What is the official website of Atlas Reply Roma ?

The official website of Atlas Reply Roma is https://www.reply.com/atlas-reply/.

What is Atlas Reply Roma's cybersecurity risk score?

Atlas Reply Roma has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Atlas Reply Roma experienced?

According to Rankiteo, Atlas Reply Roma currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Atlas Reply Roma been affected by any supply chain cyber incidents ?

According to Rankiteo, Atlas Reply Roma has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Atlas Reply Roma have SOC 2 Type 1 certification ?

According to Rankiteo, Atlas Reply Roma is not certified under SOC 2 Type 1.

Does Atlas Reply Roma have SOC 2 Type 2 certification ?

According to Rankiteo, Atlas Reply Roma does not hold a SOC 2 Type 2 certification.

Does Atlas Reply Roma comply with GDPR ?

According to Rankiteo, Atlas Reply Roma is not listed as GDPR compliant.

Does Atlas Reply Roma have PCI DSS certification ?

According to Rankiteo, Atlas Reply Roma does not currently maintain PCI DSS compliance.

Does Atlas Reply Roma comply with HIPAA ?

According to Rankiteo, Atlas Reply Roma is not compliant with HIPAA regulations.

Does Atlas Reply Roma have ISO 27001 certification ?

According to Rankiteo,Atlas Reply Roma is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Atlas Reply Roma operate in ?

Atlas Reply Roma operates primarily in the IT Services and IT Consulting industry.

How many employees does Atlas Reply Roma have ?

Atlas Reply Roma employs approximately 133 people worldwide.

Does Atlas Reply Roma own any subsidiaries ?

Atlas Reply Roma presently has no subsidiaries across any sectors.

How many LinkedIn followers does Atlas Reply Roma have ?

Atlas Reply Roma's official LinkedIn profile has approximately 3,902 followers.

What is the NAICS classification code for Atlas Reply Roma ?

Atlas Reply Roma is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Atlas Reply Roma have a Crunchbase profile ?

No, Atlas Reply Roma does not have a profile on Crunchbase.

Does Atlas Reply Roma have a LinkedIn profile ?

Yes, Atlas Reply Roma maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/atlas-reply-roma.

How many cybersecurity incidents has Atlas Reply Roma experienced ?

As of August 16, 2026, Rankiteo reports that Atlas Reply Roma has not experienced any cybersecurity incidents.

How many peer or competitor companies does Atlas Reply Roma have ?

Atlas Reply Roma has an estimated 41,350 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ARR

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Atlas Reply Roma Vendor Cyber Rating & Cyber Score

reply.com

Add Your Compliance Badge

Atlas Reply Roma is the Reply Group company specialized in IT consulting services, design, development, testing and operation of highly critical business applications in on-premise and cloud environments. Thanks to our strong experience on major international players in markets such as telco, utilities, media, energy, finance, automotive, transportation, we have reached deep E2E expertise in the following areas: * Application Operation, Management & Monitoring activities on custom and packaged applications; * Application Development and Maintenance activities with our Software Factory using Agile and DevOps paradigms; * Integration and implementation of Enterprise Service Management processes and solutions, transformation of ITSM

ARR A.I CyberSecurity Scoring

Scoring History

ARR

Atlas Reply Roma CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

ARR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ARR

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Atlas Reply Roma in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Atlas Reply Roma in 2026.

Incident Types ARR vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Atlas Reply Roma in 2026.

Incident History - ARR (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Atlas Reply Roma Subsidiaries

ARR

IT Services and IT Consulting

Website: https://www.reply.com/atlas-reply/

Company Size: 51-200 employees

124

ReplyIT Services and IT Consulting

Open Reply ITIT Services and IT Consulting

Blue Reply ITIT Services and IT Consulting

Concept Reply GmbHInformation Technology & Services

Like ReplyAdvertising Services

Sense ReplyIT Services and IT Consulting

Concept Quality ReplyIT Services and IT Consulting

Elbkind ReplyAdvertising Services

AIM ReplyIT Services and IT Consulting

Sprint Reply ITInformation Technology & Services

Spike ReplyIT Services and IT Consulting

Roboverse Reply DEIT Services and IT Consulting

Solidsoft ReplyIT Services and IT Consulting

Liquid ReplyIT Services and IT Consulting

Business Elements ReplyIT Services and IT Consulting

Life At ReplyIT Services and IT Consulting

Valorem ReplyIT Services and IT Consulting

Valorem Reply - Technology Industry SolutionsIT Services and IT Consulting

CLUSTER REPLYIT Services and IT Consulting

BitmamaAdvertising Services

Avantage ReplyFinancial Services

Compliance and Conduct RiskFinancial Services

IFRS 9Financial Services

Wemanity MarocIT Services and IT Consulting

Xister ReplyAdvertising Services

Lynx RecruitmentStaffing and Recruiting

Threepipe ReplyAdvertising Services

Cluster Reply DEIT Services and IT Consulting

Syskoplan Reply USIT Services and IT Consulting

Nexi DigitalFinancial Services

WM ReplyIT Services and IT Consulting

Storm ReplyIT Services and IT Consulting

Cloud9 ReplyIT Services and IT Consulting

Net ReplyIT Services and IT Consulting

Mansion House ConsultingBusiness Consulting and Services

Wemanity BelgiumInformation Technology & Services

Concept Engineering ReplyIT Services and IT Consulting

Go ReplyIT Services and IT Consulting

ATLAS REPLYIT Services and IT Consulting

Pay ReplyInformation Technology & Services

Comsysto Reply GmbHIT Services and IT Consulting

Business ReplySoftware Development

Ringmaster S.r.l.Software Development

Connect ReplyIT Services and IT Consulting

ARLANIS REPLY ITIT Services and IT Consulting

Canvas ReplyIT Services and IT Consulting

Whitehall ReplyIT Services and IT Consulting

Light ReplyIT Services and IT Consulting

Triplesense ReplyTechnology, Information and Internet

4brands ReplyInformation Technology & Services

Graymatter ReplyAdvertising Services

Data Reply FRInformation Technology & Services

Laife ReplyInformation Technology & Services

Logistics Reply DESoftware Development

Technology Reply RomaniaIT Services and IT Consulting

Shield ReplyIT Services and IT Consulting

Cortex Reply UKTechnology, Information and Internet

Blue Reply DEIT Services and IT Consulting

Cortex Reply DEIT Services and IT Consulting

TD ReplyBusiness Consulting and Services

Accelerator 365 by ReplySoftware Development

Spike Reply LuxembourgIT Services and IT Consulting

Machine Learning Reply GmbHIT Services and IT Consulting

Autonomous Reply FRIT Services and IT Consulting

Aktive ReplyInformation Technology & Services

Technology ReplySoftware Development

Syskoplan Reply DACHInformation Technology & Services

Airwalk ReplyIT Services and IT Consulting

Logistics Reply USSoftware Development

Machine Learning ReplyIT Services and IT Consulting

Live Reply DEIT Services and IT Consulting

Sprint Reply DEIT Services and IT Consulting

KI ReplyInformation Technology & Services

Target Reply RomeIT Services and IT Consulting

Reply ChallengesE-Learning Providers

Data Reply ITIT Services and IT Consulting

Target ReplyData Infrastructure and Analytics

Data Reply DEInformation Technology & Services

Leadvise ReplyBusiness Consulting and Services

Digital Transformation of Regulatory AffairsBusiness Consulting and Services

Blockchain ReplyIT Services and IT Consulting

Sprint Reply BEIT Services and IT Consulting

Core ReplyInformation Technology & Services

Up ReplyIT Services and IT Consulting

Open Reply UKInformation Technology & Services

Infinity Reply ITIT Services and IT Consulting

Comwrap Reply ITIT Services and IT Consulting

Comwrap Reply DACHTechnology, Information and Internet

ARLANIS REPLYIT Services and IT Consulting

Open ReplyInformation Technology & Services

Nimbus ReplyIT Services and IT Consulting

Brick Reply | IT Solutions and Services for ManufacturingSoftware Development

Sprint Reply UKIT Services and IT Consulting

Sytel Reply NorthInformation Technology & Services

Red Reply DEIT Services and IT Consulting

Net Reply UKIT Services and IT Consulting

Logistics Reply UKSoftware Development

Arlanis Reply UKIT Services and IT Consulting

Live Reply ItalyIT Services and IT Consulting

Vanilla ReplyTechnology, Information and Internet

Neo ReplyIT Services and IT Consulting

Air ReplyIT Services and IT Consulting

Spike Reply UKTechnology, Information and Internet

Comwrap ReplyIT Services and IT Consulting

Infinity Reply DEIT Services and IT Consulting

Communication Valley ReplyComputer and Network Security

Eos ReplyIT Services and IT Consulting

Storm Reply, Inc.Professional Services

Alpha ReplyIT Services and IT Consulting

Open Reply Benelux - FranceBusiness Consulting and Services

Affinity ReplyIT Services and IT Consulting

Spur ReplyBusiness Consulting and Services

Wemanity NetherlandsProfessional Training and Coaching

HERMES REPLYInformation Technology & Services

Ki Reply UKIT Services and IT Consulting

Atomic ReplyBusiness Consulting and Services

Fincon Reply GmbHInformation Services

Cluster Reply PLIT Services and IT Consulting

Zest ReplyIT Services and IT Consulting

Concept Reply USInformation Technology & Services

Wemanity Learning CenterProfessional Training and Coaching

Data Reply UKIT Services and IT Consulting

Glue ReplyIT Services and IT Consulting

Macros Reply GmbHIT Services and IT Consulting

Loading…

Atlas Reply Roma Similar Companies

T-Systems International

t-systems.com

Your digitalization partner with industry expertise With locations in more than 26 countries and over 26,000 employees (2024), T-Systems is one of the leading providers of digital services in Europe. The Deutsche Telekom subsidiary is headquartered in Germany and has a presence in Europe as well as in selected core markets and strategic production locations. T-Systems can provide a global production and supply chain to companies operating worldwide. T-Systems offers integrated end-to-end IT solutions, driving the digital transformation of companies in all industries and the public sector. T-Systems’ focus industries are automotive, the public sector, healthcare and transport. For these areas, T-Systems develops industryspecific solutions – so-called vertical applications. The comprehensive portfolio of services includes secure operation of traditional IT infrastructures, migration to private cloud and public cloud environments of hyperscalers, as well as management of hybrid and multi-cloud infrastructures. T-Systems integrates customized platforms, industry-specific applications and innovative technologies such as artificial intelligence (AI), big data and blockchain into these infrastructures. To achieve this, the Telekom subsidiary works closely with leading global technology partners. The end-to-end services also include state-of-the-art security solutions and data protection in accordance with DSGVO requirements. T-Systems pursues a holistic approach: consulting (advisory) and solutions from the areas of digital, cloud services and security are offered from a single source. Become one of us: https://www.t-systems.com/de/en/company/careers Imprint: https://www.t-systems.com/de/en/imprint

Apex Systems

apexsystems.com

Apex Systems is a leading global technology services firm that incorporates industry insights and experience to deliver solutions that fulfill our clients’ digital visions. We offer a continuum of services, specializing in strategy, transformation, and managed services across application development, data, enterprise platforms, cloud and infrastructure, and cybersecurity. Through our ability to innovate alongside our customers, we build and deploy the right artificial intelligence solutions to realize business value and improve customer experiences. Our alliances with cutting-edge technology partners empower our customers by providing them with the latest advancements. Apex has a presence in over 70 markets across North America, Europe, and India. Apex is a part of the commercial segment of ASGN Incorporated (NYSE: ASGN). To learn more, visit www.apexsystems.com. Apex strives to provide our talent with the best possible experience, from start to finish. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico. Visit us today to join our team: www.apexsystems.com/careers.

Birlasoft

birlasoft.com

Navigating Change. Powering Progress. | Reimagining the Future with Birlasoft Birlasoft, a powerhouse where domain expertise, enterprise solutions, and digital technologies converge to redefine business processes. We take pride in our consultative and design thinking approach, driving societal progress by enabling our customers to run businesses with unmatched efficiency and innovation. As part of the CKA Birla Group, a multibillion-dollar enterprise, we boast a 12,000+ professional team committed to upholding the Group's 170-year legacy. Our core values prioritize Diversity, Equity, and Inclusion (DEI) initiatives, along with Corporate Social Responsibility (CSR) activities, demonstrating our dedication to building inclusive and sustainable communities. Join us in shaping a future where technology seamlessly aligns with purpose. For further information, visit www.birlasoft.com

Insight

insight.com

Insight Enterprises, Inc. is a Fortune 500 solutions integrator helping organizations accelerate their digital journey to modernize their business and maximize the value of technology. Insight’s technical expertise spans cloud and edge-based transformation solutions, with global scale and optimization built on 33+ years of deep partnerships with the world’s leading and emerging technology providers.

Appen

appen.com

Appen has been a leader in AI training data for over 25 years, providing high-quality, diverse datasets that power the world's leading AI models. Our end-to-end platform, deep expertise, and scalable human-in-the-loop services enable AI innovators to build and optimize cutting-edge models. We specialize in creating bespoke, human-generated data to train, fine-tune, and evaluate AI models across multiple domains, including generative AI, large language models (LLMs), computer vision, speech recognition, and more. Our solutions support critical AI functions such as supervised fine-tuning, reinforcement learning with human feedback (RLHF), model evaluation, and bias mitigation. Our advanced AI-assisted data annotation platform, combined with a global crowd of more than 1M contributors in over 200 countries, ensures the delivery of accurate and diverse datasets. Our commitment to quality, scalability, and ethical AI practices makes Appen a trusted partner for enterprises aiming to develop and deploy effective AI solutions. At Appen, we foster a culture of innovation, collaboration, and excellence. We value curiosity, accountability, and a commitment to delivering the highest-quality AI solutions. We support work-life balance with flexible work arrangements and a dynamic, results-driven environment. Employees have access to competitive pay, comprehensive benefits, and opportunities for continuous learning and career growth. Our team works closely with the world’s top technology companies and enterprises, tackling exciting challenges and shaping the future of artificial intelligence.

Serco

serco.com

We bring together the right people, the right technology and the right partners to create innovative solutions that make positive impact and address some of the most urgent and complex challenges facing the modern world. With a focus on serving governments globally, Serco’s services span justice, migration, defence, space, customer services, health, and transport. Our core capabilities include service design and advisory, resourcing, complex programme management, systems integration, case management, engineering, and asset & facilities management.

LTIMindtree

ltimindtree.com

LTIMindtree is a global technology consulting and digital solutions company that partners with enterprises across industries to reimagine business models, accelerate innovation, and drive AI-centric growth. Trusted by more than 700 clients worldwide, we use advanced technologies to enable operational excellence, elevated customer experiences, and long-term value creation. With a workforce of more than 86,000 talented and entrepreneurial professionals across over 40 countries, LTIMindtree — a Larsen & Toubro Group company — is dedicated to solving complex business challenges and delivering transformation at scale. LTIMindtree is proud to be an equal opportunity employer. We are committed to providing equal employment opportunities regardless of race, ethnicity, nationality, gender, gender identity, gender expression, language, age, sexual orientation, religion, marital status, veteran status, socio-economic status, disability, or any other characteristic protected by applicable law. Please note that neither LTIMindtree nor any of its authorized recruitment agencies/partners charge candidates any registration fees or other fees for appearing in interviews or securing employment/internships. Candidates are solely responsible for verifying the credentials of any agency or consultant claiming to work with LTIMindtree for recruitment purposes. Please note that anyone relying on representations made by fraudulent employment agencies/consultant does so at their own risk. LTIMindtree disclaims any liability for loss or damage suffered as a result of such actions. For more info, please visit www.ltimindtree.com.

IGT Solutions

igtsolutions.com

IGT Solutions is a next-gen customer experience (CX) company, defining and delivering AI-led transformative experiences for the global and most innovative brands using digital technologies. With the combination of Digital and Human Intelligence, IGT becomes the preferred partner for managing end-to-end CX journeys across Travel and High Growth Tech industries. Established in 1998, with a 100% focus on customer experience, IGT employs more than 25,000 customer experience and technology specialists providing services to 85 marquee customers globally. IGT’s global footprint consists of 31 delivery centers in China, Colombia, Egypt, India, Indonesia, Malaysia, Philippines, Romania, South Africa, Spain, UAE, the US, and Vietnam. IGT is ISO 27001:2013, CMMI SVC Level 5 and ISAE-3402 compliant for IT, and COPC® Certified v6.0, ISO 27001:2013 and PCI DSS 3.2 certified for BPO processes. The organization follows Six Sigma rigor for process improvements.

Reply

reply.com

Reply [EXM, STAR: REY] specialises in the design and implementation of solutions based on new communication channels and digital media. As a network of highly specialised companies, Reply defines and develops business models enabled by the new models of AI, big data, cloud computing, digital media and the internet of things. Reply delivers consulting, system integration and digital services to organisations across the telecom and media; industry and services; banking and insurance; and public sectors.

Loading…

NEWS

Atlas Reply Roma CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…