Comparison Overview
BROKK
BROKK
P.O. Box 730, Skellefteå, 931 27, SE
Last Update: 03/04/2026
Brokk is the world´s leading manufacturer of remote controlled demolition robots. Since 1976 the company has developed demolition and maintenance solutions for the construction, cement, mining, metal process, tunnel and the nuclear industry, as well as a variety of demo...
Finning
CA
Last Update: 25/09/2026
Finning is the world's largest Caterpillar dealer delivering unrivalled service for over 90 years. We sell, rent and provide parts and service for equipment and engines to customers in various industries, including mining, construction, petroleum, forestry and a wide ra...
Compliance Ranges Comparison
BROKK
Finning
Benchmark & Cyber Underwriting Signals
Incidents vs Machinery Manufacturing Industry Avg (This Year)
BROKK has 32.43% fewer incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Machinery Manufacturing Industry Avg (This Year)
No incidents recorded for Finning in 2026.
Incident History - BROKK (X = Date, Y = Severity)
BROKK cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Finning (X = Date, Y = Severity)
Finning cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
BROKK
Finning
FAQ
Latest Global CVEs
A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lead to information exposure through error message. The attack can be executed remotely. This patch is called 713b943af94ab2d521d483b841618b97a2e78a4d. A patch should be applied to remediate this issue.
IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to intercept session data through network-based attacks.
IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied label text into the DOM via an unsanitized innerHTML write when the title exceeds the available container width. A remote attacker could exploit this vulnerability to execute arbitrary JavaScript in the victim's browser session.
IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input.
IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP request to any URL within the Navigator application prior to authentication, a bad actor could exploit this vulnerability to alter server-side session security state.