What is the official website of Compliance and Conduct Risk ?

The official website of Compliance and Conduct Risk is http://www.reply.eu/en/topics/risk-regulation-and-reporting/.

What is Compliance and Conduct Risk's cybersecurity risk score?

Compliance and Conduct Risk has an AI-generated cybersecurity risk score of 771 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Compliance and Conduct Risk experienced?

According to Rankiteo, Compliance and Conduct Risk currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Compliance and Conduct Risk been affected by any supply chain cyber incidents ?

According to Rankiteo, Compliance and Conduct Risk has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Compliance and Conduct Risk have SOC 2 Type 1 certification ?

According to Rankiteo, Compliance and Conduct Risk is not certified under SOC 2 Type 1.

Does Compliance and Conduct Risk have SOC 2 Type 2 certification ?

According to Rankiteo, Compliance and Conduct Risk does not hold a SOC 2 Type 2 certification.

Does Compliance and Conduct Risk comply with GDPR ?

According to Rankiteo, Compliance and Conduct Risk is not listed as GDPR compliant.

Does Compliance and Conduct Risk have PCI DSS certification ?

According to Rankiteo, Compliance and Conduct Risk does not currently maintain PCI DSS compliance.

Does Compliance and Conduct Risk comply with HIPAA ?

According to Rankiteo, Compliance and Conduct Risk is not compliant with HIPAA regulations.

Does Compliance and Conduct Risk have ISO 27001 certification ?

According to Rankiteo,Compliance and Conduct Risk is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Compliance and Conduct Risk operate in ?

Compliance and Conduct Risk operates primarily in the Financial Services industry.

How many employees does Compliance and Conduct Risk have ?

Compliance and Conduct Risk employs approximately None employees people worldwide.

Does Compliance and Conduct Risk own any subsidiaries ?

Compliance and Conduct Risk presently has no subsidiaries across any sectors.

How many LinkedIn followers does Compliance and Conduct Risk have ?

Compliance and Conduct Risk's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Compliance and Conduct Risk ?

Compliance and Conduct Risk is classified under the NAICS code 52, which corresponds to Finance and Insurance.

Does Compliance and Conduct Risk have a Crunchbase profile ?

No, Compliance and Conduct Risk does not have a profile on Crunchbase.

Does Compliance and Conduct Risk have a LinkedIn profile ?

Yes, Compliance and Conduct Risk maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/compliance-and-conduct-risk.

How many cybersecurity incidents has Compliance and Conduct Risk experienced ?

As of October 19, 2026, Rankiteo reports that Compliance and Conduct Risk has not experienced any cybersecurity incidents.

How many peer or competitor companies does Compliance and Conduct Risk have ?

Compliance and Conduct Risk has an estimated 32,970 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CCR

Boost Score +25 with badge (5 left)

771

/1000

Fair

796

/1000

Fair

Compliance and Conduct Risk Vendor Cyber Rating & Cyber Score

reply.eu

Add Your Compliance Badge

In Risk & Regulation, our dedicated Compliance & Conduct Risk Practice has continuous working relationships with policy makers and regulators. Providing you with a tailored service.

CCR

Compliance and Conduct Risk CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CCR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CCR

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for Compliance and Conduct Risk in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Compliance and Conduct Risk in 2026.

Incident Types CCR vs Financial Services Industry Avg (This Year)

No incidents recorded for Compliance and Conduct Risk in 2026.

Incident History - CCR (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Compliance and Conduct Risk Subsidiaries

CCR

Financial Services

Website: http://www.reply.eu/en/topics/risk-regulation-and-reporting/

Company Size: None employees

121

ReplyIT Services and IT Consulting

Open Reply ITIT Services and IT Consulting

Blue Reply ITIT Services and IT Consulting

Airwalk ReplyIT Services and IT Consulting

Concept Reply GmbHInformation Technology & Services

Spike ReplyIT Services and IT Consulting

Machine Learning ReplyIT Services and IT Consulting

Communication Valley ReplyComputer and Network Security

Concept Quality ReplyIT Services and IT Consulting

Spur ReplyBusiness Consulting and Services

Glue ReplyIT Services and IT Consulting

Wemanity Learning CenterDéveloppement professionnel et coaching

Like ReplyAdvertising Services

e*finance consulting ReplyFinancial Services

Data Reply UKIT Services and IT Consulting

Target Reply RomeIT Services and IT Consulting

ARLANIS REPLYIT Services and IT Consulting

Sense ReplyIT Services and IT Consulting

Sprint Reply ITInformation Technology & Services

Concept Reply USInformation Technology & Services

Solidsoft ReplyIT Services and IT Consulting

Business Elements ReplyIT Services and IT Consulting

Logistics Reply UKSoftware Development

Roboverse Reply DEIT Services and IT Consulting

AIM ReplyIT Services and IT Consulting

Liquid ReplyIT Services and IT Consulting

Life At ReplyIT Services and IT Consulting

BitmamaAdvertising Services

Valorem ReplyIT Services and IT Consulting

Nexi DigitalFinancial Services

Wemanity MarocIT Services and IT Consulting

Xister ReplyAdvertising Services

Storm ReplyIT Services and IT Consulting

Machine Learning Reply GmbHIT Services and IT Consulting

Technology ReplySoftware Development

Lynx RecruitmentStaffing and Recruiting

Syskoplan Reply USIT Services and IT Consulting

Wemanity BelgiumInformation Technology & Services

WM ReplyIT Services and IT Consulting

Concept Engineering ReplyIT Services and IT Consulting

Threepipe ReplyAdvertising Services

Cloud9 ReplyIT Services and IT Consulting

ATLAS REPLYIT Services and IT Consulting

Mansion House ConsultingBusiness Consulting and Services

Net ReplyIT Services and IT Consulting

Pay ReplyInformation Technology & Services

Connect ReplyIT Services and IT Consulting

TD ReplyBusiness Consulting and Services

Sytel ReplyIT Services and IT Consulting

Data Reply FRInformation Technology & Services

Laife ReplyInformation Technology & Services

Comsysto Reply GmbHIT Services and IT Consulting

Whitehall ReplyIT Services and IT Consulting

Syskoplan Reply DACHInformation Technology & Services

Business ReplySoftware Development

ARLANIS REPLY ITIT Services and IT Consulting

Canvas ReplyIT Services and IT Consulting

Spike Reply DEIT Services and IT Consulting

Wakanda Technologies - We bring African IT Power to EuropeIT-Dienstleistungen und IT-Beratung

Light ReplyIT Services and IT Consulting

Graymatter ReplyAdvertising Services

Graymatter REPLY DigitalAdvertising Services

Aktive ReplyInformation Technology & Services

Triplesense ReplyTechnology, Information and Internet

Technology Reply RomaniaIT Services and IT Consulting

Blue Reply DEIT Services and IT Consulting

Everlo Reply GmbHIT Services and IT Consulting

Shield ReplyIT Services and IT Consulting

4brands ReplyInformation Technology & Services

Autonomous Reply FRIT Services and IT Consulting

Accelerator 365 by ReplySoftware Development

Cortex Reply UKTechnology, Information and Internet

Go ReplyIT Services and IT Consulting

Cluster Reply DEIT Services and IT Consulting

HERMES REPLYInformation Technology & Services

Sprint Reply DEIT Services and IT Consulting

Sprint Reply BEIT Services and IT Consulting

KI ReplyInformation Technology & Services

Reply ChallengesFornitori di e-learning

Data Reply ITIT Services and IT Consulting

Blockchain ReplyIT Services and IT Consulting

Wemanity NetherlandsProfessional Training and Coaching

Target ReplyData Infrastructure and Analytics

Data Reply DEInformation Technology & Services

Leadvise ReplyBusiness Consulting and Services

Digital Transformation der Regulatory AffairsUnternehmensberatung

Starbytes.itInformation Technology & Services

Open Reply UKInformation Technology & Services

Comwrap Reply DACHTechnology, Information and Internet

Logistics Reply USSoftware Development

Live Reply DEIT Services and IT Consulting

Open ReplyInformation Technology & Services

Infinity Reply ITIT Services and IT Consulting

Up ReplyIT Services and IT Consulting

Storm Reply DEIT Services and IT Consulting

Brick Reply | IT Solutions and Services for ManufacturingSoftware Development

Sytel Reply NorthInformation Technology & Services

Net Reply UKIT Services and IT Consulting

Red Reply DEIT Services and IT Consulting

Neo ReplyIT Services and IT Consulting

Live Reply ItalyIT Services and IT Consulting

Sprint Reply UKIT Services and IT Consulting

Arlanis Reply UKIT Services and IT Consulting

Air ReplyIT Services and IT Consulting

Infinity Reply DEIT Services and IT Consulting

Macros Reply GmbHIT Services and IT Consulting

Spike Reply UKTechnology, Information and Internet

Storm Reply, Inc.Professional Services

Eos ReplyIT Services and IT Consulting

Open Reply Benelux - FranceBusiness Consulting and Services

Alpha ReplyIT Services and IT Consulting

Affinity ReplyIT Services and IT Consulting

Ki Reply UKIT Services and IT Consulting

Zest ReplyIT Services and IT Consulting

Cluster Reply PLIT Services and IT Consulting

Nimbus ReplyIT Services and IT Consulting

Fincon Reply GmbHInformation Services

Industrie Reply USMotor Vehicle Manufacturing

Atomic ReplyBusiness Consulting and Services

Avantage ReplyFinancial Services

IFRS 9Financial Services

Loading…

Compliance and Conduct Risk Similar Companies

L&T Finance

ltfs.com

L&T Finance is one of the leading NBFCs offering a range of loans across Rural | Housing | Two-Wheeler | Personal & Business (SME) The company is promoted by Larsen and Toubro Ltd. (L&T), one of the largest conglomerates in India. LTF is publicly listed on both the exchanges of India - BSE & NSE and complies to the guidelines applicable to an NBFC- CIC. Headquartered in Mumbai, the company has been rated AAA, the highest credit rating for NBFCs by four leading rating agencies.

Manappuram Finance Limited

cb manappuram.com

Manappuram Finance Ltd. is one of India’s largest and most trusted gold loan companies, with 4,199 branches across the length and breadth of the country. It currently has nearly Rs. 157.65 billion worth assets under management (AUM), and 20,185 employees. Promoted by Shri. V.P. Nandakumar, the current MD & CEO, the company was founded in the modest coastal village of Valapad (Thrissur District) by his late father Mr. V.C. Padmanabhan in 1949. The first non-banking financial company (NBFC) in Kerala to receive a Certificate of Registration issued by the RBI, it was also among the earliest to go for an IPO in 1995. In 2007 Sequoia Capital invested Rs.700 million along with Hudson Equity Holdings, heralding a period of accelerated growth, and in 2010 it became the first NBFC in Kerala to obtain the highest short term credit rating of A1+ from ICRA. In 2010, it became the first Kerala-based NBFC to offer ESOPs (Employee Stock Option Plan) to its middle and senior management functionaries. As a pioneer and trailblazer, Manappuram Finance Ltd. has always been an innovator par excellence in the gold loan product and the adoption of technology. Besides focus on the business, the cause of the wider community is central to the vision of the company. The Manappuram Foundation was established in October 2009 to drive the company’s initiatives in Corporate Social Responsibility (CSR). In recent years, the company has diversified into new business areas like micro-finance, vehicle and housing finance, and SME lending through the subsidiaries Manappuram Home Finance Ltd, Manappuram Insurance Brokers Ltd, and Asirvad Microfinance Limited. Our mission is to make life easy for common people of India with instant and easy loans, with a vision of unlocking the value of their savings in gold jewellery.

Aegon

cb aegon.com

People are living longer, and we are excited about the possibilities this brings. We see longevity, aging, and changing life patterns as an opportunity for our customers, our employees, and society as a whole. And we want to support everyone in building the financial means to explore the possibilities and challenges of a long and varied life. As an international financial services group, we unite a diverse range of businesses that, together, help millions of people around the world live their best lives by offering a broad mix of investment, protection, and retirement solutions. We create long-term value for our shareholders and other stakeholders through fully owned businesses, partnerships, and strategic shareholdings. Our portfolio includes fully owned subsidiaries in the US and UK, and a global asset management business; as well as partnerships in Brazil, China, France, Spain and Portugal. In the Netherlands, we generate value through our strategic shareholding in a market-leading insurance and pensions company.

Postal Savings Bank of China Co., Ltd.

psbc.com

Postal Savings Bank of China Co., Ltd. also known as PSBC is a commercial retail bank founded in 2007 and headquartered in Beijing. It provides basic financial services, especially to small and medium enterprises, rural[1] and low income customers. As of December 31, 2017, PSBC has 39,798[2] branches covering all regions of China. PSBC was set up with an initial capital of RMB20 billion in 2007 from the State Post Bureau. Today it has RMB1.5 trillion in deposits and the second largest number of branches, after the Agricultural Bank of China. During the Global Financial Crisis, the government took several measures to spread its national economic stimulus plan specifically to rural areas. This included using microfinance services provided by the Postal Savings Bank as a tool for national development and poverty reduction. The bank with its extremely broad reach also assists China’s credit cooperatives in their microcredit schemes. On December 8, 2015, China Postal Savings Bank, through issuing pro-float stock, received an injection of investment from the Temasek Holdings of Singapore, UBS, the Canada Pension Plan Investment Board, the International Finance Corporation, Morgan Stanley, DBS Bank, Tencent, Ant Financial Services Group, China Life and China Telecom, with a total investment of 45.1 billion yuan. These "strategic investors" together held a 16.92% stake in the company at the time of purchase. The stock was listed through an initial public offering on the Stock Exchange of Hong Kong on September 30, 2016. Prior to its listing, it was the largest unlisted Chinese bank.[3] Xuewen Zhang and Hong Lao serve as Vice Presidents of the bank and co-executive directors.

Morningstar

morningstar.com

Morningstar, Inc. is a leading provider of independent investment insights in North America, Europe, Australia, and Asia. The Company offers an extensive line of products and services for individual investors, financial advisors, asset managers and owners, retirement plan providers and sponsors, institutional investors in the debt and private capital markets, and alliances and redistributors. Morningstar provides data and research insights on a wide range of investment offerings, including managed investment products, publicly listed companies, private capital markets, debt securities, and real-time global market data. Morningstar also offers investment management services through its investment advisory subsidiaries, with approximately $369 billion in AUMA as of Sept. 30, 2025. The Company operates through wholly-owned subsidiaries in 32 countries.

Broadridge

broadridge.com

Broadridge Financial Solutions (NYSE: BR) is a global technology leader with the trusted expertise and transformative technology to help clients and the financial services industry operate, innovate, and grow. We power investing, governance, and communications for our clients – driving operational resiliency, elevating business performance, and transforming investor experiences. Our technology and operations platforms process and generate over 7 billion communications per year and underpin the daily trading of more than $10 trillion of securities globally. A certified Great Place to Work®, Broadridge is part of the S&P 500® Index, employing over 14,000 associates in 21 countries. For more information, please visit www.broadridge.com.

Morgan Stanley

morganstanley.com

Morgan Stanley is a leading global financial services firm providing investment banking, securities, wealth management and investment management services. With a 90-year history, Morgan Stanley today operates in 42 countries serving corporations, governments, institutions, families and individuals. Morgan Stanley is a talent business that demands ongoing investment in our people. Key drivers of our success have been the breadth and tenure of our talent, as well as a unique culture and a set of values that guide our employees. We view Morgan Stanley’s talent and culture as a key competitive advantage enabling the Firm to achieve its potential and drive future success. As an integrated firm with scaled capabilities, we partner with clients at every stage of their financial journey. Our ability to do so is grounded in four pillars that define Morgan Stanley: a clear and consistent strategy to help clients raise, manage and allocate capital; a culture grounded in rigor, humility and partnership; financial strength through capital, earnings power and durability; and growth driven by smart, strategic investment globally. These pillars enable Morgan Stanley to provide trusted advice, operate with resilience across market cycles and deliver long-term value to our clients and shareholders. Social Media Disclosures: mgstn.ly/SocialDisclosure

Prudential plc

prudentialplc.com

We are Prudential. For Every Life, For Every Future. Prudential provides life and health insurance and asset management in Greater China, ASEAN, India and Africa. Prudential’s mission is to be the most trusted partner and protector for this generation and generations to come, by providing simple and accessible financial and health solutions. We are headquartered in Hong Kong and have dual primary listings on the Stock Exchange of Hong Kong and the London Stock Exchange. Visit our websites for more information: Prudential plc: https://www.prudentialplc.com/ Prudence Foundation: https://www.prudentialplc.com/en/prudence-foundation

Cholamandalam Investment and Finance Company Limited

cholamandalam.com

Cholamandalam Investment and Finance Company Limited (Chola), founded in 1978 as part of the Murugappa Group, initially focused on equipment financing. Over the years, Chola has transformed into a leading comprehensive financial services provider, offering a wide array of solutions including vehicle finance, home loans, SME loans, home equity loans, loan against property, consumer durable loans, and more. With a nationwide presence of 1,500+ branches and Assets Under Management (AUM) surpassing Rs. 1.77 lakh crore, Chola serves over 42.9 lakh happy customers. The company’s subsidiaries include Cholamandalam Securities Limited (CSEC), Cholamandalam Home Finance Limited (CHFL), and Payswiff Technologies Private Limited (Payswiff), enhancing its diverse portfolio. At Chola, our commitment is to foster growth and empowerment for customers, employees, shareholders, and communities alike. We are driven by a strong foundation of integrity, ethical values, and a deep sense of responsibility towards all our stakeholders. As we continue to grow and innovate, we aim to create sustainable value and contribute positively to the lives of those we serve, enabling them to enter a better life .

Loading…

NEWS

Compliance and Conduct Risk CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 02, 2025 05:00 AM

Cybersecurity jobs available right now: December 2, 2025

Oddity | Israel | On-site – View job details. As an Application Security Manager, you will conduct threat modeling based on a deep...

Read Article

November 20, 2025 08:00 AM

HIPAA Training Requirements - Updated for 2025

The HIPAA training requirements are that “a covered entity must train all members of its workforce on policies and procedures […]

Read Article

November 18, 2025 08:00 AM

Cybersecurity jobs available right now: November 18, 2025

Vim | Israel | Hybrid – View job details. As an Application Security Engineer, you will conduct internal penetration testing against Vim's...

Read Article

November 11, 2025 08:00 AM

Cybersecurity jobs available right now: November 11, 2025

Bridewell | United Kingdom | Hybrid – No longer accepting applications. As an Academy Cyber Threat Intelligence Analyst, you will manage...

Read Article

October 28, 2025 07:00 AM

Cybersecurity jobs available right now: October 28, 2025

Here are the worldwide cybersecurity job openings available as of October 28, 2025, including on-site, hybrid, and remote roles.

Read Article

October 22, 2025 07:00 AM

Navigating New Obligations Under the CCPA’s Updated Regulations

New privacy regulations provide insights into California's approach to ADMT, cybersecurity audits, and risk assessments, while amendments...

Read Article

October 21, 2025 07:00 AM

Cybersecurity jobs available right now: October 21, 2025

Here are the worldwide cybersecurity job openings available as of October 21, 2025, including on-site, hybrid, and remote roles.

Read Article

October 15, 2025 07:00 AM

CyViation And Boeing Strengthen Airline Cyber Security And Compliance

CyViation partners with Boeing to enhance aircraft cyber security, supporting airlines in improving safety, compliance, and resilience in...

Read Article

October 09, 2025 07:00 AM

California Finalizes Pivotal CCPA Regulations on AI, Cyber Audits, and Risk Governance

Following several years of intensive rulemaking, the California Privacy Protection Agency (CPPA) has finalized new regulations under the...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-112112

SUMMARY

An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validation enabled on the receiving flow6 channel, BIRD fails to reject a destination prefix component with a nonzero offset, contrary to RFC 8956 section 5. It validates a reconstructed prefix with zero-filled skipped bits, although the original FlowSpec component can match a broader set of IPv6 addresses. Given a suitable unicast route from the peer, the rule can pass validation and, where export policy permits, be propagated to downstream peers. Downstream enforcement may cause unauthorized traffic filtering or redirection.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: )

cvss4

Base Score: 2.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-112111

SUMMARY

The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent() shortcode handler in inc/bs_tabs.php emits the id attribute value into an unquoted HTML attribute. esc_attr() is applied, but it does not encode space characters, so a space in the supplied value terminates the attribute and any following text is parsed as additional HTML attributes, including JavaScript event handlers. This allows authenticated attackers with Contributor-level access and above to inject arbitrary web script that executes in the browser of any user who views the page and interacts with the injected element.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-112029

SUMMARY

A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of the argument salt/password leads to password hash with insufficient computational effort. The attack needs to be performed locally. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: 2.5)

cvss2

Base Score: 1.0

Complexity: HIGH

AV:L/AC:H/Au:S/C:P/I:N/A:N

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 1.1

Complexity: HIGH

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-112028

SUMMARY

A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is some unknown functionality of the file App/Home/Controller/VoteController.class.php of the component Vote Handler. This manipulation of the argument X-Requested-With causes business logic errors. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: 6.5)

cvss2

Base Score: 6.4

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:P

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-112027

SUMMARY

A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function file_exists of the file Public/Home/js/uploadify/check-exists.php of the component Uploadify. The manipulation of the argument filename results in file and directory information exposure. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-10-18

Updated

Date2026-10-18

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:N/A:N

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Compliance and Conduct Risk Vendor Cyber Rating & Cyber Score

CCR A.I CyberSecurity Scoring

Compliance and Conduct Risk CyberSecurity News & History

CCR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for CCR

Incidents vs Financial Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types CCR vs Financial Services Industry Avg (This Year)

Incident History - CCR (X = Date, Y = Severity)

Compliance and Conduct Risk Subsidiaries

CCR

Compliance and Conduct Risk Similar Companies

L&T Finance

Manappuram Finance Limited

Aegon

Postal Savings Bank of China Co., Ltd.

Morningstar

Broadridge

Morgan Stanley

Prudential plc

Cholamandalam Investment and Finance Company Limited

Compliance and Conduct Risk CyberSecurity News

Cybersecurity jobs available right now: December 2, 2025

HIPAA Training Requirements - Updated for 2025

Cybersecurity jobs available right now: November 18, 2025

Cybersecurity jobs available right now: November 11, 2025

Cybersecurity jobs available right now: October 28, 2025

Navigating New Obligations Under the CCPA’s Updated Regulations

Cybersecurity jobs available right now: October 21, 2025

CyViation And Boeing Strengthen Airline Cyber Security And Compliance

California Finalizes Pivotal CCPA Regulations on AI, Cyber Audits, and Risk Governance

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Compliance and Conduct Risk CyberSecurity News & History

CCR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for CCR

Incidents vs Financial Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types CCR vs Financial Services Industry Avg (This Year)

Incident History - CCR (X = Date, Y = Severity)

Compliance and Conduct Risk Subsidiaries

CCR

Compliance and Conduct Risk Similar Companies

L&T Finance

Manappuram Finance Limited

Aegon

Postal Savings Bank of China Co., Ltd.

Morningstar

Broadridge

Morgan Stanley

Prudential plc

Cholamandalam Investment and Finance Company Limited

Compliance and Conduct Risk CyberSecurity News

Cybersecurity jobs available right now: December 2, 2025

HIPAA Training Requirements - Updated for 2025

Cybersecurity jobs available right now: November 18, 2025

Cybersecurity jobs available right now: November 11, 2025

Cybersecurity jobs available right now: October 28, 2025

Navigating New Obligations Under the CCPA’s Updated Regulations

Cybersecurity jobs available right now: October 21, 2025

CyViation And Boeing Strengthen Airline Cyber Security And Compliance

California Finalizes Pivotal CCPA Regulations on AI, Cyber Audits, and Risk Governance

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo