What is the official website of Deutsche Telekom Cloud Services ?

The official website of Deutsche Telekom Cloud Services is https://www.telekom.com/.

What is Deutsche Telekom Cloud Services's cybersecurity risk score?

Deutsche Telekom Cloud Services has an AI-generated cybersecurity risk score of 755 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Deutsche Telekom Cloud Services experienced?

According to Rankiteo, Deutsche Telekom Cloud Services currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Deutsche Telekom Cloud Services been affected by any supply chain cyber incidents ?

According to Rankiteo, Deutsche Telekom Cloud Services has been affected by a supply chain cyber incident involving Lovable, with the incident ID LOV1776717678.

Does Deutsche Telekom Cloud Services have SOC 2 Type 1 certification ?

According to Rankiteo, Deutsche Telekom Cloud Services is not certified under SOC 2 Type 1.

Does Deutsche Telekom Cloud Services have SOC 2 Type 2 certification ?

According to Rankiteo, Deutsche Telekom Cloud Services does not hold a SOC 2 Type 2 certification.

Does Deutsche Telekom Cloud Services comply with GDPR ?

According to Rankiteo, Deutsche Telekom Cloud Services is not listed as GDPR compliant.

Does Deutsche Telekom Cloud Services have PCI DSS certification ?

According to Rankiteo, Deutsche Telekom Cloud Services does not currently maintain PCI DSS compliance.

Does Deutsche Telekom Cloud Services comply with HIPAA ?

According to Rankiteo, Deutsche Telekom Cloud Services is not compliant with HIPAA regulations.

Does Deutsche Telekom Cloud Services have ISO 27001 certification ?

According to Rankiteo,Deutsche Telekom Cloud Services is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Deutsche Telekom Cloud Services operate in ?

Deutsche Telekom Cloud Services operates primarily in the Telecommunications industry.

How many employees does Deutsche Telekom Cloud Services have ?

Deutsche Telekom Cloud Services employs approximately 322 people worldwide.

Does Deutsche Telekom Cloud Services own any subsidiaries ?

Deutsche Telekom Cloud Services presently has no subsidiaries across any sectors.

How many LinkedIn followers does Deutsche Telekom Cloud Services have ?

Deutsche Telekom Cloud Services's official LinkedIn profile has approximately 13,618 followers.

What is the NAICS classification code for Deutsche Telekom Cloud Services ?

Deutsche Telekom Cloud Services is classified under the NAICS code 517, which corresponds to Telecommunications.

Does Deutsche Telekom Cloud Services have a Crunchbase profile ?

No, Deutsche Telekom Cloud Services does not have a profile on Crunchbase.

Does Deutsche Telekom Cloud Services have a LinkedIn profile ?

Yes, Deutsche Telekom Cloud Services maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/dt-cloud-services.

How many cybersecurity incidents has Deutsche Telekom Cloud Services experienced ?

As of September 14, 2026, Rankiteo reports that Deutsche Telekom Cloud Services has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Deutsche Telekom Cloud Services have ?

Deutsche Telekom Cloud Services has an estimated 10,337 peer or competitor companies worldwide.

What types of cybersecurity incidents has Deutsche Telekom Cloud Services faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DTCS

Boost Score +25 with badge (5 left)

755

/1000

Fair

780

/1000

Fair

Deutsche Telekom Cloud Services Vendor Cyber Rating & Cyber Score

telekom.com

Add Your Compliance Badge

Deutsche Telekom Cloud Services is an international company and part of the Technology Delivery International (TDI) unit of Deutsche Telekom. We deliver the latest technology services with deep expertise in cloud, SW engineering, DevOps and networks that win our customers’ hearts! In TDI we have people located in 10+ countries, such as Slovakia, Romania, Hungary, Greece, Croatia, Poland, Czechia, Spain, Germany. We work topic-driven and skill-based. That is why we are a chapter-based organization with a clear focus on the development of our people while driving the delivery of TDI’s products and services in tribes. Technology is the heartbeat that connects us across borders!

DTCS

Deutsche Telekom Cloud Services CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Deutsche Telekom

Breach

4/2026

Lovable

LOV1776717678

Loading…

A.I.

DTCS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DTCS

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for Deutsche Telekom Cloud Services in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Deutsche Telekom Cloud Services in 2026.

Incident Types DTCS vs Telecommunications Industry Avg (This Year)

No incidents recorded for Deutsche Telekom Cloud Services in 2026.

Incident History - DTCS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Deutsche Telekom Cloud Services Subsidiaries

DTCS

Telecommunications

Website: https://www.telekom.com/

Company Size: 322

Deutsche TelekomTelecommunications

T-Systems InternationalIT Services and IT Consulting

T-Systems Nederland B.V.IT Services and IT Consulting

T-Systems MéxicoIT Services and IT Consulting

T-Systems CloudIT-Dienstleistungen und IT-Beratung

T-Systems do BrasilIT Services and IT Consulting

T-Security ConnectAtividades de monitoramento de sistemas de segurança

T-Systems ICT India Pvt. Ltd.IT Services and IT Consulting

T-Systems IberiaIT Services and IT Consulting

Agile Hub T-Systems IberiaServicios y consultoría de TI

DigiCloudServicios y consultoría de TI

GIMM SolutionsIT Services and IT Consulting

J-EDI Digital SolutionsInformation Technology & Services

Deutsche Telekom Digital LabsTelecommunications

Telekom HUTelecommunications

Deutsche Telekom IoTIT Services and IT Consulting

Hrvatski TelekomTelecommunications

DeteconBusiness Consulting and Services

T-Mobile PolskaTelecommunications

T BusinessTelekommunikation

T-Mobile Czech RepublicTelekomunikace

T-Systems SingaporeIT Services and IT Consulting

Deutsche Telekom Services Europe Romania (DTSE Romania)Outsourcing and Offshoring Consulting

Makedonski Telekom ADTelecommunications

Slovak TelekomTelecommunications

Telekom MMSIT Services and IT Consulting

T-Systems MMSIT Services and IT Consulting

Telekom Business EuropeTelecommunications

Deutsche Telekom Global CarrierTelekommunikation

T-Systems Hungary Ltd.IT Services and IT Consulting

Deutsche Telekom Global BusinessTelecommunications

Telekom TechBoostTelekommunikation

T-Mobile Czech Republic a.s.Telecommunications

Telekom Strategy ConsultingTelekommunikation

T-Systems UKIT Services and IT Consulting

Cyber Security at T-SystemsIT Services and IT Consulting

T-Systems VamosaIT Services and IT Consulting

T-Mobile Biznes PolskaTelecommunications

congstarTelecommunications

Deutsche Telekom StiftungNon-profit Organizations

T-Systems SwitzerlandIT Services and IT Consulting

Deutsche Telekom Services Europe - SlovakiaOutsourcing and Offshoring Consulting

T-Systems FranceIT Services and IT Consulting

T-Mobile Polska Business Solutions IT Services and IT Consulting

Deutsche Telekom HealthcareHospitals and Health Care

LIFECARE Laboratorium InformatiesysteemZiekenhuizen en gezondheidszorg

Deutsche Telekom Global Business Solutions FranceInformation Technology & Services

Deutsche Telekom - Digital, Experience & DeliveryTelecommunications

Deutsche Telekom Services Europe - Czech RepublicOutsourcing and Offshoring Consulting

Inflight Services of Deutsche TelekomTelekommunikation

DeTeAssekuranz Vermittlungsgesellschaft mbHInsurance

Telekom Open SpacesTelekommunikation

Deutsche Telekom Design & Customer ExperienceTelecommunications

Deutsche Telekom UK LimitedTelecommunications

T-Systems RomaniaIT Services and IT Consulting

Deutsche Telekom Investor RelationsTelekommunikation

T SportTelecommunications

T-Systems NordicIT Services and IT Consulting

Deutsche Telekom EU PolicyTelecommunications

Deutsche Telekom Clinical Solutions India Pvt. Ltd.IT Services and IT Consulting

MagentaZuhauseTelekommunikation

Deutsche Telekom IT Solutions SlovakiaIT Services and IT Consulting

T-Systems AustriaInformation Technology & Services

Digitales GesundheitswesenWellness und Fitness

Loading…

Deutsche Telekom Cloud Services Similar Companies

Telcel

telcel.com

Telcel (Radiomóvil Dipsa) es subsidiaria de América Móvil, uno de los mayores proveedores de comunicaciones celulares de Latinoamérica, grupo líder con inversiones en telecomunicaciones en varios países del continente americano. Telcel es la empresa de telefonía celular líder en México. Nuestra solidez y estructura nos consolidan gracias a la especialización y actualización permanente de todas las personas que trabajamos en ella. Todos nosotros estamos comprometidos a satisfacer de manera eficaz y constante todas las necesidades de comunicación inalámbrica de nuestros clientes.

Jio

cb jio.com

Make a new start. A start that will build beautiful relationships, shape millions of ideas. Enable a new way to live, learn, work and play. At Jio, we build products and services of the future to empower billions of Indians make their dreams a reality. Jio is about YOU. Join the movement to make India Digital. Chat on MyJio App: http://tiny.jio.com/chat1 Chat on WhatsApp: http://tiny.jio.com/LiveChat

Free

etre-free.fr

Trublion historique des Télécoms, Free reste un opérateur pas comme les autres. Nous continuons de nous distinguer de nos concurrents par nos produits, par notre politique tarifaire ou encore par le ton employé avec nos abonnés. Cette différence a aussi construit la grande entreprise que nous sommes devenus, qui réunit aujourd’hui plus de 11 500 collaborateurs. Elle a fait de nous un employeur… pas comme les autres.

Orange

orange.com

Orange is one of the world’s leading telecommunications operators with revenues of 40.3 billion euros in 2024 and 127,000 employees worldwide at 31 December 2024, including 71,000 employees in France. The Group has a total customer base of 291 million customers worldwide at 31 December 2024, including 253 million mobile customers and 22 million fixed broadband customers. The Group is present in 26 countries. Orange is also a leading provider of global IT and telecommunication services to multinational companies under the brand Orange Business. In February 2023, the Group presented its strategic plan « Lead the future », built on a new business model and guided by responsibility and efficiency. « Lead the future » capitalizes on network excellence to reinforce Orange's leadership in service quality.

e& Egypt

eand.com.eg

Building on 17 years of technology excellence in the Egyptian market, and in our relentless quest to bring you more and better services, etisalat by e& in Egypt has now evolved into the digital telco of the future. Covering and serving 99% of the inhabited areas in Egypt, our mission as etisalat by e& in Egypt is to continuously grow and transform to empower our customers by enhancing their digital experience and ensuring operation agility. etisalat by e& in Egypt offers digital experiences that cater to your ever-changing lifestyle and ever-expanding demands – covering not only telecom, but a wide collection of services that suit your various needs. We will continue to be your trusted companion and consultant, enabling connectivity and everything beyond, accelerating the digital world and pioneering future-forward spaces. Together, as we embark on this new era of etisalat by e& in Egypt, we make possible countless connections across continents and create the limitless possibilities of tomorrow, today. etisalat by e& in Egypt #MakePossible بعد ١٥ سنة من تفوقنا التكنولوجي في مصر، ولإننا حابين نقدم خدمات كتيرة عالية الجودة لكل عملائنا، جه الوقت إللي نطور في “اتصالات من &e في مصر” وندخل المستقبل الرقمي من أوسع الأبواب! شبكتنا النهاردة بتغطي ۹۹% من مناطق مصر، وبنطور يوم ورا يوم عشان نوصل رسالتنا بالنمو والتحول والتفوق، كل دا عشان نوفر لعملائنا أفضل تجربة رقمية، ونسرع العملية التشغيلية. النهاردة في “اتصالات من &e في مصر” إحنا جاهزين نقدملكم خدمات رقمية جديدة تسهلكو حياتكم اليومية، ومع خدمة المكالمات التقليدية، حنوفرلكم خدمات تانية كتير! لإننا بجد شريكم الموثوق، إللي بيخليكم على تواصل، وبياخدكم للمستقبل عبر تسريع الاقتصاد الرقمي والريادة. مع “اتصالات من &e في مصر” حنبدأ مع بعض عصر جديد، ونقربكم من بعض عبر القارات، ومع بعض حنكتشف إمكانيات بكرة اللامحدودة من النهاردة. “اتصالات من &e في مصر” ... معانا #makepossible

VEON

cb veon.com

VEON is a global digital operator headquartered in Dubai, providing connectivity and digital services across dynamic frontier markets that are home to more than 6% of the world’s population. With our digital operators, we transform lives through technology-driven services that empower millions and drive economic growth. Social media guidelines: We want everybody to have a positive and welcoming experience across the social media channels we use - and so we ask that everyone keeps their comments and discussions on VEON's page, or posts tagging the company, respectful to other members and our teams. Content which is abusive or harassing, obscene, deceptive or misleading, contains false or defamatory information, is discriminatory against any individual or group, or is considered spam may be removed - including reporting and blocking users responsible from our social media channels.

Vodafone Idea Limited

cb myvi.in

Vodafone Idea Limited is an Aditya Birla Group and Vodafone Group partnership. It is India’s leading telecom service provider. The Company provides pan India Voice and Data services across 2G, 3G and 4G platform. With the large spectrum portfolio to support the growing demand for data and voice, the company is committed to deliver delightful customer experiences and contribute towards creating a truly ‘Digital India’ by enabling millions of citizens to connect and build a better tomorrow. The Company is developing infrastructure to introduce newer and smarter technologies, making both retail and enterprise customers future ready with innovative offerings, conveniently accessible through an ecosystem of digital channels as well as extensive on-ground presence. The Company is listed on National Stock Exchange (NSE) and Bombay Stock Exchange (BSE) in India.

Telenor

telenor.com

EMPOWERING SOCIETIES. CONNECTING YOU TO WHAT MATTERS MOST. Telenor Group is a leading telecommunications company across the Nordics and Asia with 158 million subscribers and annual sales of around NOK 99 billions (2022). We are committed to responsible business conduct and driven by the ambition of empowering societies. Connectivity has been Telenor’s domain for more than 165 years, and our purpose is to connect our customers to what matters most. We have four behaviours that guide the way we work: • Always Explore. We believe growth comes from learning every day. We’re curious and we dare to challenge, test, fail fast and pivot. • Create together. We believe diverse teams find better solutions. We seek different perspectives, share, involve and help each other succeed. • Keep promises. We believe that trust is key in all our relationships. We take ownership and pride in delivering with precision and integrity. • Be respectful. We believe in the unique human ability to understand what matters for people. We meet everyone at eye level, listen and show that we care. Telenor is listed at Oslo Stock Exchange under the ticker TEL. For more information, please visit www.telenor.com.

Telecom Egypt

cb te.eg

Since its establishment in 1854, Telecom Egypt has played a pivotal role in driving growth within the local ICT market capitalizing on its vast infrastructure, which is one of the largest in the region. Its vast domestic and international infrastructure has helped it serve various customer groups including consumers, enterprises, domestic and international carriers. Through its five business units Telecom Egypt boasts a consolidated top-line of EGP 22.8bn. In September 2017, Telecom Egypt introduced its new retail brand “WE” with the launch of its mobile services. In a year from launch, “WE” offered the market’s first fully integrated bundle combining all of its consumer services fixed and mobile, voice and data in one bill taking its first step towards full convergence and demonstrating its agility as a key player in the telecommunications industry. By end of 2018, Telecom Egypt fixed voice customers grew to 7.9mn of which 5.2mn enjoyed fixed broadband connectivity, while mobile customers reached 3.9mn. Telecom Egypt’s wholesale unit provides infrastructure, transmission and international voice services to local mobile operators and internet service providers. In addition, it provides international carries capacities on one of the largest submarine cable networks in the world.

Loading…

NEWS

Deutsche Telekom Cloud Services CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 05, 2026 06:15 AM

Europe Public Cloud Market Size, Share and Analysis, 2033

Europe Public Cloud Market Size, Share, Trends & Growth Forecast Report – Segmented By Service Infrastructure as a Service (IaaS),...

Read Article

December 12, 2025 08:00 AM

Orange goes live with ‘European first’ satellite SMS service

Orange has activated its Message Satellite offering in France, enabling users to send and receive text messages via satellite when...

Read Article

November 20, 2025 08:00 AM

What’s up with… Verizon, Nvidia, European sovereignty

Verizon is cutting 13000 jobsNvidia reports 62% sales hike in Q3European digital sovereignty is gathering momentum.

Read Article

November 20, 2025 01:43 AM

Orange, Deutsche Telekom Advocate for EU Connectivity, Cloud & AI Leadership

Digital sovereignty has become a top EU strategic priority. It means collectively protecting our strategic European interests while remaining open to stay...

Read Article

November 19, 2025 08:00 AM

Europe on the brink: Telecom CEOs warn of digital standstill without urgent EU action

Orange and Deutsche Telekom CEOs join forces to demand urgent action as Europe faces a make-or-break moment in cloud, AI, cybersecurity and...

Read Article

October 29, 2025 07:00 AM

Nation-state hack discovered on US firm with access to major telecoms, US DoD

Nation-state attackers have breached Ribbon Communications, a cloud services, software, and network solutions provider for major telecoms...

Read Article

October 26, 2025 07:00 AM

Deutsche Telekomwatch Analyst Briefing: Srini seeks to keep the big mo at T-Mo

Deutsche Telekomwatch Briefing: bringing together the latest on Deutsche Telekom from around TelcoTitans and beyond.

Read Article

October 02, 2025 07:00 AM

What’s up with… Vodafone & Nokia, Deutsche Telekom, Telefónica

In today's industry news roundup: Vodafone claims to have cut fibre broadband latency by 94%; DT wants to develop a 'sovereign AI platform...

Read Article

September 24, 2025 07:00 AM

Global AI In Cybersecurity Market Size Projected to Reach $93 Billion By 2030 Due To Frequent High-Profile Cyberattacks

PRNewswire/ -- Artificial Intelligence (AI) technologies, including natural language processing and machine learning, are increasingly used...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90603

SUMMARY

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90602

SUMMARY

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-90601

SUMMARY

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90600

SUMMARY

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15892

SUMMARY

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_name buffer (and, for read, a data buffer) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled, relying on the end: label to k_free() them. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning status MGMT_CB_ERROR_RC, the handler executed return ret_rc; directly, bypassing end: and leaking the heap allocation on every rejected request. The settings handlers are reachable over the unauthenticated SMP transport (Bluetooth LE, UART, or UDP, depending on product configuration). The access hook is the mechanism applications use to deny unauthorized settings access, and MGMT_CB_ERROR_RC is a common rejection style, so an attacker who can send settings read/write/delete commands that the hook rejects triggers a heap leak on each attempt. Because the leaked memory is never reclaimed until reboot, a sustained stream of rejected requests monotonically exhausts the kernel heap until k_malloc() fails, denying mcumgr service and impacting any other heap consumer on the device — a denial of service. The impact is availability-only; there is no memory corruption or information disclosure. Only configurations that select the heap buffer type, enable the access hook, and register a hook that returns MGMT_CB_ERROR_RC are affected (the default stack buffer type cannot leak).

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Deutsche Telekom Cloud Services Vendor Cyber Rating & Cyber Score

DTCS A.I CyberSecurity Scoring

Deutsche Telekom Cloud Services CyberSecurity News & History

DTCS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for DTCS

Incidents vs Telecommunications Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types DTCS vs Telecommunications Industry Avg (This Year)

Incident History - DTCS (X = Date, Y = Severity)

Deutsche Telekom Cloud Services Subsidiaries

DTCS

Deutsche Telekom Cloud Services Similar Companies

Telcel

Jio

Free

Orange

e& Egypt

VEON

Vodafone Idea Limited

Telenor

Telecom Egypt

Deutsche Telekom Cloud Services CyberSecurity News

Europe Public Cloud Market Size, Share and Analysis, 2033

Orange goes live with ‘European first’ satellite SMS service

What’s up with… Verizon, Nvidia, European sovereignty

Orange, Deutsche Telekom Advocate for EU Connectivity, Cloud & AI Leadership

Europe on the brink: Telecom CEOs warn of digital standstill without urgent EU action

Nation-state hack discovered on US firm with access to major telecoms, US DoD

Deutsche Telekomwatch Analyst Briefing: Srini seeks to keep the big mo at T-Mo

What’s up with… Vodafone & Nokia, Deutsche Telekom, Telefónica​​​​​​​

Global AI In Cybersecurity Market Size Projected to Reach $93 Billion By 2030 Due To Frequent High-Profile Cyberattacks

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Deutsche Telekom Cloud Services CyberSecurity News & History

DTCS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for DTCS

Incidents vs Telecommunications Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types DTCS vs Telecommunications Industry Avg (This Year)

Incident History - DTCS (X = Date, Y = Severity)

Deutsche Telekom Cloud Services Subsidiaries

DTCS

Deutsche Telekom Cloud Services Similar Companies

Telcel

Jio

Free

Orange

e& Egypt

VEON

Vodafone Idea Limited

Telenor

Telecom Egypt

Deutsche Telekom Cloud Services CyberSecurity News

Europe Public Cloud Market Size, Share and Analysis, 2033

Orange goes live with ‘European first’ satellite SMS service

What’s up with… Verizon, Nvidia, European sovereignty

Orange, Deutsche Telekom Advocate for EU Connectivity, Cloud & AI Leadership

Europe on the brink: Telecom CEOs warn of digital standstill without urgent EU action

Nation-state hack discovered on US firm with access to major telecoms, US DoD

Deutsche Telekomwatch Analyst Briefing: Srini seeks to keep the big mo at T-Mo

What’s up with… Vodafone & Nokia, Deutsche Telekom, Telefónica​​​​​​​

Global AI In Cybersecurity Market Size Projected to Reach $93 Billion By 2030 Due To Frequent High-Profile Cyberattacks

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

What’s up with… Vodafone & Nokia, Deutsche Telekom, Telefónica

What’s up with… Vodafone & Nokia, Deutsche Telekom, Telefónica