What is the official website of Deutsche Telekom Services Europe - Slovakia ?

The official website of Deutsche Telekom Services Europe - Slovakia is http://www.dtse.sk.

What is Deutsche Telekom Services Europe - Slovakia's cybersecurity risk score?

Deutsche Telekom Services Europe - Slovakia has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Deutsche Telekom Services Europe - Slovakia experienced?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Deutsche Telekom Services Europe - Slovakia been affected by any supply chain cyber incidents ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia has been affected by a supply chain cyber incident involving Lovable, with the incident ID LOV1776717678.

Does Deutsche Telekom Services Europe - Slovakia have SOC 2 Type 1 certification ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia is not certified under SOC 2 Type 1.

Does Deutsche Telekom Services Europe - Slovakia have SOC 2 Type 2 certification ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia does not hold a SOC 2 Type 2 certification.

Does Deutsche Telekom Services Europe - Slovakia comply with GDPR ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia is not listed as GDPR compliant.

Does Deutsche Telekom Services Europe - Slovakia have PCI DSS certification ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia does not currently maintain PCI DSS compliance.

Does Deutsche Telekom Services Europe - Slovakia comply with HIPAA ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia is not compliant with HIPAA regulations.

Does Deutsche Telekom Services Europe - Slovakia have ISO 27001 certification ?

According to Rankiteo,Deutsche Telekom Services Europe - Slovakia is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Deutsche Telekom Services Europe - Slovakia operate in ?

Deutsche Telekom Services Europe - Slovakia operates primarily in the Outsourcing and Offshoring Consulting industry.

How many employees does Deutsche Telekom Services Europe - Slovakia have ?

Deutsche Telekom Services Europe - Slovakia employs approximately 485 people worldwide.

Does Deutsche Telekom Services Europe - Slovakia own any subsidiaries ?

Deutsche Telekom Services Europe - Slovakia presently has no subsidiaries across any sectors.

How many LinkedIn followers does Deutsche Telekom Services Europe - Slovakia have ?

Deutsche Telekom Services Europe - Slovakia's official LinkedIn profile has approximately 3,768 followers.

What is the NAICS classification code for Deutsche Telekom Services Europe - Slovakia ?

Deutsche Telekom Services Europe - Slovakia is classified under the NAICS code 541615, which corresponds to Others.

Does Deutsche Telekom Services Europe - Slovakia have a Crunchbase profile ?

No, Deutsche Telekom Services Europe - Slovakia does not have a profile on Crunchbase.

Does Deutsche Telekom Services Europe - Slovakia have a LinkedIn profile ?

Yes, Deutsche Telekom Services Europe - Slovakia maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/dtseslovakia.

How many cybersecurity incidents has Deutsche Telekom Services Europe - Slovakia experienced ?

As of September 9, 2026, Rankiteo reports that Deutsche Telekom Services Europe - Slovakia has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Deutsche Telekom Services Europe - Slovakia have ?

Deutsche Telekom Services Europe - Slovakia has an estimated 1,171 peer or competitor companies worldwide.

What types of cybersecurity incidents has Deutsche Telekom Services Europe - Slovakia faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DTSES

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Deutsche Telekom Services Europe - Slovakia Vendor Cyber Rating & Cyber Score

dtse.sk

Add Your Compliance Badge

Deutsche Telekom Services Europe Slovakia (DTSE Slovakia) is a subsidiary and internal service provider of the Deutsche Telekom, world leader in telecommunications with nearly 228 000 employees in more than 50 countries. Services from Slovakia for the whole world We deliver support function services such as Procure to Pay, Travel Expenses, General Ledger, Asset Accounting, Customer Finance and Record-to-Report for the Deutsche Telekom Group throughout the world since September 2009. Innovations As part of our One.ERP teams, you will be able to design the future of Deutsche Telekom. Catch a unique chance to develop your knowledge and skills on the largest ERP project in Europe. People are our biggest asset! We do not stick to dress code

DTSES

Deutsche Telekom Services Europe - Slovakia CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Deutsche Telekom

Breach

4/2026

Lovable

LOV1776717678

Loading…

A.I.

DTSES Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DTSES

Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

No incidents recorded for Deutsche Telekom Services Europe - Slovakia in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Deutsche Telekom Services Europe - Slovakia in 2026.

Incident Types DTSES vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

No incidents recorded for Deutsche Telekom Services Europe - Slovakia in 2026.

Incident History - DTSES (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Deutsche Telekom Services Europe - Slovakia Subsidiaries

DTSES

Outsourcing and Offshoring Consulting

Website: http://www.dtse.sk

Company Size: 485

Deutsche TelekomTelecommunications

Hrvatski TelekomTelecommunications

DeteconBusiness Consulting and Services

T-Systems IberiaIT Services and IT Consulting

GIMM SolutionsIT Services and IT Consulting

DigiCloudIT Services and IT Consulting

J-EDI Digital SolutionsInformation Technology & Services

Agile Hub T-Systems IberiaIT Services and IT Consulting

T-Mobile PolskaTelecommunications

T-Systems InternationalIT Services and IT Consulting

T CloudIT Services and IT Consulting

Deutsche Telekom IoTIT Services and IT Consulting

Telekom HUTelecommunications

T BusinessTelecommunications

T-Systems ICT India Pvt. Ltd.IT Services and IT Consulting

T-Systems do BrasilIT Services and IT Consulting

T-Security ConnectSecurity Systems Services

T-Systems SingaporeIT Services and IT Consulting

Deutsche Telekom Digital LabsTechnology, Information and Internet

Deutsche Telekom IT Solutions SlovakiaIT Services and IT Consulting

Deutsche Telekom Global BusinessTelecommunications

Deutsche Telekom Cloud ServicesTelecommunications

Slovak TelekomTelecommunications

T WholesaleTelekommunikation

T Business EuropeTelecommunications

Telekom TechBoostTelecommunications

T-Mobile Biznes PolskaTelecommunications

Telekom MMSIT Services and IT Consulting

T-Systems MMSIT Services and IT Consulting

Makedonski Telekom ADTelecommunications

T-Systems Hungary Ltd.IT Services and IT Consulting

T-Systems RomaniaIT Services and IT Consulting

Inflight Services of Deutsche TelekomTelecommunications

Deutsche Telekom HealthcareHospitals and Health Care

LIFECARE Laboratorium InformatiesysteemHospitals and Health Care

Telekom Strategy ConsultingTelecommunications

Deutsche Telekom Services Europe - Czech RepublicOutsourcing and Offshoring Consulting

Deutsche Telekom Investor RelationsTelecommunications

Deutsche Telekom ITIT Services and IT Consulting

T-Systems UKIT Services and IT Consulting

Cyber Security at T-SystemsIT Services and IT Consulting

AI Shared ServicesTelecommunications

MagentaZuhauseTelecommunications

Deutsche Telekom UK LimitedTelecommunications

T-Mobile Polska Business Solutions IT Services and IT Consulting

DeTeAssekuranz Vermittlungsgesellschaft mbHInsurance

Deutsche Telekom Clinical Solutions India Pvt. Ltd.IT Services and IT Consulting

T SportTelecommunications

Deutsche Telekom Global Business Solutions FranceInformation Technology & Services

Deutsche Telekom Design & Customer ExperienceTelecommunications

T-Systems NordicIT Services and IT Consulting

Deutsche Telekom EU PolicyTelecommunications

congstarTelecommunications

T-Systems AustriaInformation Technology & Services

Digitales GesundheitswesenWellness and Fitness Services

T-Systems FranceIT Services and IT Consulting

Deutsche Telekom StiftungNon-profit Organizations

Deutsche Telekom - Digital, Experience & DeliveryTelecommunications

T-Systems SwitzerlandIT Services and IT Consulting

Deutsche Telekom Services Europe Romania (DTSE Romania)Outsourcing and Offshoring Consulting

T-Mobile Czech Republic a.s.Telecommunications

Loading…

Deutsche Telekom Services Europe - Slovakia Similar Companies

TDCX

tdcx.com

Singapore-headquartered TDCX provides transformative digital CX solutions, enabling world-leading and disruptive brands to acquire new customers, to build customer loyalty, and to protect their online communities. TDCX helps clients achieve their customer experience aspirations by harnessing technology, human intelligence, and its global footprint. It serves clients in fintech, gaming, technology, travel and hospitality, digital advertising and social media, streaming and e-commerce. TDCX’s expertise and strong footprint in Asia have made it a trusted partner for clients, particularly high-growth, new economy companies, looking to tap the region’s growth potential. TDCX’s commitment to delivering positive outcomes for our clients extends to its role as a responsible corporate citizen. Its Corporate Social Responsibility program focuses on positively transforming the lives of its people, its communities, and the environment. TDCX employs more than 19,000 employees across 34 campuses globally, specifically in Brazil, Colombia, Hong Kong, India, Japan, Malaysia, Mainland China, Philippines, Türkiye, Singapore, South Korea, Spain, Thailand, Türkiye, and Vietnam. For more information, please visit www.tdcx.com. Community Guideline: We respect all feedback and do not remove comments unless they are deemed as spam or disrespectful to our community. We may remove repetitive posts to keep our pages clear and easy to navigate while facilitating transparent discussion.

TaskUs

taskus.com

TaskUs delivers outsourced digital services that power the companies shaping the future. By combining specialized human talent and intelligent technology, we solve complex operational challenges for global category leaders within AI, autonomous vehicles (AV), robotics, social media, financial services, healthcare, and beyond. We enable our clients to elevate their customer experience, protect their platforms, and grow their brands.

INTELCIA

Intelcia.com

Intelcia is a global player in outsourcing, which has supported its clients for 20 years combining talents, technologies, and processes to offer a tailor-made service and skills that meet international standards. In order to allow its customers to focus on their challenges and core business, Intelcia offers a global offer on shore, near shore and offshore around a cluster of 4 main solutions: Multichannel CX Solutions, Business Processes, IT Solutions, and Innovative & Consulting Solutions. Present in Europe (France, Portugal, Spain, United Kingdom), in North Africa (Morocco, Egypt) in Sub-Saharan Africa (Cameroon, Senegal, Ivory Coast), in the Indian Ocean (Mauritius, Madagascar), in North America (United States United) in Latin America (Colombia, Chile) and the Caribbean (Jamaica, Dominican Republic), the group currently has more than 35,000 employees, spread across 85 operational centers. Intelcia has announced its ambition to be in the top 10 global outsourcing players and to reach 1.5 billion euros in turnover by 2025.

iEnergizer

ienergizerbpo.com

iEnergizer is a leading Business Process Outsourcing provider (“BPO”) of customer management solutions dedicated to delivering performance while actively supporting and advocating our client’s brand. iEnergizer helps our Partners acquire, support, retain, and grow their markets by providing complete life-cycle customer support services. From sales to customer care, technical support and back-office services, iEnergizer provides client-centric solutions to a partner base that includes a number of Fortune 500 companies operating within different industry verticals including: Healthcare Payers and Providers, Banking, Financial Services, Insurance, Gaming, Publishing and Legal. We don’t consider ourselves simply an outsourcing provider. We are a trusted partner who acts as an extension of our clients' operations. iEnergizer provides our clients with high-quality service, while lowering operating costs in an innovative atmosphere that focuses on an exemplary customer experience, combined with continuous improvements in key business impacts. Being a mid-sized company enables us to offer clients the best of both worlds—the resources to provide a scalable environment, combined with an infrastructure that allows us to remain nimble and customer-focused.

TP

tp.com

We are TP Group. You’ve been calling us Teleperformance for almost 47 years. But in the AI era, the world has changed, and we had to change too to keep leading the digital business services market. We’re sharper, more modern, and even more empathetic. We are TP. Simple as that. Intelligent as always, and future-proof for the journey ahead.

Atento

atento.com

We are one of the world's largest global providers of customer relationship management and business transformation outsourcing (CRM/BTO) services and industry leaders in Latin America. Our offerings have expanded beyond the realms of traditional Business Process Outsourcing (BPO) to become front-runners in the transformative space of BTO. This evolution has been powered by the integration of AI and automation, emphasizing the enhancement of competitive edges through the lens of Customer Experience (CX) consulting. We are also one of the leading providers of nearshoring CRM BTO services for businesses operating in the United States. Since 1999, we have developed business models in 17 countries, employing approximately 110,000 people. Serving over 400 clients, we deliver a comprehensive suite of BTO CRM services across a multitude of channels. We specialize in tailored solutions that cater to diverse industry needs, blending our proprietary technologies with third-party platforms to cultivate authentic connections and lasting customer experiences. Our mission is to ensure every interaction is not just meaningful, but also enriching, contributing real value to our clients' enterprises. Our commitment and service excellence have not gone unnoticed. We've earned accolades from prominent industry analysts in various regions, including acknowledgments from Everest, Gartner, Frost & Sullivan, and ISG. On the corporate culture front, Forbes recognized us as one of the 100 best companies to work for in Spain for 2023, and the Great Place to Work® Institute consistently ranks us among the top 25 best global employers. Notably, we are the first in our sector to be awarded the ISO 56002 Certification for Innovation Management, an honor we have proudly maintained for three years running.

Manserv

manserv.com.br

A Manserv tem no ato de servir sua principal vocação. A organização, fundada em 1985, tem estrutura empresarial sólida e abrangente. Especializada nas áreas de Manutenção, Facilities, Logística e Tecnologia, possui extenso portfólio de produtos e serviços, capazes de atender os mais diversificados mercados com soluções inovadoras, inteligentes e customizadas. Somos um time de especialistas e, por isso, garantimos excelência na prestação dos serviços.

Konecta

konecta.com

Konecta is a leading innovative global service provider in customer management business process outsourcing, with 120,000 passionate employees working in 30 languages across 4 continents and 26 countries. Focusing on the unique needs and opportunities of each industry, Konecta offers a full range of end-to-end customer management solutions – including acquisition, retention, customer service, technical support, and collection – all based on a sustainable business model. These services are built on a portfolio of world-class expertise covering customer experience and process management, digital solutions and cutting-edge technologies. Headquartered in Madrid, Konecta delivers global revenues of approximately €2 billion with more than 500 clients, covering some of the biggest names in telecoms, energy, banking, mobility, retail, and e-commerce.

Startek

cb startek.com

A global customer experience (CX) management solutions provider, Startek® delivers best-in-class omnichannel CX, digital transformation and enterprise tech services for leading brands, from Fortune 500s to fast-growing startups. Our innovation and expertise ensure CX excellence across traditional and non-traditional channels. Working both in-center and via work at home, our 40,000 CX experts are present in 13 countries ensuring global reach and local connection no matter where your customers are based. The award-winning Startek Cloud, a hybrid-cloud platform integrated with AI capabilities, empowers remote and home-based team members, to deliver business agility and continuity. At Startek we believe that every organization can deliver meaningful customer experience (CX) at every touchpoint by harnessing the power of empathy. Empathy is looking through your customer’s eyes to understand the world as they see it and leveraging that understanding to build human-centric experiences that create an effortless 1-2-1 connection. Applying empathy across data, technology and people, we enable our clients to build long-term, profitable customer relationships by closing the CX gap. To find out more visit www.startek.com.

Loading…

NEWS

Deutsche Telekom Services Europe - Slovakia CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 03, 2025 02:15 PM

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

The latest developments from around German giant, as Armin Sumesgutner becomes DT's new networks supremo, Hrvatski Telekom looks at new...

Read Article

July 13, 2025 07:00 AM

Slovakia’s top IT employer to cut 150 jobs

Deutsche Telekom IT Solutions Slovakia, the country's largest information technology employer, has confirmed plans to lay off around 150...

Read Article

May 21, 2025 10:10 AM

Europe Telecom Market Size, Share, Trends & Analysis, 2033

Europe Telecom Market Size, Share, Trends & Growth Forecast Report By Product Type (Mobile Services, Fixed-Line Services, Broadband, Others), Age Group,...

Read Article

January 23, 2025 08:00 AM

Orange signs up cybersecurity specialist Cyan for three more years

Munich‑based supplier signed its first group deal with Orange in 2018.

Read Article

August 29, 2024 07:00 AM

DT ‘nears’ €300m sales watershed for security spinout

Deutsche Telekom Group Chief Executive Tim Höttges has re-endorsed the operator's decision to spin out an external-facing cyber defence business several years...

Read Article

June 13, 2023 07:00 AM

T-Mobile Poland opens technology hub in Warsaw

Deutsche Telekom added another technology hub to its widening portfolio after T-Mobile Poland opened the new “T-Hub Polska” in Warsaw,...

Read Article

May 16, 2023 07:00 AM

Deutsche Telekom Peoplewatch: OTE finance chief takes control in Romania

May 2023 update: Host of changes made at Deutsche Telekom Services Europe Slovakia. More…

Read Article

November 10, 2022 08:00 AM

Telekom Security rotates leadership, Tschersich steps up

Thomas Tschersich is to replace Thomas Fetten as Chief Executive at Telekom Security, Deutsche Telekom's commercial security services arm, next week.

Read Article

June 16, 2020 07:00 AM

TA505 returns with a new bag of tricks

Cybersecurity: In this blogpost, Thomas Barabosch, shows you a new technique of big threat actor TA505: basically, it's about operations for...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86564

SUMMARY

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-55250

SUMMARY

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-53639

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r

CVE-2026-53638

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp

CVE-2026-53637

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Deutsche Telekom Services Europe - Slovakia Vendor Cyber Rating & Cyber Score

DTSES A.I CyberSecurity Scoring

Deutsche Telekom Services Europe - Slovakia CyberSecurity News & History

DTSES Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for DTSES

Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types DTSES vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incident History - DTSES (X = Date, Y = Severity)

Deutsche Telekom Services Europe - Slovakia Subsidiaries

DTSES

Deutsche Telekom Services Europe - Slovakia Similar Companies

TDCX

TaskUs

INTELCIA

iEnergizer

TP

Atento

Manserv

Konecta

Startek

Deutsche Telekom Services Europe - Slovakia CyberSecurity News

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

Slovakia’s top IT employer to cut 150 jobs

Europe Telecom Market Size, Share, Trends & Analysis, 2033

Orange signs up cybersecurity specialist Cyan for three more years

DT ‘nears’ €300m sales watershed for security spinout

T-Mobile Poland opens technology hub in Warsaw

Deutsche Telekom Peoplewatch: OTE finance chief takes control in Romania

Telekom Security rotates leadership, Tschersich steps up

TA505 returns with a new bag of tricks

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Deutsche Telekom Services Europe - Slovakia CyberSecurity News & History

DTSES Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for DTSES

Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types DTSES vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incident History - DTSES (X = Date, Y = Severity)

Deutsche Telekom Services Europe - Slovakia Subsidiaries

DTSES

Deutsche Telekom Services Europe - Slovakia Similar Companies

TDCX

TaskUs

INTELCIA

iEnergizer

TP

Atento

Manserv

Konecta

Startek

Deutsche Telekom Services Europe - Slovakia CyberSecurity News

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

Slovakia’s top IT employer to cut 150 jobs

Europe Telecom Market Size, Share, Trends & Analysis, 2033

Orange signs up cybersecurity specialist Cyan for three more years

DT ‘nears’ €300m sales watershed for security spinout

T-Mobile Poland opens technology hub in Warsaw

Deutsche Telekom Peoplewatch: OTE finance chief takes control in Romania

Telekom Security rotates leadership, Tschersich steps up

TA505 returns with a new bag of tricks

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo