Comparison Overview
AVL
AVL
Hans-List Platz 1, Graz, undefined, 8020, AT
Last Update: 20/03/2026
AVL List GmbH (“AVL”) with its headquarters in Graz, is one of the world’s leading mobility technology companies for development, simulation and testing in the automotive industry, and in other sectors such as rail, marine, and energy. Based on extensive in-house resear...
Marelli
2 Chome-1917 Nisshincho, Kita Ward, Saitama City, 331-0823, JP
Last Update: 15/09/2026
Marelli is a global, independent technology partner to the automotive industry, with a strong and established track record in innovation and manufacturing excellence. As mobility is evolving fast and global trends drive unprecedented innovation, we leverage our expertis...
Compliance Ranges Comparison
AVL
Marelli
Benchmark & Cyber Underwriting Signals
Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)
No incidents recorded for AVL in 2026.
Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)
No incidents recorded for Marelli in 2026.
Incident History - AVL (X = Date, Y = Severity)
AVL cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Marelli (X = Date, Y = Severity)
Marelli cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
AVL
Marelli
FAQ
Latest Global CVEs
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.
Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet.
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).