Comparison Overview
Cardif

Cardif
8 rue du Port, Nanterre, 92720, FR
Last Update: 26/02/2026
Depuis 1983, BNP Paribas Cardif distribue sous la marque commerciale Cardif ses produits d’épargne, retraite, assurance de prêt et prévoyance, via notamment un réseau de conseillers en gestion de patrimoine, courtiers et sociétés de gestion privée. Notre entité de 180 c...

AAA-The Auto Club Group
1 Auto Club Drive, Dearborn, MI, US, 48126
Last Update: 07/09/2026
AAA - The Auto Club Group (ACG) is the second largest AAA club in North America, serving more than 13+ million members across 14 U.S. states, the province of Quebec, Puerto Rico, and the U.S. Virgin Islands. For over 100 years, AAA has provided safety, security, and pe...
Compliance Ranges Comparison

Cardif







AAA-The Auto Club Group






Benchmark & Cyber Underwriting Signals
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for Cardif in 2026.
Incidents vs Insurance Industry Avg (This Year)
No incidents recorded for AAA-The Auto Club Group in 2026.
Incident History - Cardif (X = Date, Y = Severity)
Cardif cyber incidents detection timeline including parent company and subsidiaries.
Incident History - AAA-The Auto Club Group (X = Date, Y = Severity)
AAA-The Auto Club Group cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Cardif

AAA-The Auto Club Group
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout