What is the official website of Deutsche Telekom Services Europe - Slovakia ?

The official website of Deutsche Telekom Services Europe - Slovakia is http://www.dtse.sk.

What is Deutsche Telekom Services Europe - Slovakia's cybersecurity risk score?

Deutsche Telekom Services Europe - Slovakia has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Deutsche Telekom Services Europe - Slovakia experienced?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Deutsche Telekom Services Europe - Slovakia been affected by any supply chain cyber incidents ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia has been affected by a supply chain cyber incident involving Lovable, with the incident ID LOV1776717678.

Does Deutsche Telekom Services Europe - Slovakia have SOC 2 Type 1 certification ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia is not certified under SOC 2 Type 1.

Does Deutsche Telekom Services Europe - Slovakia have SOC 2 Type 2 certification ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia does not hold a SOC 2 Type 2 certification.

Does Deutsche Telekom Services Europe - Slovakia comply with GDPR ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia is not listed as GDPR compliant.

Does Deutsche Telekom Services Europe - Slovakia have PCI DSS certification ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia does not currently maintain PCI DSS compliance.

Does Deutsche Telekom Services Europe - Slovakia comply with HIPAA ?

According to Rankiteo, Deutsche Telekom Services Europe - Slovakia is not compliant with HIPAA regulations.

Does Deutsche Telekom Services Europe - Slovakia have ISO 27001 certification ?

According to Rankiteo,Deutsche Telekom Services Europe - Slovakia is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Deutsche Telekom Services Europe - Slovakia operate in ?

Deutsche Telekom Services Europe - Slovakia operates primarily in the Outsourcing and Offshoring Consulting industry.

How many employees does Deutsche Telekom Services Europe - Slovakia have ?

Deutsche Telekom Services Europe - Slovakia employs approximately 485 people worldwide.

Does Deutsche Telekom Services Europe - Slovakia own any subsidiaries ?

Deutsche Telekom Services Europe - Slovakia presently has no subsidiaries across any sectors.

How many LinkedIn followers does Deutsche Telekom Services Europe - Slovakia have ?

Deutsche Telekom Services Europe - Slovakia's official LinkedIn profile has approximately 3,768 followers.

What is the NAICS classification code for Deutsche Telekom Services Europe - Slovakia ?

Deutsche Telekom Services Europe - Slovakia is classified under the NAICS code 541615, which corresponds to Others.

Does Deutsche Telekom Services Europe - Slovakia have a Crunchbase profile ?

No, Deutsche Telekom Services Europe - Slovakia does not have a profile on Crunchbase.

Does Deutsche Telekom Services Europe - Slovakia have a LinkedIn profile ?

Yes, Deutsche Telekom Services Europe - Slovakia maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/dtseslovakia.

How many cybersecurity incidents has Deutsche Telekom Services Europe - Slovakia experienced ?

As of September 9, 2026, Rankiteo reports that Deutsche Telekom Services Europe - Slovakia has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Deutsche Telekom Services Europe - Slovakia have ?

Deutsche Telekom Services Europe - Slovakia has an estimated 1,171 peer or competitor companies worldwide.

What types of cybersecurity incidents has Deutsche Telekom Services Europe - Slovakia faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DTSES

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Deutsche Telekom Services Europe - Slovakia Vendor Cyber Rating & Cyber Score

dtse.sk

Add Your Compliance Badge

Deutsche Telekom Services Europe Slovakia (DTSE Slovakia) is a subsidiary and internal service provider of the Deutsche Telekom, world leader in telecommunications with nearly 228 000 employees in more than 50 countries. Services from Slovakia for the whole world We deliver support function services such as Procure to Pay, Travel Expenses, General Ledger, Asset Accounting, Customer Finance and Record-to-Report for the Deutsche Telekom Group throughout the world since September 2009. Innovations As part of our One.ERP teams, you will be able to design the future of Deutsche Telekom. Catch a unique chance to develop your knowledge and skills on the largest ERP project in Europe. People are our biggest asset! We do not stick to dress code

DTSES

Deutsche Telekom Services Europe - Slovakia CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Deutsche Telekom

Breach

4/2026

Lovable

LOV1776717678

Loading…

A.I.

