What is the official website of Koninklijke Gazelle ?

The official website of Koninklijke Gazelle is https://www.gazelle.nl.

What is Koninklijke Gazelle's cybersecurity risk score?

Koninklijke Gazelle has an AI-generated cybersecurity risk score of 763 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Koninklijke Gazelle experienced?

According to Rankiteo, Koninklijke Gazelle currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Koninklijke Gazelle been affected by any supply chain cyber incidents ?

According to Rankiteo, Koninklijke Gazelle has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Koninklijke Gazelle have SOC 2 Type 1 certification ?

According to Rankiteo, Koninklijke Gazelle is not certified under SOC 2 Type 1.

Does Koninklijke Gazelle have SOC 2 Type 2 certification ?

According to Rankiteo, Koninklijke Gazelle does not hold a SOC 2 Type 2 certification.

Does Koninklijke Gazelle comply with GDPR ?

According to Rankiteo, Koninklijke Gazelle is not listed as GDPR compliant.

Does Koninklijke Gazelle have PCI DSS certification ?

According to Rankiteo, Koninklijke Gazelle does not currently maintain PCI DSS compliance.

Does Koninklijke Gazelle comply with HIPAA ?

According to Rankiteo, Koninklijke Gazelle is not compliant with HIPAA regulations.

Does Koninklijke Gazelle have ISO 27001 certification ?

According to Rankiteo,Koninklijke Gazelle is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Koninklijke Gazelle operate in ?

Koninklijke Gazelle operates primarily in the Manufacturing industry.

How many employees does Koninklijke Gazelle have ?

Koninklijke Gazelle employs approximately 409 people worldwide.

Does Koninklijke Gazelle own any subsidiaries ?

Koninklijke Gazelle presently has no subsidiaries across any sectors.

How many LinkedIn followers does Koninklijke Gazelle have ?

Koninklijke Gazelle's official LinkedIn profile has approximately 11,932 followers.

What is the NAICS classification code for Koninklijke Gazelle ?

Koninklijke Gazelle is classified under the NAICS code 30, which corresponds to Manufacturing.

Does Koninklijke Gazelle have a Crunchbase profile ?

No, Koninklijke Gazelle does not have a profile on Crunchbase.

Does Koninklijke Gazelle have a LinkedIn profile ?

Yes, Koninklijke Gazelle maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/gazelle.

How many cybersecurity incidents has Koninklijke Gazelle experienced ?

As of September 9, 2026, Rankiteo reports that Koninklijke Gazelle has not experienced any cybersecurity incidents.

How many peer or competitor companies does Koninklijke Gazelle have ?

Koninklijke Gazelle has an estimated 8,237 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Koninklijke Gazelle

Boost Score +25 with badge (5 left)

763

/1000

Fair

788

/1000

Fair

Koninklijke Gazelle Vendor Cyber Rating & Cyber Score

gazelle.nl

Add Your Compliance Badge

Al meer dan 130 jaar zijn we als Koninklijke Gazelle een toonaangevend fietsenmerk in Nederland. We koesteren onze rijke geschiedenis en vakmanschap, maar altijd met de blik op een duurzame toekomst. De liefde voor de fiets, de fietser en de wereld om ons heen vind je terug in onze topkwaliteit, innovatie en design. Én hoe we met elkaar samen werken.

Koninklijke Gazelle

Koninklijke Gazelle CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Koninklijke Gazelle Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Koninklijke Gazelle

Incidents vs Manufacturing Industry Avg (This Year)

No incidents recorded for Koninklijke Gazelle in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Koninklijke Gazelle in 2026.

Incident Types Koninklijke Gazelle vs Manufacturing Industry Avg (This Year)

No incidents recorded for Koninklijke Gazelle in 2026.

Incident History - Koninklijke Gazelle (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Koninklijke Gazelle Subsidiaries

Koninklijke Gazelle

Manufacturing

Website: https://www.gazelle.nl

Company Size: 409

PonInternational Trade and Development

Pon AutomotiveMotor Vehicle Manufacturing

SEAT NederlandProductie motorvoertuigen

Porsche NederlandAuto-industrie

Škoda NederlandProductie motorvoertuigen

Pon Business MobilityProductie motorvoertuigen

Volkswagen NederlandProductie motorvoertuigen

Audi NederlandProductie motorvoertuigen

W&O, a Vytl CompanyMaritime Transportation

EMI MarineMaritime Transportation

Georg Fischer Engineered Piping SystemsMaritime

W&O for: Naval AchitectsMaritime Transportation

MAN Rollo B.V.Engines and Power Transmission Equipment Manufacturing

Topec BVIndustrial Machinery Manufacturing

Van den Udenhout GroepMotor Vehicle Manufacturing

Pon Equipment & Pon Rental Norway ASConstruction

Pon Rental NorgeBygg og anlegg

Verachtert Nederland B.V.Machinery Manufacturing

VUWTCGroothandel import en export

Kamsteeg Auto Lease B.V.Motor Vehicle Manufacturing

Topec Waste 2 Energy (part of PON)Renewable Energy Semiconductor Manufacturing

Banden ExpressMotor Vehicle Manufacturing

Pon DealerAutomotive

CervéloSporting Goods Manufacturing

Automated Valve And Control (a PON company)Oil and Gas

Machinefabriek BolierRepair and Maintenance

SITECH Norway ASConstruction

Wealer AutogroepMotor Vehicle Manufacturing

Wealer VolkswagenVehicle Repair and Maintenance

Wealer Volkswagen BedrijfswagensVehicle Repair and Maintenance

Wealer AudiVehicle Repair and Maintenance

Wealer SEATVehicle Repair and Maintenance

Union FietsenRetail

Auto HoogenboomMotor Vehicle Manufacturing

Loading…

Koninklijke Gazelle Similar Companies

Bajaj Auto Ltd

bajajauto.com

A journey that began 75 years ago in a corner of India and has since traversed the world over. Uniting people from across countries, cultures, and customs over the years with a multitude of different dreams, there's power in an idea. An idea that gave rise to brands that stood the test of time, with partnerships it inspired, and the people who made it all happen. One idea that sparked a legacy - this is the story of Bajaj Auto. “Do what you think is best, but be the best in what you do.” - Kamalnayan Bajaj These words embody the spirit of Bajaj Auto. From 1945 to today, from “Hamara Bajaj” to “The World’s Favourite Indian”- the most loved motorcycle brand in almost 80 countries, Bajaj Auto carries its rich legacy and unconventional thinking, with a penchant for staunch differentiation. This philosophy has helped us be No.1 or No.2 in over 20 countries with industry-leading EBITDA of ~20%. Some statistics that reflect our strength: • A Zero Debt 5.5 Billion Dollar Company • World’s largest three-wheeler and third-largest two-wheeler manufacturer • India’s Number 1 motorcycle exporter – 2 out of every 3 motorcycles exported are Bajaj • The largest exporter of Branded Goods – exporting over half of India’s two and three-wheelers • Over 33% of revenue from International markets with 15+ million motorcycles sold With powerful brands, our spectrum ranges from Boxer in Africa to KTM in Europe, from Rouser in Latin America to Pulsar in India, our versatility is evident. International alliances with KTM, Husqvarna, and Triumph have ensured that our horizons are broadened. A pioneer in motorcycle technology, our R&D is world-class with talent from all corners of the globe with TPM being the prime mover of productivity for the last 25+ years. From lean manufacturing, we have now moved to lean engineering & lean marketing, which has led to globally competitive fixed costs. With ever-expanding plans to win over the world, the sun truly never sets on a Bajaj Motorcycle.

Yıldız Holding

yildizholding.com.tr

Yıldız Holding’in 1944 yılında İstanbul’da bisküvi üretimiyle başlayan hikâyesi, bugün 300’den fazla markayla 5 kıtada 4 milyar insana ulaştırdığımız gıda-atıştırmalık ürünlerimizle ve Türkiye’nin her noktasındaki perakende şirketlerimizle devam ediyor. Kökleri Türkiye’den beslenen, dalları ise dünyanın farklı coğrafyalarına uzanan global bir yapı içinde ülkemizi uluslararası arenada temsil ediyor, Türkiye’nin “Yıldız”ı olmanın mutluluğunu yaşıyoruz. Çoğunluğu Türkiye’de bulunan 80 bin çalışanımızla durmaksızın daha iyiye ulaşmayı amaçlıyor, 20’si yurt dışında olmak üzere toplam 45 fabrikamızda bisküviden çikolataya, dondurulmuş gıdadan ambalaja kadar geniş bir yelpazede üretim yapıyoruz. Ekonomik katkıda, istihdamda, ihracatta, sosyal dayanışmada ve sürdürülebilirlikte çıtayı daima yükseltiyoruz. “Mutlu Et Mutlu Ol” ilkesiyle toplumsal katkıya öncelik veriyor, gerek ürünlerimiz gerek hizmetlerimiz gerekse sürdürülebilir sosyal sorumluluk anlayışımızla 80 yılı aşkın süredir mutluluk üretiyoruz. Yıldız Holding’de ülkemiz için durmaksızın çalışıyor, bugüne değer katıyor, geleceğe yatırım yapıyoruz.

Kellogg Company

kelloggcompany.com

At Kellanova, our vision is to be the world’s best performing snacks-led powerhouse, unleashing the full potential of our differentiated brands and our passionate people. Powered by our strategy to Differentiate, Drive & Deliver, we are a leading company in global snacking, international cereal and noodles, and North America frozen foods, with iconic, world-class brands and strong underlying growth momentum and profitability. Our purpose is to create better days and a place at the table for everyone through our trusted foods brands. As part of this purpose, we are committed to advancing sustainable & equitable access to food by creating Better Days for 4 billion people by the end of 2030.

Essity

essity.com

Essity - a globally leading hygiene and health company. Our expertise in hygiene and health began with the acquisition of the Swedish company Mölnlycke in 1975, through which our roots stretch back to 1849. Today, our sustainable innovations from globally trusted brands, designed for everybody and every body, care for the well-being of 1 billion people in 150 countries every day. Working at Essity is not just a career but a chance to make the world healthier, safer, and more hygienic. Our barrier breakers innovate for good and contribute to shaping a sustainable future. At Essity, every career is as unique as the individual. We empower employees to excel together and reach their full potential in a winning culture motivated by a powerful purpose. We provide a sustainable work-life based on flexibility for both employees and employers. At Essity, we are committed to Diversity, Equity, and Inclusion in everything we do. It is the key to our success in creating an inclusive, collaborative, and caring company culture where you can be you with us. Our purpose of Breaking Barriers to Well-being, is to enable customers and consumers to lead fuller lives at all stages of life. Our leading global brands TENA and Tork, and other strong brands such as Actimove, Cutimed, JOBST, Knix, Leukoplast, Libero, Libresse, Lotus, Modibodi, Nosotras, Saba, Tempo, TOM Organic and Zewa. In 2024, Essity had net sales of approximately SEK 146bn (EUR 13bn) and employed 36,000 people. The company’s headquarters is located in Stockholm, Sweden and Essity is listed on Nasdaq Stockholm.If you want to join a company where dedication to people is powered by innovation, welcome to Essity!

EssilorLuxottica

cb essilorluxottica.com

We are EssilorLuxottica, a global leader in the design, manufacture and distribution of advanced vision care products, eyewear and med-tech solutions. Our Mission is to help people around the world to see more and be more by addressing their evolving vision needs, personal style aspirations and desire to feel more connected to the world around them. We are home to the most innovative lens technologies, including Varilux, Stellest and Transitions, iconic brands such as Ray-Ban, Oakley and Supreme, the most desired luxury licensed brands and world-class retailers including Sunglass Hut, LensCrafters, Vision Express and Apollo. Backed by robust R&D investments, distinctive capabilities and a top-quality asset portfolio, we drive innovation across categories, from cutting edge medical instruments and solutions for eye health to category-defining smart glasses, all of which push the boundaries of the industry and reimagine the eyes as a gateway to new possibilities. With over 200,000 employees across 150 countries, 600 operations facilities, serving 300,000 eye care professionals and operating 18,000 stores, the Group generated consolidated revenue of Euro 26.5 billion in 2024. Our OneSight EssilorLuxottica Foundation has given access to sustainable vision care to nearly 1 billion people in underserved communities. Our ambition is clear. We are building a platform where the eyes are the gateway to new possibilities – bridging the gap between the digital world and human experience. At EssilorLuxottica, we are Empowering Humans.

Asian Paints

asianpaints.com

They say home is where the heart is. Which is why, since 1942, we’ve been helping customers transform empty properties to homes by dressing them up in warm hues, pastel shades and cool colours, to create spaces that truly represent you. Asian Paints has a lot of identities. We have been India’s largest paint company for almost 50 years and are part of the top 10 decorative paint companies worldwide. We have operations in 14 countries, and manufacturing facilities in 27 global locations. Having subsidiaries in India and abroad, Asian Paints encompasses the best of Indian and global traits, homegrown and international qualities. Our subsidiaries are Berger International, Scib, Taubman, Apco, Ess Ess. We have joint ventures with PPG in automotive and industrial paints and Sleek International Modular Kitchens. With different strokes for all types of folks, we have paints ranging from luxury enamels to economic quality distemper in all shades imaginable. Despite our phenomenal growth in the paint segment, we didn’t just stop there. We expanded with our wallpaper range - Nilaya, wall stencils, wood finishes, adhesives and waterproofing solutions. We listened to our customers when they asked for hassle-free painting services and now provide end-to-end servicing in multiple cities. We constantly innovate with service offerings – from colour consultancy at home, online consultancy services, to providing inspiration centres through Colour stores. Our reputation often precedes us but we have never let that be our resting laurel. We constantly strive to push boundaries – not only by creating more sustainable ways of carrying out extensive community initiatives that touch the lives of people, but also through our operations. Our people are passionate, innovative and work with integrity. Our actions reflect these values and our businesses across the globe ensure they maintain the quality of work and standards of excellence we are known for.

Electrolux Group

electroluxgroup.com

Electrolux Group is a leading global appliance company that has shaped living for the better for more than 100 years. We reinvent taste, care and wellbeing experiences for millions of people, always striving to be at the forefront of sustainability in society through our solutions and operations. Under our group of leading appliance brands, including Electrolux, AEG and Frigidaire, we sell household products in around 120 markets every year. In 2024 Electrolux Group had sales of SEK 136 billion and employed approximately 41,000 people around the world. For more information go to www.electroluxgroup.com Comment moderation guidelines: We welcome open, respectful and constructive conversation on this page. At Electrolux Group, our values of respect, dignity and courtesy guide how we engage online, and we ask that all contributions align with these principles and LinkedIn’s Community Guidelines and User Agreement. To ensure a safe and inclusive environment, we reserve the right to remove comments that are abusive, offensive, disruptive, misleading or false, repetitive or off-topic. We may also block or report users who repeatedly violate these guidelines. Please note that comments posted here do not necessarily reflect the views of Electrolux Group.

SC Johnson

scjohnson.com

We’re SC Johnson, a family company at work for a better world™. We are a leading manufacturer of household cleaning products and products for home storage, air care, pest control, shoe care and professional products. SC Johnson’s high-quality products and iconic brands include OFF!®, Raid®, Glade®, Windex®, Scrubbing Bubbles®, Ziploc®, Mrs. Meyer’s® Clean Day, method®, Autan®, Baygon®, Mr Muscle®, Duck®, Lysoform® and more, and are in homes, schools and businesses in virtually every country worldwide. We’re a fifth-generation, family-owned and led company with 13,000 employees and operations in 70 countries. Founded in 1886 and headquartered in Racine, Wisconsin, we believe that a more sustainable, healthier and transparent world that inspires people and creates opportunities isn't just possible – it's our responsibility. SC Johnson includes both SC Johnson Professional, providing solutions to healthcare, industrial and institutional markets, and SC Johnson Lifestyle Brands, a growing house of like-minded brands working together for bold, transformative growth. Learn more about SC Johnson on our LinkedIn “Life” tab, at https://scjohnson.com or https://jobs.scjohnson.com.

Alpargatas S.A.

alpargatas.com.br

We are a global company, founded and based in Brazil for over 115 years. We are committed to delight the world with amazing brands, that convey lightness and joy to the everyday lives of our consumers. We own Havaianas brand, world leader in open shoes, known for the iconic flip-flops that represent Brazilianness, comfort and style. We have 49.2% of Rothy’s a north-american sustainable footwear Brand. The Havaianas brand is one of the largest open-toe footwear brands in the world, with a significant presence and operation in dozens of countries. Rothy’s is present in the United States. Our growth is based on sustainability and economy, always valuing the socio-environmental responsibility of our operations. Our supply chain is vertical, with four manufacturing units in Brazil, and we own ioasys, our digital transformation company. We are more than 10 thousand employees, passionate about make it happen, who want to inspire the world to walk a lighter path. #WeAreAlpaLovers – Inspired by consumers and we walk together to make it happen!

Loading…

NEWS

Koninklijke Gazelle CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86564

SUMMARY

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-55250

SUMMARY

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-53639

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r

CVE-2026-53638

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp

CVE-2026-53637

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Koninklijke Gazelle Vendor Cyber Rating & Cyber Score

Koninklijke Gazelle A.I CyberSecurity Scoring

Koninklijke Gazelle CyberSecurity News & History

Koninklijke Gazelle Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Koninklijke Gazelle

Incidents vs Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Koninklijke Gazelle vs Manufacturing Industry Avg (This Year)

Incident History - Koninklijke Gazelle (X = Date, Y = Severity)

Koninklijke Gazelle Subsidiaries

Koninklijke Gazelle

Koninklijke Gazelle Similar Companies

Bajaj Auto Ltd

Yıldız Holding

Kellogg Company

Essity

EssilorLuxottica

Asian Paints

Electrolux Group

SC Johnson

Alpargatas S.A.

Koninklijke Gazelle CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Koninklijke Gazelle CyberSecurity News & History

Koninklijke Gazelle Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Koninklijke Gazelle

Incidents vs Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Koninklijke Gazelle vs Manufacturing Industry Avg (This Year)

Incident History - Koninklijke Gazelle (X = Date, Y = Severity)

Koninklijke Gazelle Subsidiaries

Koninklijke Gazelle

Koninklijke Gazelle Similar Companies

Bajaj Auto Ltd

Yıldız Holding

Kellogg Company

Essity

EssilorLuxottica

Asian Paints

Electrolux Group

SC Johnson

Alpargatas S.A.

Koninklijke Gazelle CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo