What is the official website of Forvis Mazars in the Czech Republic ?

The official website of Forvis Mazars in the Czech Republic is http://www.forvismazars.com/cz.

What is Forvis Mazars in the Czech Republic's cybersecurity risk score?

Forvis Mazars in the Czech Republic has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Forvis Mazars in the Czech Republic experienced?

According to Rankiteo, Forvis Mazars in the Czech Republic currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Forvis Mazars in the Czech Republic been affected by any supply chain cyber incidents ?

According to Rankiteo, Forvis Mazars in the Czech Republic has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Forvis Mazars in the Czech Republic have SOC 2 Type 1 certification ?

According to Rankiteo, Forvis Mazars in the Czech Republic is not certified under SOC 2 Type 1.

Does Forvis Mazars in the Czech Republic have SOC 2 Type 2 certification ?

According to Rankiteo, Forvis Mazars in the Czech Republic does not hold a SOC 2 Type 2 certification.

Does Forvis Mazars in the Czech Republic comply with GDPR ?

According to Rankiteo, Forvis Mazars in the Czech Republic is not listed as GDPR compliant.

Does Forvis Mazars in the Czech Republic have PCI DSS certification ?

According to Rankiteo, Forvis Mazars in the Czech Republic does not currently maintain PCI DSS compliance.

Does Forvis Mazars in the Czech Republic comply with HIPAA ?

According to Rankiteo, Forvis Mazars in the Czech Republic is not compliant with HIPAA regulations.

Does Forvis Mazars in the Czech Republic have ISO 27001 certification ?

According to Rankiteo,Forvis Mazars in the Czech Republic is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Forvis Mazars in the Czech Republic operate in ?

Forvis Mazars in the Czech Republic operates primarily in the Financial Services industry.

How many employees does Forvis Mazars in the Czech Republic have ?

Forvis Mazars in the Czech Republic employs approximately 146 people worldwide.

Does Forvis Mazars in the Czech Republic own any subsidiaries ?

Forvis Mazars in the Czech Republic presently has no subsidiaries across any sectors.

How many LinkedIn followers does Forvis Mazars in the Czech Republic have ?

Forvis Mazars in the Czech Republic's official LinkedIn profile has approximately 72,301 followers.

Does Forvis Mazars in the Czech Republic have a Crunchbase profile ?

No, Forvis Mazars in the Czech Republic does not have a profile on Crunchbase.

Does Forvis Mazars in the Czech Republic have a LinkedIn profile ?

Yes, Forvis Mazars in the Czech Republic maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/forvismazarscz.

How many cybersecurity incidents has Forvis Mazars in the Czech Republic experienced ?

As of October 20, 2026, Rankiteo reports that Forvis Mazars in the Czech Republic has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Forvis Mazars in the Czech Republic have ?

Forvis Mazars in the Czech Republic has an estimated 32,983 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

FMCR

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Forvis Mazars in the Czech Republic Vendor Cyber Rating & Cyber Score

forvismazars.com

Add Your Compliance Badge

Forvis Mazars Group SC is an independent member of Forvis Mazars Global, a leading global professional services network. Operating as an internationally integrated partnership in over 100 countries and territories, Forvis Mazars Group specialises in audit, tax and advisory services.

FMCR

Forvis Mazars in the Czech Republic CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Forvis Mazars in th...

Breach

10/2025

MAZ273272710212...

Forvis Mazars in th...

Breach

10/2012

MAZ304091825

Loading…

A.I.

FMCR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for FMCR

Incidents vs Financial Services Industry Avg (This Year)

No incidents recorded for Forvis Mazars in the Czech Republic in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Forvis Mazars in the Czech Republic in 2026.

Incident Types FMCR vs Financial Services Industry Avg (This Year)

No incidents recorded for Forvis Mazars in the Czech Republic in 2026.

Incident History - FMCR (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Forvis Mazars in the Czech Republic Subsidiaries

FMCR

Financial Services

Website: http://www.forvismazars.com/cz

Company Size: 146

MazarsAccounting

Forvis Mazars no BrasilAccounting

Labor, Payroll & HR ConsultingFinancial Services

Mazars in the UKAccounting

Forvis Mazars in South AfricaAccounting

Forvis Mazars TurkeyAccounting

Girişimcilik VitriniFinansal Hizmetler

China Desk (Forvis Mazars Türkiye)Finansal Hizmetler

Süreklilikten SürdürülebilirliğeÇevrimiçi Ses ve Video Medyası

Forvis Mazars Türkiye ve SürdürülebilirlikFinansal Hizmetler

Mazars in IrelandAccounting

Mazars in USAccounting

Mazars PortugalFinancial Services

Forvis Mazars in SwedenBusiness Consulting and Services

Forvis Mazars en VenezuelaAccounting

Forvis Mazars in UkraineFinancial Services

Forvis Mazars in MadagascarAccounting

Forvis Mazars in LebanonAccounting

Forvis Mazars in PakistanBusiness Consulting and Services

Forvis Mazars in CroatiaFinancial Services

Mazars in AlgeriaFinancial Services

Forvis Mazars in Albania & KosovoAccounting

Forvis Mazars in ChinaAccounting

MAZARS Japan DeskAccounting

Forvis Mazars in IndonesiaAccounting

Forvis Mazars in SwitzerlandProfessional Services

Forvis Mazars in MexicoAccounting

Forvis Mazars in SingaporeAccounting

Mazars in NederlandFinancial Services

Forvis Mazars in BelgiumFinancial Services

Forvis Mazars, CanadaAccounting

Forvis Mazars in VietnamAccounting

Loading…

Forvis Mazars in the Czech Republic Similar Companies

Santander US

santanderus.com

Santander’s purpose is to help people and businesses prosper. In the United States, Santander is a leading financial services provider with approximately 11,000 employees, 4.3 million customers, and assets of $243 billion, as of Q4 2025. Our five diverse and growing business segments include: Auto, Retail Banking, Commercial Banking, Corporate & Investment Banking, and Wealth Management. Serving people and businesses with trusted products and solutions under the Santander and Openbank brands, we maintain hubs in several locations, including Boston, Massachusetts; Dallas, Texas; Miami, Florida; and New York, New York. Santander US is part of Madrid-based Banco Santander, S.A. (NYSE: SAN), recognized as one of the world’s most admired companies by Fortune Magazine in 2026, with approximately 180 million customers across the world, including North America, Europe, and Latin America. Backed by the strength and stability of one of the world’s largest financial providers, we offer our clients global connectivity with local delivery.

First American

cb firstam.com

First American Financial Corporation is a premier provider of title, settlement and risk solutions for real estate transactions. With its combination of financial strength and stability built over more than 130 years, innovative proprietary technologies, and unmatched data assets, the company is leading the digital transformation of its industry. First American also provides data products to the title industry and other third parties; valuation products and services; mortgage subservicing; home warranty products; banking, trust and wealth management services; and other related products and services. First American serves home buyers and sellers, real estate professionals, loan originators and servicers, commercial property professionals, homebuilders and others involved in residential and commercial property transactions with products and services specific to their needs. With total revenue of $9.2 billion in 2021, the company offers its products and services directly and through its agents throughout the United States and abroad.

IFC - International Finance Corporation

cb ifc.org

IFC, a member of the World Bank Group, is the largest global development institution focused exclusively on the private sector in developing countries. We utilize and leverage our products and services—as well as products and services of other institutions in the World Bank Group—to provide development solutions customized to meet clients’ needs. We apply our financial resources, technical expertise, global experience, and innovative thinking to help our partners overcome financial, operational, and political challenges. Clients view IFC as a provider and mobilizer of scarce capital, knowledge, and long-term partnerships that can help address critical constraints in areas such as finance, infrastructure, employee skills, and the regulatory environment. IFC is also a leading mobilizer of third-party resources for its projects. Our willingness to engage in difficult environments and our leadership in crowding-in private finance enable us to extend our footprint and have a development impact well beyond our direct resources. For more information, visit www.ifc.org. https://youtube.com/shorts/UWDx7dWuPgg?feature=share

Mizuho

mizuhogroup.com

This is not your typical financial institution. It’s our people who make us a cut above. Here, every person is respected because of their differences, not in spite of them. We pride ourselves on a culture of purpose, passion and compassion. At Mizuho, we provide the stability of an international industry leader with the career trajectory of a growing business. Our steady, strategic growth gives our people at all levels rewarding degrees of responsibility and a richer work experience than a boutique firm or an established giant could offer alone. Working for Mizuho opens doors not just to a rewarding career with excellent prospects, but to lasting friendships with colleagues from diverse cultures. It’s the local expertise of our employees that makes our global network so powerful. By collaborating with colleagues and clients who have your same ambition, you can amplify your sphere of influence and base of knowledge as part of one of the largest—and growing—banks in the world. We’re all global citizens, and that’s why our company feels compelled to make an impact through more than just drawing up deals. We prove that it’s possible to do well and do good. We do right by our clients, our community and each other.

Manappuram Finance Limited

cb manappuram.com

Manappuram Finance Ltd. is one of India’s largest and most trusted gold loan companies, with 4,199 branches across the length and breadth of the country. It currently has nearly Rs. 157.65 billion worth assets under management (AUM), and 20,185 employees. Promoted by Shri. V.P. Nandakumar, the current MD & CEO, the company was founded in the modest coastal village of Valapad (Thrissur District) by his late father Mr. V.C. Padmanabhan in 1949. The first non-banking financial company (NBFC) in Kerala to receive a Certificate of Registration issued by the RBI, it was also among the earliest to go for an IPO in 1995. In 2007 Sequoia Capital invested Rs.700 million along with Hudson Equity Holdings, heralding a period of accelerated growth, and in 2010 it became the first NBFC in Kerala to obtain the highest short term credit rating of A1+ from ICRA. In 2010, it became the first Kerala-based NBFC to offer ESOPs (Employee Stock Option Plan) to its middle and senior management functionaries. As a pioneer and trailblazer, Manappuram Finance Ltd. has always been an innovator par excellence in the gold loan product and the adoption of technology. Besides focus on the business, the cause of the wider community is central to the vision of the company. The Manappuram Foundation was established in October 2009 to drive the company’s initiatives in Corporate Social Responsibility (CSR). In recent years, the company has diversified into new business areas like micro-finance, vehicle and housing finance, and SME lending through the subsidiaries Manappuram Home Finance Ltd, Manappuram Insurance Brokers Ltd, and Asirvad Microfinance Limited. Our mission is to make life easy for common people of India with instant and easy loans, with a vision of unlocking the value of their savings in gold jewellery.

Aditya Birla Capital

adityabirlacapital.com

Aditya Birla Capital Ltd is a financial services company based out of One World Center, Tower 1, 18th Floor, Jupiter Mills Compound, 841, Senapati Bapat Marg, Elphinstone Road, MUMBAI, India. - Aditya Birla Capital is committed to provide equal opportunity to all in employment and prohibits discrimination or harassment in any form on the basis of race, colour, religion, ethnicity, age, gender, disability or any other characteristic protected by law. Diversity, Equity and Inclusion (DEI) is embedded in our recruitment policies based on our business needs and candidates meeting the eligibility criteria such as qualification, skills and experience.

Broadridge

broadridge.com

Broadridge Financial Solutions (NYSE: BR) is a global technology leader with the trusted expertise and transformative technology to help clients and the financial services industry operate, innovate, and grow. We power investing, governance, and communications for our clients – driving operational resiliency, elevating business performance, and transforming investor experiences. Our technology and operations platforms process and generate over 7 billion communications per year and underpin the daily trading of more than $10 trillion of securities globally. A certified Great Place to Work®, Broadridge is part of the S&P 500® Index, employing over 14,000 associates in 21 countries. For more information, please visit www.broadridge.com.

XP Inc.

xpinc.com

A XP Inc. é uma das maiores instituições financeiras independente do Brasil, dona das marcas XP, Rico, Clear, XP Educação, InfoMoney, entre outras. Com mais de 4,8 milhões de clientes ativos e um valor superior a R$ 2,2 trilhão de ativos sob custódia, há 25 anos vem transformando o mercado financeiro para melhorar a vida das pessoas. Foi pioneira no mercado com sua rede de assessores de investimentos, que hoje é a maior do país, com mais de 18,3 mil profissionais. Com uma cultura marcante guiada por quatro valores - Sonho Grande, Espírito Empreendedor, Foco no Cliente e Mente Aberta - a XP Inc. está sempre em busca dos melhores talentos que tem ambição de fazer o impossível.

American Express

americanexpress.com

At American Express, we know that with the right backing, people and businesses have the power to progress in incredible ways. Whether we’re supporting our customers’ financial confidence to move ahead, taking commerce to new heights, or encouraging people to explore the world, our colleagues are constantly striving to uphold our powerful backing promise to our customers and each other every day. These beliefs have been our North Star for 170 years as our business transformed – from helping evacuate travelers during World Wars, to ensuring the safety of our customers’ funds during the Great Depression in the U.S., to creating the Shop Small® movement to help small businesses recover from the Financial Crisis, to providing aid to communities impacted by many natural disasters and so much more. For generations, the key to our success has been the determination and resilience of our American Express colleagues. Now, as a globally integrated payments company, we work together to provide customers with access to products, insights and world-class experiences that enrich lives and build business success. Join us and let’s lead the way together. Learn more about us at: https://www.americanexpress.com/careers https://www.americanexpress.com/ https://www.facebook.com/AmericanExpressUS https://www.instagram.com/americanexpress/ https://twitter.com/americanexpress https://www.youtube.com/user/AmericanExpress See our community guidelines at: https://www.americanexpress.com/en-us/company/community-guidelines/ If you have a customer service issue or question, please visit www.americanexpress.com/contactus

Loading…

NEWS

Forvis Mazars in the Czech Republic CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Microsoft Issues Critical SharePoint Vulnerability Alert

Microsoft has issued an alert for a critical SharePoint vulnerability, urging immediate action to counter the widespread zero-day exploit ...

Read Article

2025 IIA Cybersecurity Topical Requirement: What IAFs Should Know

See what internal audit functions should know about the mandatory minimum requirements in the IIA Cybersecurity Topical Requirement.

Read Article

Data Risks & Cybersecurity for U.S. Entities Expanding Internationally

Disparate systems, outdated technologies, or inconsistent security measures can create vulnerabilities during and after integration, and the ...

Read Article

Cyber Trends to Anticipate in 2025

While cyberthreats are likely to increase this year, there are proactive steps employers can take. Read on for some predictions and tips.

Read Article

Cybersecurity Insights: Video Series to Help You Protect Your Business

At Forvis Mazars, we understand that the ever-evolving cybersecurity landscape presents unique challenges across industries.

Read Article

Growth Trends & Risks Within the Gaming Industry

Ready, player one? The gaming industry is a hub for expansion and change, rife with economic potential for gaming software companies and ...

Read Article

The Top Accounting & Auditing Takeaways for Healthcare Entities

Read on for trending topics for healthcare organizations, including cybersecurity challenges and what to expect from Washington after last ...

Read Article

The Importance of AI Governance

With inevitable AI regulations on the way, organizations can take steps now to lay the groundwork for responsible and secure AI deployment.

Read Article

An Overview of CMMC 2.0

Read about the rollout of the Cybersecurity Maturity Model Certification (CMMC) 2.0 program and its implications for defense contractors' cybersecurity ...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Forvis Mazars in the Czech Republic Vendor Cyber Rating & Cyber Score

FMCR A.I CyberSecurity Scoring

Forvis Mazars in the Czech Republic CyberSecurity News & History

FMCR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for FMCR

Incidents vs Financial Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types FMCR vs Financial Services Industry Avg (This Year)

Incident History - FMCR (X = Date, Y = Severity)

Forvis Mazars in the Czech Republic Subsidiaries

FMCR

Forvis Mazars in the Czech Republic Similar Companies

Santander US

First American

IFC - International Finance Corporation

Mizuho

Manappuram Finance Limited

Aditya Birla Capital

Broadridge

XP Inc.

American Express

Forvis Mazars in the Czech Republic CyberSecurity News

Microsoft Issues Critical SharePoint Vulnerability Alert

2025 IIA Cybersecurity Topical Requirement: What IAFs Should Know

Data Risks & Cybersecurity for U.S. Entities Expanding Internationally

Cyber Trends to Anticipate in 2025

Cybersecurity Insights: Video Series to Help You Protect Your Business

Growth Trends & Risks Within the Gaming Industry

The Top Accounting & Auditing Takeaways for Healthcare Entities

The Importance of AI Governance

An Overview of CMMC 2.0

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Forvis Mazars in the Czech Republic CyberSecurity News & History

FMCR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for FMCR

Incidents vs Financial Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types FMCR vs Financial Services Industry Avg (This Year)

Incident History - FMCR (X = Date, Y = Severity)

Forvis Mazars in the Czech Republic Subsidiaries

FMCR

Forvis Mazars in the Czech Republic Similar Companies

Santander US

First American

IFC - International Finance Corporation

Mizuho

Manappuram Finance Limited

Aditya Birla Capital

Broadridge

XP Inc.

American Express

Forvis Mazars in the Czech Republic CyberSecurity News

Microsoft Issues Critical SharePoint Vulnerability Alert

2025 IIA Cybersecurity Topical Requirement: What IAFs Should Know

Data Risks & Cybersecurity for U.S. Entities Expanding Internationally

Cyber Trends to Anticipate in 2025

Cybersecurity Insights: Video Series to Help You Protect Your Business

Growth Trends & Risks Within the Gaming Industry

The Top Accounting & Auditing Takeaways for Healthcare Entities

The Importance of AI Governance

An Overview of CMMC 2.0

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo