What is the official website of Commerzbank AG ?

The official website of Commerzbank AG is http://www.commerzbank.com.

What is Commerzbank AG's cybersecurity risk score?

Commerzbank AG has an AI-generated cybersecurity risk score of 806 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has Commerzbank AG experienced?

According to Rankiteo, Commerzbank AG currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Commerzbank AG been affected by any supply chain cyber incidents ?

According to Rankiteo, Commerzbank AG has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Commerzbank AG have SOC 2 Type 1 certification ?

According to Rankiteo, Commerzbank AG is not certified under SOC 2 Type 1.

Does Commerzbank AG have SOC 2 Type 2 certification ?

According to Rankiteo, Commerzbank AG does not hold a SOC 2 Type 2 certification.

Does Commerzbank AG comply with GDPR ?

According to Rankiteo, Commerzbank AG is not listed as GDPR compliant.

Does Commerzbank AG have PCI DSS certification ?

According to Rankiteo, Commerzbank AG does not currently maintain PCI DSS compliance.

Does Commerzbank AG comply with HIPAA ?

According to Rankiteo, Commerzbank AG is not compliant with HIPAA regulations.

Does Commerzbank AG have ISO 27001 certification ?

According to Rankiteo,Commerzbank AG is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Commerzbank AG operate in ?

Commerzbank AG operates primarily in the Banking industry.

How many employees does Commerzbank AG have ?

Commerzbank AG employs approximately 12,820 people worldwide.

Does Commerzbank AG own any subsidiaries ?

Commerzbank AG presently has no subsidiaries across any sectors.

How many LinkedIn followers does Commerzbank AG have ?

Commerzbank AG's official LinkedIn profile has approximately 186,248 followers.

What is the NAICS classification code for Commerzbank AG ?

Commerzbank AG is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does Commerzbank AG have a Crunchbase profile ?

No, Commerzbank AG does not have a profile on Crunchbase.

Does Commerzbank AG have a LinkedIn profile ?

Yes, Commerzbank AG maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/commerzbank-ag.

How many cybersecurity incidents has Commerzbank AG experienced ?

As of September 2, 2026, Rankiteo reports that Commerzbank AG has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Commerzbank AG have ?

Commerzbank AG has an estimated 7,489 peer or competitor companies worldwide.

What types of cybersecurity incidents has Commerzbank AG faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Commerzbank AG

Boost Score +25 with badge (5 left)

806

/1000

Good

831

/1000

Good

Commerzbank AG Vendor Cyber Rating & Cyber Score

commerzbank.com

Add Your Compliance Badge

Commerzbank is the leading bank for the German Mittelstand and a strong partner for around 24,000 corporate client groups. In addition, it supports private and small-business customers in Germany with more than €400 billion assets under management. The Bank’s two Business Segments – Private and Small-Business Customers and Corporate Clients – offer a comprehensive portfolio of financial services. Commerzbank transacts approximately 30% of Germany’s foreign trade and is present internationally in more than 40 countries in the corporate clients’ business. The Bank focusses on the German Mittelstand, large corporates, and institutional clients. As part of its international business, Commerzbank supports clients with a business relationship to

Commerzbank AG A.I CyberSecurity Scoring

Scoring History

Commerzbank AG

Commerzbank AG CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Commerzbank AG

Cyber Attack

11/2023

COM1786740728

Loading…

A.I.

Commerzbank AG Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Commerzbank AG

Incidents vs Banking Industry Avg (This Year)

No incidents recorded for Commerzbank AG in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Commerzbank AG in 2026.

Incident Types Commerzbank AG vs Banking Industry Avg (This Year)

No incidents recorded for Commerzbank AG in 2026.

Incident History - Commerzbank AG (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Commerzbank AG Subsidiaries

Commerzbank AG

Banking

Website: http://www.commerzbank.com

Company Size: 10,001+ employees

Club der Unternehmerinnen Commerzbank AGFinancial Services

Loading…

Commerzbank AG Similar Companies

Nordea

cb nordea.com

We are a universal bank with a 200-year history of supporting and growing the Nordic economies – enabling dreams and aspirations for a greater good. Every day, we work to support our customers’ financial development, delivering best-in-class omnichannel customer experiences and driving sustainable change. We are a full-service universal bank and the third largest corporation in the Nordic region and one of the top 10 financial services companies in Europe based on market capitalisation. We are present in 17 countries, including our four Nordic home markets which together constitute the 10th largest economy in the world. As demand for digital services increases, we're continuously working to become your future digital bank by improving the products and services we offer, such as new online banking platforms, mobile payments and analytics tools, to name a few. The Nordea share is listed on the Nasdaq Helsinki, Nasdaq Copenhagen and Nasdaq Stockholm exchanges. Read more about us at nordea.com. We value your opinions and welcome your comments and questions on our posts here on LinkedIn. Please note that we reply mainly during business hours, Monday-Friday. Please keep a polite, professional and constructive tone. We remove comments containing crude language and derogatory views of our staff and other people who comment on our posts. We do not allow content that is unrelated to the subject, and we remove discriminatory and racist comments as well as spam and advertising.

Akbank

cb akbank.com

Akbank was founded as a local bank in Adana in January 1948. Established originally with the core objective to provide funding to local cotton producers, the Bank opened its first branch in the Sirkeci district of Istanbul on July 14, 1950. In 1954, after relocating its Head Office to Istanbul, the Bank rapidly expanded its branch network and had automated all banking operations by 1963. Floated to the public in 1990, Akbank shares began trading on international markets and as an American Depository Receipt (ADR) after its secondary public offering in 1998. Akbank established AKSecurities in 1996, AKInvestment Trust in 1998, AKAssetManagement Company and its Private Banking Department in 2000 and Ak Pension Company in 2003. Akbank acquired AKLease in 2005 and Ak Pension Company was sold to Ak Insurance in February 2006. Akbank conducts overseas operations through its subsidiaries in Germany (Akbank AG), the Netherlands (Akbank NV) and Dubai (Akbank Dubai Limited) as well as a branch in Malta. As part of the initiative to restructure its overseas subsidiaries, Akbank decided to consolidate Akbank AG and Akbank NV under the corporate umbrella of Akbank AG; the merger is currently underway. In addition to its core banking activities, Akbank offers a wide range of consumer, commercial and SME, corporate and private banking services as well as foreign trade financing. For more information about Akbank, please visit at http://www.akbank.com.

Regions Bank

regions.com

Regions Financial Corporation is a member of the S&P 500 Index and is one of the nation’s largest full-service providers of consumer and commercial banking, wealth management, and mortgage products and services. Regions serves customers across the South, Midwest and Texas, and through its subsidiary, Regions Bank, operates more than 1,250 banking offices and more than 2,000 ATMs. Additional information about Regions and its full line of products and services can be found at www.regions.com. Ticker Symbol: RF on the NYSE Regions' Social Media & Community Guidelines: http://spr.ly/lismcg Regions' Privacy & Security Policy: http://spr.ly/lipp https://www.regions.com/help/social-media Regions Bank, Member FDIC. Equal Housing Lender. NMLS #174490. Only bank deposits are FDIC insured. Non-Deposit Products including Investments, Securities, Mutual Funds, Insurance Products, Crypto Assets, and Annuities Are Not FDIC Insured | Are Not Bank Guaranteed | May Lose Value | Are Not Deposits | Are not a condition of any Banking Activity | Are Not Insured by any Government Agency Equal Opportunity Employer/Including Disabled/Veterans Regions provides links to other websites or apps for your convenience and does not control the content, services or products provided on the linked website or app, whose Privacy and security policies or procedures may differ. Consult the policies or disclosures on their website. © 2025 Regions Bank. Regions and the Regions logo are registered trademarks of Regions Bank. The LifeGreen color is a trademark of Regions Bank.

Bank of the Philippine Islands (BPI)

bpi.com.ph

Founded in 1851, the Bank of the Philippine Islands is the first bank in the Philippines and in Southeast Asia. Together with its subsidiaries and affiliates, BPI, a universal bank, offers a wide range of financial products and services that serve both retail and corporate clients. Get ready to start a bright future with us. We have diverse talents and expertise — from individuals who keep up with the gyrations of the financial markets, to those who collect and analyze data, to people who help clients with their simple or complex financial needs and even tech-savvy millennials with a knack for creating apps. Our Mission We are your trusted financial adviser, nurturing your future and making life easier Our Vision Building a better Philippines -- one family, one community at a time Our Values We are Nurturing. We act with Integrity. We are Customer Obsessed. We act with Excellence. WHY CHOOSE BPI 1. Rich heritage in banking and finance - BPI continues to pave the way for the Philippine banking and financial industry, supporting economic growth and nation-building. 2. Reputation for financial prudence and client trust - BPI is widely known and respected for its financial expertise and prudence, client trust, and industry leadership. 3. Culture of excellence - BPI has a culture of excellence, where employees feel that they are working on something meaningful, significant and purpose-driven, towards a common goal and purpose.

PT Bank Danamon Indonesia Tbk

danamon.co.id

PT Bank Danamon Indonesia Tbk (BEI: BDMN) didirikan pada tahun 1956. Per 31 Desember 2024, Danamon mengelola aset konsolidasian sebesar Rp242 triliun dengan anak perusahannya, Adira Finance. Dalam hal kepemilikan saham, 92,47% saham Danamon dimiliki oleh MUFG, dan 7,53% lainnya dimiliki oleh publik. Dalam melayani nasabah dari semua lini bisnis yaitu Retail, Usaha Kecil dan Menengah, serta Korporasi, Danamon didukung oleh 865* kantor cabang konvensional dan unit Syariah, serta kantor cabang dan kantor perwakilan grup perusahaan Danamon di Indonesia. Sebagai anak perusahaan dari MUFG yang merupakan salah satu grup jasa keuangan terbesar di dunia, Danamon didukung oleh jaringan global MUFG dan bank mitranya: Krungsri Bank di Thailand, Security Bank di Filipina, dan VietinBank di Vietnam. Danamon juga diperkuat oleh jaringan lokal dari grup perusahaannya yaitu Adira Finance, Home Credit Indonesia, Mandala Finance, dan Zurich Asuransi Indonesia, serta mitra strategisnya. Bersama MUFG, grup perusahaan serta mitra strategisnya, Danamon berkomitmen untuk terus bertransformasi sebagai Satu Grup Finansial, guna menjadi mitra keuangan terpercaya yang berorientasi pada pelanggan dan selalu berinovasi, demi memenuhi kebutuhan pemegang saham, nasabah, karyawan, dan regulator dengan menghadirkan solusi finansial menyeluruh agar dapat tumbuh bersama. Danamon dan grup perusahaan serta mitra strategisnya juga menyadari pentingnya aspek keberlanjutan sebagai bagian tak terpisahkan dari pertumbuhan dan kesejahteraan masyarakat. Selain itu, dalam menjalankan bisnis serta untuk mencapai tujuan sesuai dengan visi dan misinya, Danamon menjunjung tinggi nilai perusahaan “BISA”, yang harus diterapkan oleh seluruh karyawan, manajemen, direksi, dan komisaris Danamon. Nilai-nilai tersebut meliputi Berkolaborasi, Intergritas, Sigap Melayani, dan Adaptif.

Crédit Mutuel Alliance Fédérale

creditmutuel.fr

Bancassureur de premier plan en France avec 79 000 collaborateurs au service de 31 millions de clients, Crédit Mutuel Alliance Fédérale propose une offre multiservice à une clientèle de particuliers, de professionnels de proximité et entreprises de toutes tailles, via plus de 4 000 points de vente. Banque coopérative et mutualiste, Crédit Mutuel Alliance Fédérale regroupe les Caisses de Crédit Mutuel des Fédérations Centre Est Europe (Strasbourg), Sud-Est (Lyon), Ile-de-France (Paris), Savoie-Mont Blanc (Annecy), Midi-Atlantique (Toulouse), Loire-Atlantique et Centre Ouest (Nantes), Centre (Orléans), Normandie (Caen), Dauphiné-Vivarais (Valence), Méditerranéen (Marseille), Anjou (Angers), Massif Central (Clermont-Ferrand), Antilles-Guyane (Fort-de-France) et Nord Europe (Lille). Crédit Mutuel Alliance Fédérale regroupe également la Caisse Fédérale de Crédit Mutuel, la Banque Fédérative du Crédit Mutuel (BFCM) et l’ensemble de ses filiales, notamment le CIC, Euro-Information, les Assurances du Crédit Mutuel (ACM), TARGOBANK, Cofidis Group, Beobank, la Banque Européenne du Crédit Mutuel (BECM), Banque de Luxembourg, Banque Transatlantique et Homiris. Au Crédit Mutuel Alliance Fédérale, nous valorisons la créativité et l’envie d’entreprendre de nos collaborateurs, au travers de métiers riches et diversifiés permettant à tous les profils de s’épanouir et d’évoluer. Vous souhaitez nous rejoindre ? Retrouvez notre site carrière : https://recrutement.creditmutuel.fr/fr/index.html Découvrez nos autres réseaux sociaux : ➡️ X : https://x.com/CreditMutuelAF ➡️ Instagram : https://www.instagram.com/creditmutuelaf.recrute ➡️ YouTube : https://www.youtube.com/@creditmutuelalliancefederale

Halkbank

cb halkbank.com.tr

23 Mayıs 1938 tarihinde faaliyete geçen Halkbank, kuruluşundan bu yana reel sektöre kesintisiz finansal destek misyonuyla çalışarak, bireysel ve kurumsal müşterilerine bankacılık ürün ve hizmetlerini üstün bir kalitede sunmaktadır. Halkbank, halktan ve çalışanlarından aldığı güç, nitelikli insan kaynağı ve sahip olduğu yenilikçi teknolojiler ile başta esnaf, sanatkar ve KOBİ’ler olmak üzere tüm müşterilerine hızlı, güvenli, kaliteli ürün ve hizmetler sunmak, müşteri odaklı dijital çözümlerle müşteri memnuniyetini artırmak; sosyal sorumluluk bilinciyle ülkemizin gelişmesine ve kalkınmasına destek olarak tüm paydaşlar için yüksek katma değer oluşturmaktadır. Halkbank, esnafın KOBİ'ye, KOBİ'nin büyük sermaye erbabına dönüşümüne destek olmaktadır. KOBİ Bankacılığı alanında geliştirdiği yenilikçi ürün ve hizmetlerle ülkemizde lider bankalar arasında yer alan Halkbank, işletmelerin finansal ve finansman dışı ihtiyaçlarına yönelik özel çözümler üretmektedir. 2019 yılsonu itibarıyla yurt dışında 6 şubesi, 1 ülke müdürlüğü, 3 yurt dışı temsilciliği, 4.051 ATM’si, telefon ve internet bankacılığı, mobil bankacılık uygulamalarıyla, müşterilerine eşsiz bir bankacılık deneyimi sunan Halkbank, yenilikçi ürün ve hizmetleriyle, küresel bir vizyonla hizmet vermektedir.

Crédit Agricole CIB

ca-cib.com

Crédit Agricole CIB is the corporate and investment banking arm of Crédit Agricole Group, 9th largest banking group worldwide in terms of balance sheet size in 2023 (The Banker, July 2024). Nearly 8,600 employees across Europe, the Americas, Asia-Pacific, the Middle East and North Africa support Crédit Agricole CIB's clients, meeting their financial needs throughout the world. Crédit Agricole CIB offers its large corporate and institutional clients a range of products and services in capital markets activities, investment banking, structured finance, commercial banking and international trade. The Bank is a pioneer in the area of climate finance, and is currently a market leader in this segment with a complete offer for all its clients.

La Banque Postale

labanquepostale.com

La Banque Postale is a ‘bank like no other’ driven by the post office values of local presence and service. As heir to La Poste Financial Services, it is the only bank to have been tasked with a mission to provide access to banking services under the law introduced to modernise the French economy in 2008. Accessible, straightforward, local, transparent, useful, substantial and supportive… La Banque Postale is the bank for everyone : nearly half of the French population has at least one of the Bank’s products. It serves more 10 million active personal customers and 475,000 business customers. More and more customers join La Banque Postale every day, attracted by its commitment to build a long-term relationship with each individual on the basis of sound advice and trust. This trust is earned and strengthened on a day-to-day basis by the Bank’s teams working in post offices, financial centres, subsidiary companies and central services departments. Because it is a ‘bank like no other’, La Banque Postale puts the interest of its customers above all other considerations at the heart of its organisational structure. Being a ‘bank like no other’ means being useful by offering a range of no-frills products and services tailored to meet the essential needs of all customers at affordable prices. It also means supporting everyone in achieving their life goals, offering everyday financial management products and delivering a more comfortable life with real peace of mind.

Loading…

NEWS

Commerzbank AG CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 24, 2025 07:00 AM

Kuwait Credit Bank boosts threat detection and response with Microsoft Defender XDR

Kuwait Credit Bank wanted to replace its on-premises cybersecurity system with a scalable option for faster detection and access to critical logs.

Read Article

May 24, 2024 07:00 AM

ABN Amro Is Latest Bank to Suffer Breach After Hack at Supplier

ABN Amro Bank NV became the latest European lender to suffer a data breach through one of its suppliers as criminals seek to exploit weaker...

Read Article

August 07, 2023 07:00 AM

A perfect storm: Europe’s banks in the crosshairs of cyber attacks

The war in Ukraine, rapid digitalisation of banking services and shifts in underlying IT systems are making European banks a top target for...

Read Article

July 19, 2023 07:00 AM

MOVEit Data Breach Leaks Deutsche Bank, ING, Postbank, and Comdirect’s Customer Data

German banks Deutsche Bank AG, ING, Postbank, and Commerzbank's subsidiary Comdirect, have leaked customer data via third-party service...

Read Article

July 11, 2023 07:00 AM

Deutsche Bank, Commerzbank, ING Data Breached in MOVEit Hack

Deutsche Bank AG, Commerzbank AG and ING Groep NV are among dozens of companies worldwide whose client data were compromised when a criminal hacking group...

Read Article

September 30, 2021 07:00 AM

New Hydra Trojan Targets European Banking Users

Threat Actors have registered multiple fake websites spreading malicious apps posing as the German CommerzBank.

Read Article

March 18, 2020 07:00 AM

Building a Human Firewall Against Cybercrime

By Prof. Dr. Igor Podebrad, Group Chief Information Security Officer, Commerzbank. While technology is opening up new worlds of possibility,...

Read Article

April 10, 2017 07:00 AM

North Korean Hackers Target Ethiopian banks

April 10, 2017 - Kaspersky Lab, a Russian multinational cyber security and anti-virus provider, listed Ethiopian banks among those that are.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-84483

SUMMARY

WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows unauthenticated attackers to compute valid HMAC tokens using the public site URL and current time. Attackers can forge authentication tokens by computing hash_hmac with the site's base URL as the key and submit arbitrary passwords to receive encrypted hashes, enabling offline precomputation attacks against stolen password databases.

Published

Date2026-09-01

Updated

Date2026-09-01

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-84482

SUMMARY

WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the get_domain() and isSameDomain() functions that fail to properly validate referer origins. Attackers can forge requests from sibling subdomains or unparseable long-gTLD origins to perform administrative ObjectYPT writes including live server configuration changes.

Published

Date2026-09-01

Updated

Date2026-09-01

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-84481

SUMMARY

WWBN AVideo through 30.0 contains an information disclosure vulnerability in the MobileManager plugin getConfiguration endpoint that returns sensitive configuration data to unauthenticated visitors. Attackers can send an unauthenticated GET request to plugin/MobileManager/getConfiguration.json.php to obtain TLS private key file paths, socket configuration details, platform version, and debug flags enabling further targeted attacks.

Published

Date2026-09-01

Updated

Date2026-09-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-84480

SUMMARY

WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to use expired tokens to reset account passwords indefinitely. Attackers who obtain a recovery token can use it at any time to change the target account's password and gain full account access.

Published

Date2026-09-01

Updated

Date2026-09-01

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-84479

SUMMARY

WWBN AVideo (current e01e41ecc and earlier) makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder()/isAVideoMobileApp() checks match HTTP_USER_AGENT against a hardcoded literal ("AVideoEncoder"/"AVideoMobileApp") with no IP check or shared secret. An attacker who submits valid credentials and sets User-Agent: AVideoEncoder bypasses two-factor authentication, skips brute-force captcha escalation, and avoids being recorded in the login/device audit history. No patch is available at the time of publication.

Published

Date2026-09-01

Updated

Date2026-09-01

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.2

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…