centric global digital transformation company. We design advanced data and AI transformation solutions, modernize technology architectures and develop next-generation core systems for industry leaders in Banking, Insurance, Manufacturing and Robotics. Partnering closely with our clients, we push boundaries to unlock their full potential. With deep industry expertise, cutting-edge technology, and a strong partner ecosystem, GFT delivers responsible AI-centric solutions that combine engineering excellence, high-performance delivery and cost efficiency. Our team of 12,000+ technology experts operate in 20+ countries worldwide offering career opportunities at the forefront of software innovation. Let’s Go Beyond_ Legal Disclaimer: https://www.gft.com/int/en/legal-disclaimer

Appen

appen.com

Appen has been a leader in AI training data for over 25 years, providing high-quality, diverse datasets that power the world's leading AI models. Our end-to-end platform, deep expertise, and scalable human-in-the-loop services enable AI innovators to build and optimize cutting-edge models. We specialize in creating bespoke, human-generated data to train, fine-tune, and evaluate AI models across multiple domains, including generative AI, large language models (LLMs), computer vision, speech recognition, and more. Our solutions support critical AI functions such as supervised fine-tuning, reinforcement learning with human feedback (RLHF), model evaluation, and bias mitigation. Our advanced AI-assisted data annotation platform, combined with a global crowd of more than 1M contributors in over 200 countries, ensures the delivery of accurate and diverse datasets. Our commitment to quality, scalability, and ethical AI practices makes Appen a trusted partner for enterprises aiming to develop and deploy effective AI solutions. At Appen, we foster a culture of innovation, collaboration, and excellence. We value curiosity, accountability, and a commitment to delivering the highest-quality AI solutions. We support work-life balance with flexible work arrangements and a dynamic, results-driven environment. Employees have access to competitive pay, comprehensive benefits, and opportunities for continuous learning and career growth. Our team works closely with the world’s top technology companies and enterprises, tackling exciting challenges and shaping the future of artificial intelligence.

Asurion

cb asurion.com

As the world’s leading tech care company, Asurion eliminates the fears and frustrations associated with technology, to ensure our 300 million customers get the most out of their devices, appliances and connections. We provide insurance, repair, replacement, installation and 24/7 support for everything from cellphones to laptops and household appliances. Our experts are available online, on the phone, at one of our more than 800 stores, or can even come to you.

AeC

aec.com.br

A AeC é apontada consistentemente como a líder brasileira na entrega de soluções de experiência do cliente e gestão de processos terceirizados. Servindo as principais marcas do mercado nacional, conquistou nos três últimos anos a posição de Empresa do Ano de BPO pela conceituada Frost and Sullivan. Líder também nas práticas de ESG, recebe há oito anos consecutivos o título de Melhor Empresa de Serviços pelo Prêmio Época Negócios 360°. Com um olhar inovador, o seu diferencial está no modo como integra o cuidado com as pessoas e aplica tecnologia de ponta em seus processos, como inteligência artificial, robotic process automation, serviços em nuvem e ferramentas de analytics e segurança. Atualmente, a AeC conta com mais de 52 mil colaboradores em 20 unidades distribuídas por sete estados do país. É certificada pelo instituto Great Place to Work como uma das melhores empresas para se trabalhar. Com uma combinação única de Tecnologia e Calor Humano, a mais de 30 anos de história conquistando, apenas no último ano, 27 importantes prêmios e reconhecimentos do mercado. Venha evoluir conosco! Entre em contato com a gente através do e-mail: [email protected]

EPAM Systems

epam.com

Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We leverage AI and GenAI to deliver transformative solutions that accelerate our clients’ digital innovation and enhance their competitive edge. Through platforms like EPAM AI/RUN™ and initiatives like DIALX Lab, we integrate advanced AI technologies into tailored business strategies, driving significant industry impact and fostering continuous innovation. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as Most Loved Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.

Atos

cb atos.net

Atos Group is a global leader in digital transformation with c. 67,000 employees and annual revenue of c. €10 billion, operating in 61 countries under two brands — Atos for services and Eviden for products. European number one in cybersecurity, cloud and high performance computing, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is the brand under which Atos SE (Societas Europaea) operates. Atos SE is listed on Euronext Paris. The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.

Loading…

NEWS

ALTEN Mexico CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 26, 2025 07:00 AM

Tech, Finance Synergy Boost Innovation in Mexico’s Banking Sector

Q: What is Optimissa's value proposition for the Mexican financial technology services market, and how does it differ from other consulting...

Read Article

January 08, 2025 05:45 PM

Deep Diving into Aaron’s Systems & Process Development, from Mexico to Sweden

I am Aaron and I'm from Mexico. I'm currently a Systems & Process Engineer working for the automotive industry at ALTEN in Gothenburg.

Read Article

September 13, 2024 01:05 PM

Ethics and responsibility

ALTEN places ethics at the heart of its activities. The Group shares the highest standards in this area with its stakeholders.

Read Article

February 08, 2024 02:40 PM

Defence, Security & Naval

ALTEN works in Defence Engineering for the development of aircraft, combat vehicles, and advanced embedded systems.

Read Article

October 10, 2023 07:00 AM

Alten Energías Renovables Faces Scrutiny Over Delayed Solar Plant

The Spanish renewable energy company Alten Energías Renovables is under scrutiny as it has yet to make progress on its 300MW solar plant in...

Read Article

July 05, 2018 07:00 AM

ALTEN Calsoft Labs Joins ShadowDragon and Cloudly to Build Cybersecurity Practices

PRNewswire/ -- ALTEN Calsoft Labs, a next-generation digital transformation company, rolls out a plan to Prevent Cyber Attacks and Minimize...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86564

SUMMARY

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-55250

SUMMARY

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-53639

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r

CVE-2026-53638

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp

CVE-2026-53637

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

ALTEN Mexico Vendor Cyber Rating & Cyber Score

ALTEN Mexico A.I CyberSecurity Scoring

ALTEN Mexico CyberSecurity News & History

ALTEN Mexico Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for ALTEN Mexico

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types ALTEN Mexico vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - ALTEN Mexico (X = Date, Y = Severity)

ALTEN Mexico Subsidiaries

ALTEN Mexico

ALTEN Mexico Similar Companies

Dimension Data

Oracle

Akkodis

GFT Technologies

Appen

Asurion

AeC

EPAM Systems

Atos

ALTEN Mexico CyberSecurity News

Tech, Finance Synergy Boost Innovation in Mexico’s Banking Sector

Deep Diving into Aaron’s Systems & Process Development, from Mexico to Sweden

Ethics and responsibility

Defence, Security & Naval

Alten Energías Renovables Faces Scrutiny Over Delayed Solar Plant

ALTEN Calsoft Labs Joins ShadowDragon and Cloudly to Build Cybersecurity Practices

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

ALTEN Mexico CyberSecurity News & History

ALTEN Mexico Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for ALTEN Mexico

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types ALTEN Mexico vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - ALTEN Mexico (X = Date, Y = Severity)

ALTEN Mexico Subsidiaries

ALTEN Mexico

ALTEN Mexico Similar Companies

Dimension Data

Oracle

Akkodis

GFT Technologies

Appen

Asurion

AeC

EPAM Systems

Atos

ALTEN Mexico CyberSecurity News

Tech, Finance Synergy Boost Innovation in Mexico’s Banking Sector

Deep Diving into Aaron’s Systems & Process Development, from Mexico to Sweden

Ethics and responsibility

Defence, Security & Naval

Alten Energías Renovables Faces Scrutiny Over Delayed Solar Plant

ALTEN Calsoft Labs Joins ShadowDragon and Cloudly to Build Cybersecurity Practices

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo