What is the official website of CBRE España ?

The official website of CBRE España is http://www.cbre.es.

What is CBRE España's cybersecurity risk score?

CBRE España has an AI-generated cybersecurity risk score of 761 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has CBRE España experienced?

According to Rankiteo, CBRE España currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CBRE España been affected by any supply chain cyber incidents ?

According to Rankiteo, CBRE España has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CBRE España have SOC 2 Type 1 certification ?

According to Rankiteo, CBRE España is not certified under SOC 2 Type 1.

Does CBRE España have SOC 2 Type 2 certification ?

According to Rankiteo, CBRE España does not hold a SOC 2 Type 2 certification.

Does CBRE España comply with GDPR ?

According to Rankiteo, CBRE España is not listed as GDPR compliant.

Does CBRE España have PCI DSS certification ?

According to Rankiteo, CBRE España does not currently maintain PCI DSS compliance.

Does CBRE España comply with HIPAA ?

According to Rankiteo, CBRE España is not compliant with HIPAA regulations.

Does CBRE España have ISO 27001 certification ?

According to Rankiteo,CBRE España is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CBRE España operate in ?

CBRE España operates primarily in the Real Estate industry.

How many employees does CBRE España have ?

CBRE España employs approximately 753 people worldwide.

Does CBRE España own any subsidiaries ?

CBRE España presently has no subsidiaries across any sectors.

How many LinkedIn followers does CBRE España have ?

CBRE España's official LinkedIn profile has approximately 98,950 followers.

Does CBRE España have a Crunchbase profile ?

No, CBRE España does not have a profile on Crunchbase.

Does CBRE España have a LinkedIn profile ?

Yes, CBRE España maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cbre-espa-a.

How many cybersecurity incidents has CBRE España experienced ?

As of June 14, 2026, Rankiteo reports that CBRE España has not experienced any cybersecurity incidents.

How many peer or competitor companies does CBRE España have ?

CBRE España has an estimated 30,125 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CBRE España

Boost Score +25 with badge (5 left)

761

/1000

Fair

786

/1000

Fair

CBRE España Vendor Cyber Rating & Cyber Score

cbre.es

Add Your Compliance Badge

CBRE, con sede central en Los Ángeles, es la compañía de consultoría y servicios inmobiliarios líder a nivel internacional. Cuenta con más de 30.000 profesionales en más de 400 oficinas en todo el mundo (excluyendo filiales). En España está presente desde 1973, donde ofrece servicios inmobiliarios a través de 6 oficinas (Madrid, Barcelona, Valencia, Marbella, Zaragoza, Palma de Mallorca), además de coordinar la oficina de Casablanca (Marruecos). Los servicios de CBRE se prestan desde los siguientes departamentos: Agencia Industrial, Agencia Oficinas, Asset Management, Building Consultancy, Corporate Finance, Cross Border, Debt Advisory, Fondos de Inversión, Global Corporate Services, Hoteles, Inversiones Institucionales, Patrimonios

CBRE España A.I CyberSecurity Scoring

Scoring History

CBRE España

CBRE España CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CBRE España Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CBRE España

Incidents vs Real Estate Industry Avg (This Year)

No incidents recorded for CBRE España in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CBRE España in 2026.

Incident Types CBRE España vs Real Estate Industry Avg (This Year)

No incidents recorded for CBRE España in 2026.

Incident History - CBRE España (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CBRE España Subsidiaries

CBRE España

Real Estate

Website: http://www.cbre.es

Company Size: 753

CBREReal Estate

CBRE RetailLeasing Non-residential Real Estate

CBRE NederlandReal Estate

CBRE PortugalReal Estate

Highlights 2016Real Estate

CBRE UKReal Estate

CBRE MéxicoReal Estate

CBRE Industrial & LogisticsReal Estate

CBRE Data Center SolutionsReal Estate

CBRE CanadaLeasing Non-residential Real Estate

CBRE Property ManagementLeasing Non-residential Real Estate

CBRE Asia PacificReal Estate

CBRE Project ManagementReal Estate

CBRE BrasilLeasing Non-residential Real Estate

Trammell Crow CompanyReal Estate

High Street ResidentialReal Estate

CBRE ArgentinaReal Estate

CBRE IrelandReal Estate

CBRE Ireland Industrial & LogisticsTransportation, Logistics, Supply Chain and Storage

CBRE ItalyReal Estate

CBRE ChileLeasing Non-residential Real Estate

CBRE BelgiumReal Estate

CBRE GermanyReal Estate

CBRE MENAReal Estate

United Tower | Bahrain BayReal Estate

CBRE Capital MarketsReal Estate

CBRE Valuation and Advisory ServicesReal Estate

CBRE/New EnglandCommercial Real Estate

CBRE SwitzerlandReal Estate

Phicap PropertyReal Estate

CBRE AustriaReal Estate

CBRE NorwayReal Estate

CBRE RomaniaLeasing Non-residential Real Estate

CBRE Czech RepublicReal Estate

CBRE PolandReal Estate

CBRE OficinasLeasing Non-residential Real Estate

CBRE ResidencialReal Estate

CBRE IndustrialLeasing Non-residential Real Estate

Loading…

CBRE España Similar Companies

Lendlease

lendlease.com

Lendlease is Australia’s leading real estate business with an international investments platform. We’re city shapers, asset creators and trusted partners. Our deep property experience and bold thinking delivers innovative real estate and investment solutions. Very few organisations can build cities from scratch, including the infrastructure to connect people, with skills to design, develop, fund, build and manage, but we can. We purposefully seek to hire people who share our values and passion to make a positive impact. Whether big or small, we make a difference and all of us have a part to play in our success. Together we make a difference.

FirstService Residential

fsresidential.com

FirstService Residential is simplifying property management. Its hospitality-minded teams serve residential communities across the United States and Canada. The organization partners with boards, owners, and developers to enhance every property's value and every resident's life. Leveraging unique expertise and scale, FirstService serves its clients with proven solutions and a service-first philosophy. Residents can count on 24/7 customer care and tailored lifestyle programming, amenity activation, and technology for their community’s specific needs. Market-leading programs with FirstService Financial and FirstService Energy deliver additional levels of support. Boards and developers select FirstService Residential to realize their vision and drive positive change in the communities in their trusted care. FirstService Residential is also a Great Place to Work two years in a row and was recently awarded Fortune Best Workplaces in Real Estate™ 2024. For additional support, please contact our 24/7/365 Customer Care team at 855.333.5149 FirstService Residential is a subsidiary of FirstService Corporation (NASDAQ and TSX: FSV), a North American leader in providing essential property services to a wide range of residential and commercial clients.

Emaar

emaar.com

WHO WE ARE Emaar is a pioneer of master-planned communities in Dubai since its inception in 1997. It is listed on the Dubai Financial Market as a public joint-stock company. Building upon the legacy of our flagship Downtown Dubai creations — the iconic Burj Khalifa, Dubai Mall, and Dubai Fountain — our dream is to be the world’s most valuable and trusted company, to enrich lives and to be powered by the best people. With proven competencies in properties, shopping malls & retail and hospitality & leisure, we shape new lifestyles with a passion for design excellence, build with quality and timely delivery. EXPANSION & DIVERSIFICATION Reflecting the pulse of Dubai, our portfolio encompasses developing renowned hospitality & leisure projects, premium shopping malls & Retail assets, as well as Master-Planned Communities and iconic Real-Estate assets. Our hospitality & leisure portfolio includes Address Hotels & Resorts and Armani Hotels & Resorts, among others. We are also the developers of premium shopping malls and retail assets such as the flagship The Dubai Mall – the world’s most visited retail & entertainment venue, Dubai Marina Mall and Souk-al-Bahar. Further, we continuously define the standard for exceptional cultural, entertainment and leisure experiences with destinations such as Dubai Opera, Dubai Aquarium & Underwater Zoo, Reel Cinemas, Dubai Ice Rink and VR Park.

Coldwell Banker Realty

coldwellbankerhomes.com

Coldwell Banker Realty is one of the nation’s largest real estate brokerages operating in 50 markets in the United States. Powered by a network of approximately 55,000 independent real estate agents and 600 offices, Coldwell Banker Realty, a subsidiary of Anywhere Real Estate Inc. (NYSE:HOUS), operates the company-owned real estate brokerage offices that are part of the worldwide Coldwell Banker Real Estate LLC brand. For more information, visit www.ColdwellBankerHomes.com.

Colliers

ow.ly

We are a global diversified professional services and investment management company operating through three industry-leading businesses: Commercial Real Estate, Engineering, and Investment Management. With greater than a 30-year track record of consistent growth and strong recurring cash flows, we scale complementary, high-value businesses that provide essential services across the full asset lifecycle. Our unique partnership philosophy empowers exceptional leaders, preserves our entrepreneurial culture, and ensures meaningful inside ownership — driving strong alignment and sustained value creation for our shareholders. With $5.6 billion in annual revenues, 24,000 professionals, and $108 billion in assets under management, Colliers is committed to accelerating the success of our clients, investors, and people worldwide.

Shimao Group

shimaogroup.com

Shimao Group has entered the real estate industry since 1989, After more than 30 years of development, the Group has made its layout in more than 100 core development cities across China, involving real estate, commercial, property management, hotel, theme entertainment and culture. Following the national strategy, Shimao continuously provides customers with high-level quality experience in living, life, consumption, business and tourism, leading the lifestyle and serving a better life.

Weichert, Realtors

weichert.com

Since 1969, Weichert Realtors has grown from a single office into one of the nation's leading providers of real estate and related services. Their success is rooted in their customer-first philosophy, making every organizational decision based on building trust and sustaining amazing experiences at every step along their customers’ journey to homeownership. Meeting every real estate need Today, the company takes pride in going far beyond the basics, to meet virtually all their customers’ real estate needs. Weichert has turned its sales offices into true "one-stop" destinations for the full range of real estate-related services*. Unlike many competitors who claim to offer this (but only have an 800 number to call), Weichert can introduce customers to mortgage partners who work with local Weichert offices. These trusted advisors provide integrated solutions and services to help make the entire homeownership process worry-free. Training for success Weichert also leads the industry with the most comprehensive Sales Associate training, development and mentorship programs. The company values associate education because, when they’re continuously nurtured with the latest information, tools and resources, their customers are rewarded with the very best service! Offering a legendary Open House program Recognizing that today’s online shoppers still need to experience properties in person, the company has reinvigorated their proven Open House program with new, welcoming signage and polished, professional event management that brings in the most buyers. In fact, 1 out of 3 Weichert Open Houses results in a home sale. Supporting website visitors Weichert has developed a unique contact center that’s unmatched in the industry; responding to online requests for information by connecting them to a local Sales Associate within minutes; other companies take up to 24 hours or more.

JLL

co.jll

We’re a leading professional services firm that specializes in real estate and investment management. JLL shapes the future of real estate for a better world by using the most advanced technology to create rewarding opportunities, amazing spaces and sustainable real estate solutions for our clients, our people and our communities. We want the most ambitious clients to work with us, and the most ambitious people to work for us. Join us.

MEB Management Services (Morrison, Ekre & Bart Management Services)

mebapts.com

MEB’S ability to create value for both clients and residents has been the cornerstone of our success. Scott, Libby, Mark, and Jodi have been active in the real estate management industry and have over 125 years of combined experience. With their breadth and depth of knowledge, MEB is the “go-to” company for a diverse group of investors, providing management services to over 25,000 rental households and over 1,000,000 square feet of commercial property. MEB is based in Arizona with offices in Phoenix, Tucson, Flagstaff and provides management services throughout the Southwest and Midwest. We are over 600 team members strong and provide management, consulting, receivership and rehab services for all types and asset classes of rental housing including: Luxury Apartment and Rental Home Communities Work Force Apartments and Rental Homes Student-Oriented Communities Affordable, LIHTC, and HUD Communities Active Senior Housing Value-Add Opportunities We are privileged to provide service to a large and diverse group of clients that include individual and institutional investors, lenders, and special servicers. Every MEB team member is focused on creating value for our clients, residents, and fellow team members. It is our core purpose as a company and is embraced at every level of our organization.

Loading…

NEWS

CBRE España CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 16, 2021 05:09 PM

Data and Technology Across Every Dimension

Learn how CBRE leverages data at scale and enterprise-grade technology to create the real estate solutions of tomorrow.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…