What is the official website of Embraer ?

The official website of Embraer is https://embraer.com/global/en.

What is Embraer's cybersecurity risk score?

Embraer has an AI-generated cybersecurity risk score of 772 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Embraer experienced?

According to Rankiteo, Embraer currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Embraer been affected by any supply chain cyber incidents ?

According to Rankiteo, Embraer has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Embraer have SOC 2 Type 1 certification ?

According to Rankiteo, Embraer is not certified under SOC 2 Type 1.

Does Embraer have SOC 2 Type 2 certification ?

According to Rankiteo, Embraer does not hold a SOC 2 Type 2 certification.

Does Embraer comply with GDPR ?

According to Rankiteo, Embraer is not listed as GDPR compliant.

Does Embraer have PCI DSS certification ?

According to Rankiteo, Embraer does not currently maintain PCI DSS compliance.

Does Embraer comply with HIPAA ?

According to Rankiteo, Embraer is not compliant with HIPAA regulations.

Does Embraer have ISO 27001 certification ?

According to Rankiteo,Embraer is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Embraer operate in ?

Embraer operates primarily in the Aviation and Aerospace Component Manufacturing industry.

How many employees does Embraer have ?

Embraer employs approximately 24,241 people worldwide.

Does Embraer own any subsidiaries ?

Embraer presently has no subsidiaries across any sectors.

How many LinkedIn followers does Embraer have ?

Embraer's official LinkedIn profile has approximately 1,222,733 followers.

What is the NAICS classification code for Embraer ?

Embraer is classified under the NAICS code 3364, which corresponds to Aerospace Product and Parts Manufacturing.

Does Embraer have a Crunchbase profile ?

Yes, Embraer has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/embraer-sa.

Does Embraer have a LinkedIn profile ?

Yes, Embraer maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/embraer.

How many cybersecurity incidents has Embraer experienced ?

As of August 11, 2026, Rankiteo reports that Embraer has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Embraer have ?

Embraer has an estimated 2,842 peer or competitor companies worldwide.

What types of cybersecurity incidents has Embraer faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Embraer

Boost Score +25 with badge (5 left)

772

/1000

Fair

797

/1000

Fair

Embraer Vendor Cyber Rating & Cyber Score

embraer.com

cb in

Add Your Compliance Badge

A global aerospace company headquartered in Brazil, Embraer has businesses in Commercial and Executive Aviation, Defense & Security, and Agricultural Aviation. The company designs, develops, manufactures and markets aircraft and systems, providing Services and Support to customer after-sales. Since it was founded in 1969, Embraer has delivered more than 8,000 aircraft. On average, about every 10 seconds an aircraft manufactured by Embraer takes off somewhere in the world, transporting over 145 million passengers a year.

Embraer A.I CyberSecurity Scoring

Scoring History

Embraer

Embraer CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Embraer

Cyber Attack

100

12/2020

EMB14121122

Loading…

A.I.

Embraer Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Embraer

Incidents vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)

No incidents recorded for Embraer in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Embraer in 2026.

Incident Types Embraer vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)

No incidents recorded for Embraer in 2026.

Incident History - Embraer (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Embraer Subsidiaries

Parent Company

Embraer

Aviation and Aerospace Component Manufacturing

Website: https://embraer.com/global/en

Company Size: 10,001+ employees

No subsidiary data available for this company.

Loading…

Embraer Similar Companies

B/E Aerospace

beaerospace.com

B/E Aerospace is now part of Rockwell Collins. With the acquisition of B/E Aerospace in April 2017, Rockwell Collins is now a world leader in designing, developing and manufacturing cabin interior products and services that deliver innovation, reliability and efficiency. Our broad range of offerings include aircraft cabin seating, lighting and engineering solutions, oxygen systems, food and beverage preparation and storage equipment, galley systems, water and waste systems, and advanced lavatory systems. We also collaborate closely with our customers to provide customized cabin interior reconfiguration, program management and certification services.

NASA - National Aeronautics and Space Administration

nasa.gov

For more than 60 years, NASA has been breaking barriers to achieve the seemingly impossible—from walking on the Moon to pushing the boundaries of human spaceflight farther than ever before. We work in space and around the world in laboratories and wind tunnels, on airfields and in control rooms to explore some of life’s fundamental mysteries: What’s out there in space? How do we get there? And what can we learn that will make life better here on Earth? We are passionate professionals united by a common purpose: to pioneer the future in space exploration, scientific discovery and aeronautics research. Today, we continue NASA’s legacy of excellence and innovation through an unprecedented array of missions. We are developing the most advanced rockets and spacecraft ever designed, studying the Earth for answers to critical challenges facing our planet, improving the air transportation experience, and so much more. Join us as we reach for new heights and reveal the unknown for the benefit of humanity.

Bombardier

bombardier.com

Bombardier is a global leader in aviation, focused on designing, manufacturing, and servicing the world's most exceptional business jets. Bombardier’s Challenger and Global aircraft families are renowned for their cutting-edge innovation, cabin design, performance, and reliability. Bombardier has a worldwide fleet of approximately 5,000 aircraft in service with a wide variety of multinational corporations, charter and fractional ownership providers, governments, and private individuals. Bombardier aircraft are also trusted around the world in government and military special-mission roles leveraging Bombardier Defense’s proven expertise.   Headquartered in Greater Montréal, Québec, Bombardier operates aerostructure, assembly and completion facilities in Canada, the United States and Mexico. The company’s robust customer support network services the Learjet, Challenger and Global families of aircraft, and includes facilities in strategic locations in the United States and Canada, as well as in the United Kingdom, Germany, France, Switzerland, Italy, Austria, the UAE, Singapore, China and Australia.   For corporate news and information, including Bombardier’s Environmental, Social and Governance report, as well as the company’s plans to cover all its flight operations with Sustainable Aviation Fuel (SAF) utilizing the Book and Claim system visit bombardier.com. Learn more about Bombardier’s industry-leading products and customer service network at businessaircraft.bombardier.com. Follow us on Twitter @Bombardier.   

Federal Aviation Administration

faa.gov

The FAA is on the leading edge of a new frontier in commercial space transportation, building the next generation (NextGen) of satellite-based navigation systems, and fostering the safe integration of unmanned aerial systems into our airspace. We can only dream of what the next 50 years of American ingenuity will look like, but FAA employees will be working to ensure that the United States continues to lead the world in aerospace safety, innovation and advancements that continue to push the limits of science and technology. The FAA is an operating administration within the Department of Transportation (DOT) and a proud partner in the DOT mission to serve the United States by ensuring a fast, safe, efficient, accessible and convenient transportation system that meets our vital national interests and enhances the quality of life of the American people, today and into the future. Specifically, the FAA mission is to provide the safest, most efficient aerospace system in the world.

Turkish Aerospace

tusas.com

Türk Uçak Sanayii Anonim Ortaklığı (TUSAŞ), 28 Haziran 1973 tarihinde Türkiye'nin savunma sanayiinde dışa bağımlılığını azaltmak amacıyla Sanayi ve Teknoloji Bakanlığı bünyesinde kurulmuştur. Türk Hava Kuvvetleri'nin savaş uçağı ihtiyacının karşılanmasına yönelik olarak F-16 uçaklarının kullanılması kararı ile birlikte; F-16 uçağının üretimi, uçak üzerindeki sistemlerin entegrasyonu ve uçuş testlerini yaparak Hava Kuvvetlerimize teslim etmek üzere TUSAŞ tarafından 1984 yılında TUSAŞ Havacılık ve Uzay Sanayii A.Ş. (TAI), Türk-ABD ortak yatırım şirketi olarak 25 yıllığına kurulmuştur. 25 yıllık süreç tamamlanmadan, 2005 yılında TAI'nin yabancı hisseleri Türk hissedarlar tarafından satın alınarak şirket yeniden yapılandırılmıştır. Bu kapsamda TAI ve TUSAŞ birleşerek, TUSAŞ – Türk Havacılık ve Uzay Sanayii A.Ş. çatısı altında faaliyetlerini genişletmiş, havacılık ve uzay sanayi sistemlerinin geliştirilmesi, modernizasyonu, üretimi, sistem entegrasyonu ve yaşam döngüsü destek süreçlerinde Türkiye'nin teknoloji merkezi konumuna gelmiştir. Havacılık ve uzay sanayisinde küresel ilk yüz oyuncu arasında yer alan TUSAŞ, proje konularına bağlı olarak; • Yapısal Grubu, • Uçak Grubu, • Helikopter Grubu, • İnsansız Hava Aracı (İHA) Sistemleri Grubu, • Uzay Sistemleri Grubu, • Milli Muharip Uçak (MMU) Grubu olmak üzere altı stratejik iş merkezi bünyesinde örgütlenmiştir. Ayrıca, TUSAŞ tarafından tasarlanan/üretilen tüm ürünlerle ilgili olarak entegre lojistik destek hizmeti sağlanmaktadır.

Textron

cb textron.com

Textron Inc. is a multi-industry company that leverages its global network of aircraft, defense, industrial and finance businesses to provide customers with innovative solutions and services. Textron is known around the world for its powerful brands such as Bell, Cessna, Beechcraft, Pipistrel, Jacobsen, Kautex, Lycoming, E-Z-GO, and Textron Systems. For more information, visit: www.textron.com.

Pratt & Whitney

rtx.com

Pratt & Whitney, an RTX business, is a global leader in propulsion systems, powering the most advanced aircraft in the world, and we are shaping the future of aviation. Our engines help connect people, grow economies and defend freedom. Our customers depend on us to get where they’re going and back again.

CAE

cae.com

At CAE, we exist to make the world safer. We deliver cutting-edge training, simulation, and critical operations solutions to prepare aviation professionals and defence forces for the moments that matter. Every day, we empower pilots, cabin crew, maintenance technicians, airlines, business aviation operators, and defence and security personnel to perform at their best and when the stakes are the highest. Around the globe, we’re everywhere customers need us to be with approximately 13,000 employees at around 240 sites and training locations in over 40 countries. For nearly 80 years, CAE has been at the forefront of innovation, consistently seeking to set the standard by delivering excellence in high-fidelity flight simulators and training solutions, while embedding sustainability at the heart of everything we do. By harnessing technology and enhancing human performance, we strive to be the trusted partner in advancing safety and mission readiness - today and tomorrow.

Blue Origin

cb blueorigin.com

We are building a road to space for the benefit of Earth, humanity’s blue origin. Our team is focused on radically reducing the cost of access to space and harnessing its vast resources while mobilizing future generations to realize this mission. Blue Origin builds reusable rocket engines, launch vehicles, in-space systems, and lunar landers. Discover more at BlueOrigin.com. *We hope you engage with us and our community. However, we reserve the right to remove derogatory or off-topic comments from our social media accounts. Thank you for understanding.*

Loading…

NEWS

Embraer CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 08, 2026 07:00 AM

StarLink advances AI-driven cybersecurity at GITEX Africa 2026 with strong partnerships

StarLink, an Infinigate Group company, is bringing its vision of AI-powered cyber resilience to GITEX Africa 2026, the region's premier...

Read Article

January 01, 2026 08:00 AM

Malaysia in focus as Embraer courts airlines for E2 jets

KUALA LUMPUR: Embraer believes Malaysia represents one of the most promising untapped markets in Southeast Asia for its E2 jet family as...

Read Article

August 31, 2025 07:00 AM

Embraer Eyes MTA Jackpot As India, Brazil Cement Military Ties; Will C-390 Millennium Outdo U.S. C-130J Aircraft

While headlines these days are dominated by how U.S. President Donald Trump's unpredictable and essentially personal diplomatic pursuit is...

Read Article

June 24, 2025 07:00 AM

Embraer subsidiary Atech opens first office in Europe

Atech, A company of Embraer Group, is expanding its international presence by opening a new office in Lisbon, Portugal.

Read Article

June 15, 2025 07:00 AM

Embraer Publishes 20yrs Commercial Aviation Global Market Outlook

21. LAGOS – Embraer has published Market Outlook 2025, its annual 20-year forecast for commercial aircraft deliveries in the sub-150-seat...

Read Article

June 10, 2025 07:00 AM

Starlink shut down on United regional jets — Reports of radio interference on Embraer E175 aircraft prompt switch off

United has switched off Starlink service on its United Express regional aircraft following reports of radio interference.

Read Article

February 27, 2025 08:00 AM

Embraer Closes 2024 with Record Revenues and Growth Across All Divisions

Embraer reported significant financial and operational growth for 2024, reaching revenues of $6.395 billion, a 21% increase year-over-year (YoY).

Read Article

January 09, 2025 08:00 AM

Discover 2 Under-the-Radar Aerospace Stocks Set for 2025 Growth

Aerospace stocks have had a mixed 2024 thanks to Boeing. These 2 smaller aerospace players may be grabbing market share during Boeing's PR...

Read Article

December 23, 2024 08:00 AM

Brazil Cybersecurity Salaries: What Can You Expect to Earn?

Discover what you can expect to earn in cybersecurity in Brazil. Learn about salaries for all levels and factors influencing pay.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8718

SUMMARY

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 8.4)

cvss3

Base Score: 8.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Impact Score

5.8

Exploitability

REFERENCES

CVE-2026-48161

SUMMARY

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/dai-shi/react18-use/security/advisories/GHSA-32xh-vg5f-64fm

CVE-2026-11812

SUMMARY

The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 2.5)

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-11811

SUMMARY

The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2025-30241

SUMMARY

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.tp-link.com/us/support/faq/5239/

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…