DTSES Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DTSES

Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

No incidents recorded for Deutsche Telekom Services Europe - Slovakia in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Deutsche Telekom Services Europe - Slovakia in 2026.

Incident Types DTSES vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

No incidents recorded for Deutsche Telekom Services Europe - Slovakia in 2026.

Incident History - DTSES (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Deutsche Telekom Services Europe - Slovakia Subsidiaries

DTSES

Outsourcing and Offshoring Consulting

Website: http://www.dtse.sk

Company Size: 485

Deutsche TelekomTelecommunications

Hrvatski TelekomTelecommunications

DeteconBusiness Consulting and Services

T-Systems IberiaIT Services and IT Consulting

GIMM SolutionsIT Services and IT Consulting

DigiCloudIT Services and IT Consulting

J-EDI Digital SolutionsInformation Technology & Services

Agile Hub T-Systems IberiaIT Services and IT Consulting

T-Mobile PolskaTelecommunications

T-Systems InternationalIT Services and IT Consulting

T CloudIT Services and IT Consulting

Deutsche Telekom IoTIT Services and IT Consulting

Telekom HUTelecommunications

T BusinessTelecommunications

T-Systems ICT India Pvt. Ltd.IT Services and IT Consulting

T-Systems do BrasilIT Services and IT Consulting

T-Security ConnectSecurity Systems Services

T-Systems SingaporeIT Services and IT Consulting

Deutsche Telekom Digital LabsTechnology, Information and Internet

Deutsche Telekom IT Solutions SlovakiaIT Services and IT Consulting

Deutsche Telekom Global BusinessTelecommunications

Deutsche Telekom Cloud ServicesTelecommunications

Slovak TelekomTelecommunications

T WholesaleTelekommunikation

T Business EuropeTelecommunications

Telekom TechBoostTelecommunications

T-Mobile Biznes PolskaTelecommunications

Telekom MMSIT Services and IT Consulting

T-Systems MMSIT Services and IT Consulting

Makedonski Telekom ADTelecommunications

T-Systems Hungary Ltd.IT Services and IT Consulting

T-Systems RomaniaIT Services and IT Consulting

Inflight Services of Deutsche TelekomTelecommunications

Deutsche Telekom HealthcareHospitals and Health Care

LIFECARE Laboratorium InformatiesysteemHospitals and Health Care

Telekom Strategy ConsultingTelecommunications

Deutsche Telekom Services Europe - Czech RepublicOutsourcing and Offshoring Consulting

Deutsche Telekom Investor RelationsTelecommunications

Deutsche Telekom ITIT Services and IT Consulting

T-Systems UKIT Services and IT Consulting

Cyber Security at T-SystemsIT Services and IT Consulting

AI Shared ServicesTelecommunications

MagentaZuhauseTelecommunications

Deutsche Telekom UK LimitedTelecommunications

T-Mobile Polska Business Solutions IT Services and IT Consulting

DeTeAssekuranz Vermittlungsgesellschaft mbHInsurance

Deutsche Telekom Clinical Solutions India Pvt. Ltd.IT Services and IT Consulting

T SportTelecommunications

Deutsche Telekom Global Business Solutions FranceInformation Technology & Services

Deutsche Telekom Design & Customer ExperienceTelecommunications

T-Systems NordicIT Services and IT Consulting

Deutsche Telekom EU PolicyTelecommunications

congstarTelecommunications

T-Systems AustriaInformation Technology & Services

Digitales GesundheitswesenWellness and Fitness Services

T-Systems FranceIT Services and IT Consulting

Deutsche Telekom StiftungNon-profit Organizations

Deutsche Telekom - Digital, Experience & DeliveryTelecommunications

T-Systems SwitzerlandIT Services and IT Consulting

Deutsche Telekom Services Europe Romania (DTSE Romania)Outsourcing and Offshoring Consulting

T-Mobile Czech Republic a.s.Telecommunications

Loading…

Deutsche Telekom Services Europe - Slovakia Similar Companies

INTELCIA

Intelcia.com

Intelcia is a global player in outsourcing, which has supported its clients for 20 years combining talents, technologies, and processes to offer a tailor-made service and skills that meet international standards. In order to allow its customers to focus on their challenges and core business, Intelcia offers a global offer on shore, near shore and offshore around a cluster of 4 main solutions: Multichannel CX Solutions, Business Processes, IT Solutions, and Innovative & Consulting Solutions. Present in Europe (France, Portugal, Spain, United Kingdom), in North Africa (Morocco, Egypt) in Sub-Saharan Africa (Cameroon, Senegal, Ivory Coast), in the Indian Ocean (Mauritius, Madagascar), in North America (United States United) in Latin America (Colombia, Chile) and the Caribbean (Jamaica, Dominican Republic), the group currently has more than 35,000 employees, spread across 85 operational centers. Intelcia has announced its ambition to be in the top 10 global outsourcing players and to reach 1.5 billion euros in turnover by 2025.

Grupo Souza Lima

souzalima.com

Sempre inovador, o Grupo Souza Lima desenvolve soluções completas e híbridas, que realmente funcionam, em serviços de Segurança, Limpeza e Facilities. Essas soluções já são realidade para clientes Souza Lima e integram colaboradores treinados com tecnologia avançada para otimizar recursos e melhorar a performance nos segmentos de indústrias, shoppings, condomínios, instituições de ensino e de saúde, entre diversas outras empresas. Com mais de 30 anos de mercado e atuação nacional, conta com mais de 30.000 colaboradores, 2000 clientes e 22 filiais em 14 estados.

Startek

cb startek.com

A global customer experience (CX) management solutions provider, Startek® delivers best-in-class omnichannel CX, digital transformation and enterprise tech services for leading brands, from Fortune 500s to fast-growing startups. Our innovation and expertise ensure CX excellence across traditional and non-traditional channels. Working both in-center and via work at home, our 40,000 CX experts are present in 13 countries ensuring global reach and local connection no matter where your customers are based. The award-winning Startek Cloud, a hybrid-cloud platform integrated with AI capabilities, empowers remote and home-based team members, to deliver business agility and continuity. At Startek we believe that every organization can deliver meaningful customer experience (CX) at every touchpoint by harnessing the power of empathy. Empathy is looking through your customer’s eyes to understand the world as they see it and leveraging that understanding to build human-centric experiences that create an effortless 1-2-1 connection. Applying empathy across data, technology and people, we enable our clients to build long-term, profitable customer relationships by closing the CX gap. To find out more visit www.startek.com.

Atento

atento.com

We are one of the world's largest global providers of customer relationship management and business transformation outsourcing (CRM/BTO) services and industry leaders in Latin America. Our offerings have expanded beyond the realms of traditional Business Process Outsourcing (BPO) to become front-runners in the transformative space of BTO. This evolution has been powered by the integration of AI and automation, emphasizing the enhancement of competitive edges through the lens of Customer Experience (CX) consulting. We are also one of the leading providers of nearshoring CRM BTO services for businesses operating in the United States. Since 1999, we have developed business models in 17 countries, employing approximately 110,000 people. Serving over 400 clients, we deliver a comprehensive suite of BTO CRM services across a multitude of channels. We specialize in tailored solutions that cater to diverse industry needs, blending our proprietary technologies with third-party platforms to cultivate authentic connections and lasting customer experiences. Our mission is to ensure every interaction is not just meaningful, but also enriching, contributing real value to our clients' enterprises. Our commitment and service excellence have not gone unnoticed. We've earned accolades from prominent industry analysts in various regions, including acknowledgments from Everest, Gartner, Frost & Sullivan, and ISG. On the corporate culture front, Forbes recognized us as one of the 100 best companies to work for in Spain for 2023, and the Great Place to Work® Institute consistently ranks us among the top 25 best global employers. Notably, we are the first in our sector to be awarded the ISO 56002 Certification for Innovation Management, an honor we have proudly maintained for three years running.

BPO

bpoconsultingsolutions.com

We established our back office here in Pakistan back in 2016 after which we have been providing complete support to our registered office in Florida. Our main aim has been to function as an effective thirdparty service provider in order to maintain beneficial relationships with multiple US based clients.Our sole focus has always been to deliver our best in an efficient and timely manner. We make sure that we develop a relationship of trust with our clients so that they can highly improve their business performance and shareholder value, at the same time reducing their costs to a greater extent. We function to cater businesses unique needs for multiple industries such as accounting, e‐commerce, pharmaceuticals, telecommunications and more. A highly committed, multi‐talented and energetic team is the sole reason we have been able to offer solutions to complex problems within a specified timeframe so that our clients’ needs and requirements are completely fulfilled with complete satisfaction.

iQor

iqor.com

iQor CXBPO™ is a trusted partner in intelligent customer experience solutions for global brands and a portfolio company of Mill Point Capital. With 47,000+ employees across 11 countries, iQor combines three decades of expertise with AI-driven innovation to optimize performance across the entire customer lifecycle. Through its three delivery pillars—CXBPO, Growth as a Service, and infinityAiQ—iQor delivers scalable solutions that drive acquisition, engagement, and retention. Powered by data intelligence and a people-first culture, iQor transforms customer interactions into measurable growth. Recognized as a Great Place to Work® and a leader in CX excellence, iQor empowers brands to grow smarter. Recent acquisitions of JumpCrew and OP360 further expand iQor’s global capabilities across sales, marketing, and customer experience delivery. Learn more at iQor.com.

Manserv

manserv.com.br

A Manserv tem no ato de servir sua principal vocação. A organização, fundada em 1985, tem estrutura empresarial sólida e abrangente. Especializada nas áreas de Manutenção, Facilities, Logística e Tecnologia, possui extenso portfólio de produtos e serviços, capazes de atender os mais diversificados mercados com soluções inovadoras, inteligentes e customizadas. Somos um time de especialistas e, por isso, garantimos excelência na prestação dos serviços.

Transcom

cb transcom.com

Transcom provides digitally enhanced customer experience (CX) services to some of the world's most ambitious brands. More than 300 clients globally, including disruptive e-commerce players, category redefining fintechs, and technology legends rely on us for on-, off-, and nearshoring services. Transcom’s over 33,000 employees work in 90 contact centers and work-at-home networks across 28 countries, creating brilliant experiences in customer care, sales, content moderation, and backoffice services. We help our clients drive their brands forward, customer satisfaction up, and operating costs down.

Konecta

konecta.com

Konecta is a leading innovative global service provider in customer management business process outsourcing, with 120,000 passionate employees working in 30 languages across 4 continents and 26 countries. Focusing on the unique needs and opportunities of each industry, Konecta offers a full range of end-to-end customer management solutions – including acquisition, retention, customer service, technical support, and collection – all based on a sustainable business model. These services are built on a portfolio of world-class expertise covering customer experience and process management, digital solutions and cutting-edge technologies. Headquartered in Madrid, Konecta delivers global revenues of approximately €2 billion with more than 500 clients, covering some of the biggest names in telecoms, energy, banking, mobility, retail, and e-commerce.

Loading…

NEWS

Deutsche Telekom Services Europe - Slovakia CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 03, 2025 02:15 PM

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

The latest developments from around German giant, as Armin Sumesgutner becomes DT's new networks supremo, Hrvatski Telekom looks at new...

Read Article

July 13, 2025 07:00 AM

Slovakia’s top IT employer to cut 150 jobs

Deutsche Telekom IT Solutions Slovakia, the country's largest information technology employer, has confirmed plans to lay off around 150...

Read Article

May 21, 2025 10:10 AM

Europe Telecom Market Size, Share, Trends & Analysis, 2033

Europe Telecom Market Size, Share, Trends & Growth Forecast Report By Product Type (Mobile Services, Fixed-Line Services, Broadband, Others), Age Group,...

Read Article

January 23, 2025 08:00 AM

Orange signs up cybersecurity specialist Cyan for three more years

Munich‑based supplier signed its first group deal with Orange in 2018.

Read Article

August 29, 2024 07:00 AM

DT ‘nears’ €300m sales watershed for security spinout

Deutsche Telekom Group Chief Executive Tim Höttges has re-endorsed the operator's decision to spin out an external-facing cyber defence business several years...

Read Article

June 13, 2023 07:00 AM

T-Mobile Poland opens technology hub in Warsaw

Deutsche Telekom added another technology hub to its widening portfolio after T-Mobile Poland opened the new “T-Hub Polska” in Warsaw,...

Read Article

May 16, 2023 07:00 AM

Deutsche Telekom Peoplewatch: OTE finance chief takes control in Romania

May 2023 update: Host of changes made at Deutsche Telekom Services Europe Slovakia. More…

Read Article

November 10, 2022 08:00 AM

Telekom Security rotates leadership, Tschersich steps up

Thomas Tschersich is to replace Thomas Fetten as Chief Executive at Telekom Security, Deutsche Telekom's commercial security services arm, next week.

Read Article

June 16, 2020 07:00 AM

TA505 returns with a new bag of tricks

Cybersecurity: In this blogpost, Thomas Barabosch, shows you a new technique of big threat actor TA505: basically, it's about operations for...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86564

SUMMARY

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-55250

SUMMARY

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-53639

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r

CVE-2026-53638

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp

CVE-2026-53637

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Deutsche Telekom Services Europe - Slovakia Vendor Cyber Rating & Cyber Score

DTSES A.I CyberSecurity Scoring

Deutsche Telekom Services Europe - Slovakia CyberSecurity News & History

DTSES Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for DTSES

Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types DTSES vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incident History - DTSES (X = Date, Y = Severity)

Deutsche Telekom Services Europe - Slovakia Subsidiaries

DTSES

Deutsche Telekom Services Europe - Slovakia Similar Companies

INTELCIA

Grupo Souza Lima

Startek

Atento

BPO

iQor

Manserv

Transcom

Konecta

Deutsche Telekom Services Europe - Slovakia CyberSecurity News

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

Slovakia’s top IT employer to cut 150 jobs

Europe Telecom Market Size, Share, Trends & Analysis, 2033

Orange signs up cybersecurity specialist Cyan for three more years

DT ‘nears’ €300m sales watershed for security spinout

T-Mobile Poland opens technology hub in Warsaw

Deutsche Telekom Peoplewatch: OTE finance chief takes control in Romania

Telekom Security rotates leadership, Tschersich steps up

TA505 returns with a new bag of tricks

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Deutsche Telekom Services Europe - Slovakia CyberSecurity News & History

DTSES Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for DTSES

Incidents vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types DTSES vs Outsourcing and Offshoring Consulting Industry Avg (This Year)

Incident History - DTSES (X = Date, Y = Severity)

Deutsche Telekom Services Europe - Slovakia Subsidiaries

DTSES

Deutsche Telekom Services Europe - Slovakia Similar Companies

INTELCIA

Grupo Souza Lima

Startek

Atento

BPO

iQor

Manserv

Transcom

Konecta

Deutsche Telekom Services Europe - Slovakia CyberSecurity News

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

Slovakia’s top IT employer to cut 150 jobs

Europe Telecom Market Size, Share, Trends & Analysis, 2033

Orange signs up cybersecurity specialist Cyan for three more years

DT ‘nears’ €300m sales watershed for security spinout

T-Mobile Poland opens technology hub in Warsaw

Deutsche Telekom Peoplewatch: OTE finance chief takes control in Romania

Telekom Security rotates leadership, Tschersich steps up

TA505 returns with a new bag of tricks

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo