What is the official website of BancoEstado ?

The official website of BancoEstado is https://www.bancoestado.cl.

What is BancoEstado's cybersecurity risk score?

BancoEstado has an AI-generated cybersecurity risk score of 745 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has BancoEstado experienced?

According to Rankiteo, BancoEstado currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has BancoEstado been affected by any supply chain cyber incidents ?

According to Rankiteo, BancoEstado has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does BancoEstado have SOC 2 Type 1 certification ?

According to Rankiteo, BancoEstado is not certified under SOC 2 Type 1.

Does BancoEstado have SOC 2 Type 2 certification ?

According to Rankiteo, BancoEstado does not hold a SOC 2 Type 2 certification.

Does BancoEstado comply with GDPR ?

According to Rankiteo, BancoEstado is not listed as GDPR compliant.

Does BancoEstado have PCI DSS certification ?

According to Rankiteo, BancoEstado does not currently maintain PCI DSS compliance.

Does BancoEstado comply with HIPAA ?

According to Rankiteo, BancoEstado is not compliant with HIPAA regulations.

Does BancoEstado have ISO 27001 certification ?

According to Rankiteo,BancoEstado is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does BancoEstado operate in ?

BancoEstado operates primarily in the Banking industry.

How many employees does BancoEstado have ?

BancoEstado employs approximately 10,440 people worldwide.

Does BancoEstado own any subsidiaries ?

BancoEstado presently has no subsidiaries across any sectors.

How many LinkedIn followers does BancoEstado have ?

BancoEstado's official LinkedIn profile has approximately 257,590 followers.

What is the NAICS classification code for BancoEstado ?

BancoEstado is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does BancoEstado have a Crunchbase profile ?

No, BancoEstado does not have a profile on Crunchbase.

Does BancoEstado have a LinkedIn profile ?

Yes, BancoEstado maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bancoestado.

How many cybersecurity incidents has BancoEstado experienced ?

As of October 20, 2026, Rankiteo reports that BancoEstado has experienced 1 cybersecurity incidents.

How many peer or competitor companies does BancoEstado have ?

BancoEstado has an estimated 7,566 peer or competitor companies worldwide.

What types of cybersecurity incidents has BancoEstado faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

BancoEstado

Boost Score +25 with badge (5 left)

745

/1000

Moderate

770

/1000

Fair

BancoEstado Vendor Cyber Rating & Cyber Score

bancoestado.cl

Add Your Compliance Badge

Somos un banco público que presta servicios financieros a personas, empresas e instituciones. Nuestra red se compone de 415 sucursales, más de 42 mil CajaVecina, 122 BancoEstado Express y más de 12 millones de clientes. Estamos donde otros no están.

BancoEstado

BancoEstado CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

BancoEstado

Breach

100

04/2021

BAN20197322

Loading…

A.I.

BancoEstado Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for BancoEstado

Incidents vs Banking Industry Avg (This Year)

No incidents recorded for BancoEstado in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for BancoEstado in 2026.

Incident Types BancoEstado vs Banking Industry Avg (This Year)

No incidents recorded for BancoEstado in 2026.

Incident History - BancoEstado (X = Date, Y = Severity)

Loading…

SUBSIDIARY

BancoEstado Subsidiaries

Parent Company

BancoEstado

Banking

Website: https://www.bancoestado.cl

Company Size: 5,001-10,000 employees

No subsidiary data available for this company.

Loading…

BancoEstado Similar Companies

Huntington National Bank

cb huntington.com

Welcome to Huntington. Huntington Bancshares Incorporated is a $210 billion asset regional bank holding company headquartered in Columbus, Ohio. Founded in 1866, The Huntington National Bank and its affiliates provide consumers, small and middle-market businesses, corporations, municipalities, and other organizations with a comprehensive suite of banking, payments, wealth management, and risk management products and services. Huntington operates approximately 972 branches in 13 states, with certain businesses operating in extended geographies. Visit Huntington.com for more information. We are committed to doing the right thing for our customers, colleagues, and communities. Our “Welcome” philosophy means they are at the center of everything we do. Here’s how we look out for people: • We aim to make banking easier for our customers. Our comprehensive suite of innovative banking tools and products is specifically designed to strengthen the financial health of those we serve. • Our internal culture is built around making things great—rather than just good enough—and to be the best place our colleagues will ever work. We offer a flexible work environment with opportunities for growth, and we’ll provide all the resources needed to create a lasting and rewarding career path. • Our $40 billion Community Plan, environmental sustainability strategy, and robust small-business lending program are just a few of the ways we are helping to improve the economic vitality of the areas where we live and work. Explore Huntington Career opportunities at https://huntington-careers.com. Huntington is an Equal Opportunity Employer. The Huntington National Bank, Member FDIC. The logo mark and Huntington® are federally registered service marks of Huntington Bancshares Incorporated. Huntington Social Media Community Guidelines & Terms: http://bit.ly/HuntingtonSocialMedia

First Citizens Bank

cb firstcitizens.com

First Citizens Bank helps personal, business, commercial and wealth clients build financial strength that lasts. Headquartered in Raleigh, N.C., First Citizens has built a unique legacy of strength, stability and long-term thinking that has spanned generations. First Citizens offers an array of general banking services including a network of more than 500 branches and offices in 30 states; commercial banking expertise delivering best-in-class lending, leasing and other financial services coast to coast; innovation banking serving businesses at every stage; and a nationwide direct bank. Parent company First Citizens BancShares, Inc. (NASDAQ: FCNCA) is a top 20 U.S. financial institution with more than $200 billion in assets. Visit firstcitizens.com or call toll-free 1.888.FC DIRECT (1.888.323.4732). First Citizens Bank. Forever First®. Member FDIC. Equal Housing Lender. Social Media Terms of Use: https://www.firstcitizens.com/socialterms

U.S. Bank

usbank.com

At U.S. Bank, we help millions of clients achieve their goals with a balance of best-in-class technology and human expertise tailored to individual needs. As the fifth-largest commercial bank in the United States, we’ve built a reputation for strength and stability across a diversified mix of businesses, including commercial and institutional banking, business banking, payments, wealth management and consumer banking. We’ve been named one of the World’s Most Ethical Companies® by the Ethisphere Institute and the most admired superregional bank by Fortune. In addition to thousands of branches serving consumers, U.S. Bank offers a complete suite of products, services and strategic partnerships for business. Within our Wealth, Corporate, Commercial and Institutional Banking division, we serve more than half a million clients across the country and around the world, ranging from wealthy individuals and families to the largest corporations, including 90% of Fortune 1000 companies. We’re also consistently recognized as a great place to work. We’re shaping our company culture with intention, focused on creating a workplace where it’s safe to speak up, share ideas and try new things. We’re proud to be recognized as a “Best for Vets” employer by the Military Times and included on Fair360’s (formerly DiversityInc.) list of Top 50 Companies for Diversity. U.S. Bank, NA. Member FDIC. Equal Housing Lender.

AIB

aib.ie

We're here to keep you updated on AIB Group news, financial services industry insights, expert business reports and all the latest AIB career opportunities. We are one of Ireland’s major retail banks serving personal, business and corporate customers. We offer a range of banking products and services such as mortgages, savings and business banking. We have a customer centric view, always putting the customer first and supporting our customers at every stage. We have over 2.3m million customers using our multifaceted service. We provide our customers with a diverse range of contact channels; through our branches, commercial centres and our direct channels, such as AIB internet and telephone banking, self-service banking and our award-winning mobile banking app. AIB has a presence in Northern Ireland through its community-based full service bank, AIB NI, and in Britain where AIB GB serves its target audience of SMEs, owner-managed businesses and professional firms. EBS is also now part of the AIB Group and offers mortgage and deposit products and services from its own branch network. This is a public channel so never post your personal or account details. AIB provides banking related services in Ireland and all AIB content is intended for use in Ireland. Information is correct at time of posting and may be subject to change. No comments made by any employee, agent or contractor of AIB or any user should be construed as financial, investment or other specialist advice or as recommendations. AIB is not liable for any comments/postings on this channel. AIB Social Media Terms of Use and Privacy Statement apply https://aib.ie/social/social-media-privacy AIB and AIB Group are registered business names of Allied Irish Banks, p.l.c. Registered Office

Societe Generale

societegenerale.com

Societe Generale is one of the leading European financial services groups. Based on a diversified and integrated banking model, the Group combines financial strength and proven expertise in innovation with a strategy of sustainable growth. Committed to the positive transformations of the world’s societies and economies, Societe Generale and its teams seek to build, day after day, together with its clients, a better and sustainable future through responsible and innovative financial solutions. Active in the real economy for over 150 years, with a solid position in Europe and connected to the rest of the world, Societe Generale has over 117,000 members of staff in 66 countries and supports on a daily basis 25 million individual clients, businesses and institutional investors around the world by offering a wide range of advisory services and tailored financial solutions. The Group is built on three complementary core businesses: - French Retail Banking which encompasses the SG and Boursorama brands. Each offers a full range of financial services with omnichannel products at the cutting edge of digital innovation; - International Retail Banking, Insurance and Financial Services, with networks in Africa, Central and Eastern Europe and specialised businesses that are leaders in their markets; - Global Banking and Investor Solutions, which offers recognised expertise, key international locations and integrated solutions. Societe Generale is included in the principal socially responsible investment indices: DJSI (Europe), FTSE4Good (Global and Europe), Bloomberg Gender-Equality Index, Refinitiv Diversity and Inclusion Index, Euronext Vigeo (Europe and Eurozone), STOXX Global ESG Leaders indexes, and the MSCI Low Carbon Leaders Index (World and Europe).

Yapı Kredi

yapikredi.com.tr

Yapı Kredi has been sustainably strengthening its market positioning in the sector since its establishment in 1944 through a customer-centric approach and focus on innovation. Yapı Kredi is the 3rd largest private bank in Turkey with total assets worth TL 411 billion as of the end of 2019. Constantly seeking to increase its contribution to the financing of the Turkish economy with its customer-centric approach, Yapı Kredi enlarged the volume of its total cash and non-cash loans by 4% in 2019 to TL 319 billion. Thus, Yapı Kredi maintained its position in 2nd place among private banks in this respect. The Bank serves its customers with its 846 branches covering all regions of Turkey and 16,631 employees. Yapı Kredi delivers its products and services via its advanced Alternative Delivery Channels (ADCs) that comprise 4,330 ATMs, innovative internet banking, leading mobile banking, 3 call centers and approximately 709 thousand POS terminals. 94% of the Bank’s transactions went through non-branch channels as at year-end 2019. Yapı Kredi is a fully integrated financial services group supported by its domestic and international subsidiaries. Yapı Kredi serves its customers through retail banking (comprising of individual banking, Small and Medium Size Enterprises (SME) banking and card payment systems, private banking and wealth management), as well as corporate and commercial banking. The Bank’s operations are supported by domestic subsidiaries in asset management, brokerage, leasing and factoring as well as international banking subsidiaries in the Netherlands, Malta and Azerbaijan. Yapı Kredi has a strong shareholding structure which ensures sustainable and profitable growth. 40.95% of the Bank’s shares are owned by Koç Financial Services, 9.02% of the shares are owned by Koç Holding A.Ş. The total direct and indirect shares of Koç Group amount to 49.99%. 20.00% of Bank’s shares are owned by UniCredit S.P.A. The remaining 30.03% is publicly traded on Borsa Istanbul

PKO Bank Polski

cb pkobp.pl

We are the largest bank in Poland and one of the largest financial institutions in the region. Our strength rests on three strong pillars: the retail, the corporate and the investment segment. Irrespective of the unique nature of each of those areas, what joins them is the undivided attention they pay to the needs of their customers and clients, and their pursuit of superlative quality in customer service. Consistent campaigning established the “PKO Bank Polski” brand as a virtual guarantee of the right banking partner choice, one that not only delivers the relevant products and services, but also provides capable support in financial and business decisions. The professionalism and the experience of our advisers help them meet their customers’ expectations and to offer them the best available solutions. Though traditionally dedicated to retail customers, over the years PKO Bank Polski has also become a corporate finance leader of the Polish market. As at the end of 2012, the number our corporate clients exceeded 12,000. For years now, our corporate banking segment has participated in projects of major importance for the entire Polish economy. We have financed major investment projects, engaged in restructuring and recovery processes and have supported regional development through solutions dedicated to local government units. In 2012 we continued in activity that perpetuated our image of a true partner of the Polish enterprise and local government sectors, which we gained during the first wave of the financial crisis. At the heart of our corporate offer is our ability to engineer comprehensive solutions out of the products of the Bank and its Group Companies (factoring, leasing) of relevance to the differing needs of the various size companies: from small entities in the early stages of development to the largest corporates.

National Bank of Egypt (NBE)

cb nbe.com.eg

Since its inception in 1898 with a capital of GBP1 million, NBE has been regarded as one of the oldest and most respected commercial banks in Egypt.Never isolated from national issues or concerns, NBE has been the primary supporter of Egypt’s national economy by financing the major Egyptian national projects. NBE’s missions and operations have continuously evolved throughout history and the economic and political changes experienced by the country.NBE was entrusted with issuing banknotes and handling government accounts, then in the 1950’s its activities evolved to undertaking the duties of the Central Bank. In the 1960’s it focused on commercial banking while still handling the central banking duties in locations where the Central Bank had no branches. Eventually, issuing and managing Investment Certificates for the State.NBE currently controls 23.6% of the market share of total assets in the Egyptian banking sector, 25.8% of total deposits, and 21.8% of total loans. NBE owns a large network includes over 337 branches, offices and banking units across the country, alongside an international presence through NBE (United Kingdom), NBE (Republic of the Sudan) and NBE’s branches in New York (United States of America) and Shanghai (People’s Republic of China), as well as representative offices in Johannesburg (South Africa), Dubai (United Arab Emirates), and Adis Ababa (Republic of Ethiopia), in addition to a branch in the Dubai International Finance Center.NBE also has a network of correspondents throughout the world, but centered in Europe— Egypt’s primary trade partner.NBE is always keen on an effective presence in brokerage, financing different sectors, and maintaining the client’s trust by offing the best and latest services.Whilst leading the local banking market,NBE is continuously upgrading its network of branches and channels of electronic communication, and strives to refine its human resources through advanced national and international training programs.

Intesa Sanpaolo

intesasanpaolo.com

Intesa Sanpaolo è il maggior gruppo bancario in Italia con una significativa presenza internazionale. Il suo business model distintivo la rende leader a livello europeo nel Wealth Management, Protection & Advisory e ne caratterizza l’orientamento al digitale. I’impegno in ambito ESG prevede, entro il 2025, €115 miliardi di finanziamenti impact e contributi per 500 milioni a supporto delle persone in difficoltà. Gallerie d’Italia, è la sede espositiva del patrimonio artistico della banca e di progetti artistici di riconosciuto valore. https://group.intesasanpaolo.com/it/ _______________ Intesa Sanpaolo is the largest banking group in Italy with a significant international presence. Its distinctive business model makes it a European leader in wealth management, protection and advisory and ensures its strong focus on digital. Its commitment to ESG foresees, by 2025, €115 billion of impact financing and contributions of €500 million to support people in need. Gallerie d'Italia, is the exhibition venue for the bank's artistic heritage and artistic projects of recognised value. https://group.intesasanpaolo.com/en/ _________________ Sede Legale: Piazza San Carlo 156, 10121 Torino – Sede Secondaria: Via Monte di Pietà 8, 20121 Milano Tel. 011 555.1 – mail: [email protected] pec: [email protected] Registro delle Imprese di Torino e Codice Fiscale 00799960158 – Partita Iva 10810700152 N. Iscr. Albo Banche 5361 N. Iscr. Registro degli Intermediari Assicurativi e Riassicurativi - Sez. D. 000027210, data di iscrizione 01.02.2007 - Intermediario soggetto alla vigilanza dell'IVASS: https://servizi.ivass.it/RuirPubblica Per la presentazione dei reclami e eventuali sistemi di risoluzione delle controversie https://www.intesasanpaolo.com/it/persone-e-famiglie/reclami.html. Per assistenza: https://www.intesasanpaolo.com/it/common/parla-con-noi.html. Netiquette: https://www.intesasanpaolo.com/it/common/landing/anti-phishing/netiquette.html

Loading…

NEWS

BancoEstado CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 12, 2025 07:10 AM

Chile’s BancoEstado falls victim to ransomware attack

BancoEstado, one of Chile's largest banks, shut down all its branches on Monday after it fell victim to a ransomware attack at the weekend.

Read Article

February 17, 2021 08:00 AM

5 cyberattacks from the past year that highlight the battle for online safety is not over

The recent system breach of French IT company Centreon is another example of how important strong cybersecurity is and more knowledge on the...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

BancoEstado Vendor Cyber Rating & Cyber Score

BancoEstado A.I CyberSecurity Scoring

BancoEstado CyberSecurity News & History

BancoEstado Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for BancoEstado

Incidents vs Banking Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types BancoEstado vs Banking Industry Avg (This Year)

Incident History - BancoEstado (X = Date, Y = Severity)

BancoEstado Subsidiaries

Parent Company

BancoEstado

BancoEstado Similar Companies

Huntington National Bank

First Citizens Bank

U.S. Bank

AIB

Societe Generale

Yapı Kredi

PKO Bank Polski

National Bank of Egypt (NBE)

Intesa Sanpaolo

BancoEstado CyberSecurity News

Chile’s BancoEstado falls victim to ransomware attack

5 cyberattacks from the past year that highlight the battle for online safety is not over

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

BancoEstado CyberSecurity News & History

BancoEstado Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for BancoEstado

Incidents vs Banking Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types BancoEstado vs Banking Industry Avg (This Year)

Incident History - BancoEstado (X = Date, Y = Severity)

BancoEstado Subsidiaries

Parent Company

BancoEstado

BancoEstado Similar Companies

Huntington National Bank

First Citizens Bank

U.S. Bank

AIB

Societe Generale

Yapı Kredi

PKO Bank Polski

National Bank of Egypt (NBE)

Intesa Sanpaolo

BancoEstado CyberSecurity News

Chile’s BancoEstado falls victim to ransomware attack

5 cyberattacks from the past year that highlight the battle for online safety is not over

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo