What is the official website of Avio Aero ?

The official website of Avio Aero is http://www.avioaero.com/.

What is Avio Aero's cybersecurity risk score?

Avio Aero has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Avio Aero experienced?

According to Rankiteo, Avio Aero currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Avio Aero been affected by any supply chain cyber incidents ?

According to Rankiteo, Avio Aero has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Avio Aero have SOC 2 Type 1 certification ?

According to Rankiteo, Avio Aero is not certified under SOC 2 Type 1.

Does Avio Aero have SOC 2 Type 2 certification ?

According to Rankiteo, Avio Aero does not hold a SOC 2 Type 2 certification.

Does Avio Aero comply with GDPR ?

According to Rankiteo, Avio Aero is not listed as GDPR compliant.

Does Avio Aero have PCI DSS certification ?

According to Rankiteo, Avio Aero does not currently maintain PCI DSS compliance.

Does Avio Aero comply with HIPAA ?

According to Rankiteo, Avio Aero is not compliant with HIPAA regulations.

Does Avio Aero have ISO 27001 certification ?

According to Rankiteo,Avio Aero is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Avio Aero operate in ?

Avio Aero operates primarily in the Aviation and Aerospace Component Manufacturing industry.

How many employees does Avio Aero have ?

Avio Aero employs approximately 3,369 people worldwide.

Does Avio Aero own any subsidiaries ?

Avio Aero presently has no subsidiaries across any sectors.

How many LinkedIn followers does Avio Aero have ?

Avio Aero's official LinkedIn profile has approximately 105,230 followers.

What is the NAICS classification code for Avio Aero ?

Avio Aero is classified under the NAICS code 3364, which corresponds to Aerospace Product and Parts Manufacturing.

Does Avio Aero have a Crunchbase profile ?

No, Avio Aero does not have a profile on Crunchbase.

Does Avio Aero have a LinkedIn profile ?

Yes, Avio Aero maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/geavioaero.

How many cybersecurity incidents has Avio Aero experienced ?

As of August 11, 2026, Rankiteo reports that Avio Aero has not experienced any cybersecurity incidents.

How many peer or competitor companies does Avio Aero have ?

Avio Aero has an estimated 2,842 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Avio Aero

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

Avio Aero Vendor Cyber Rating & Cyber Score

avioaero.com

Add Your Compliance Badge

Avio Aero is a GE Aerospace company specialized in the design, production and maintenance of components and systems for the civil and military aeronautical industry. Today the company delivers the innovative technological solutions its customers need to respond rapidly to the ever-changing demands of the market, including additive manufacturing, rapid prototyping and units for lean manufacturing of transmissions, turbines and combustors. Headquartered in Italy, Avio Aero has major facilities in Rivalta di Torino, Pomigliano d’Arco (Naples) and Brindisi. It has more than 5,700 employees worldwide, including around 4,600 in Italy, and a production facility in Poland and one in the Czech Republic. As a result of its continuous R&D

Avio Aero A.I CyberSecurity Scoring

Scoring History

Avio Aero

Avio Aero CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Avio Aero Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Avio Aero

Incidents vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)

No incidents recorded for Avio Aero in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Avio Aero in 2026.

Incident Types Avio Aero vs Aviation and Aerospace Component Manufacturing Industry Avg (This Year)

No incidents recorded for Avio Aero in 2026.

Incident History - Avio Aero (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Avio Aero Subsidiaries

Avio Aero

Aviation and Aerospace Component Manufacturing

Website: http://www.avioaero.com/

Company Size: 3,369

GE AerospaceAviation and Aerospace Component Manufacturing

GE Aerospace ResearchAirlines and Aviation

UnisonAviation and Aerospace Component Manufacturing

GE AdditiveMachinery Manufacturing

GEIndustrial Machinery Manufacturing

GE HealthCareHospitals and Health Care

GE Grid SolutionsElectric Power Transmission, Control, and Distribution

GE CapitalFinancial Services

EcomaginationRenewable Energy Semiconductor Manufacturing

GE DigitalSoftware Development

GEGovernment Relations Services

GE Appliances, a Haier companyManufacturing

Industrial InternetInformation Technology & Services

GE Lighting, a Savant companyComputers and Electronics Manufacturing

Future of WorkIT Services and IT Consulting

GE Artesia BankBanking

GE Transportation, a Wabtec companyTruck Transportation

GE ResearchResearch

Dowty, a GE Aerospace companyAviation and Aerospace Component Manufacturing

GE Aerospace, Software as a ServiceAirlines and Aviation

GE Aerospace’s TrueChoice ServicesAirlines and Aviation

Loading…

Avio Aero Similar Companies

CAE

cae.com

At CAE, we exist to make the world safer. We deliver cutting-edge training, simulation, and critical operations solutions to prepare aviation professionals and defence forces for the moments that matter. Every day, we empower pilots, cabin crew, maintenance technicians, airlines, business aviation operators, and defence and security personnel to perform at their best and when the stakes are the highest. Around the globe, we’re everywhere customers need us to be with approximately 13,000 employees at around 240 sites and training locations in over 40 countries. For nearly 80 years, CAE has been at the forefront of innovation, consistently seeking to set the standard by delivering excellence in high-fidelity flight simulators and training solutions, while embedding sustainability at the heart of everything we do. By harnessing technology and enhancing human performance, we strive to be the trusted partner in advancing safety and mission readiness - today and tomorrow.

Airbus

airbus.com

Airbus pioneers sustainable aerospace for a safe and united world. The Company constantly innovates to provide efficient and technologically-advanced solutions in aerospace, defence, and connected services. In commercial aircraft, Airbus designs and manufactures modern and fuel-efficient airliners and associated services. Airbus is also a European leader in space systems, defence and security. In helicopters, Airbus provides efficient civil and military rotorcraft solutions and services worldwide.

Pratt & Whitney

rtx.com

Pratt & Whitney, an RTX business, is a global leader in propulsion systems, powering the most advanced aircraft in the world, and we are shaping the future of aviation. Our engines help connect people, grow economies and defend freedom. Our customers depend on us to get where they’re going and back again.

Federal Aviation Administration

faa.gov

The FAA is on the leading edge of a new frontier in commercial space transportation, building the next generation (NextGen) of satellite-based navigation systems, and fostering the safe integration of unmanned aerial systems into our airspace. We can only dream of what the next 50 years of American ingenuity will look like, but FAA employees will be working to ensure that the United States continues to lead the world in aerospace safety, innovation and advancements that continue to push the limits of science and technology. The FAA is an operating administration within the Department of Transportation (DOT) and a proud partner in the DOT mission to serve the United States by ensuring a fast, safe, efficient, accessible and convenient transportation system that meets our vital national interests and enhances the quality of life of the American people, today and into the future. Specifically, the FAA mission is to provide the safest, most efficient aerospace system in the world.

Safran

cb safran-group.com

Safran is an international high-technology group, operating in the aviation (propulsion, equipment and interiors), defense and space markets. Its core purpose is to contribute to a safer, more sustainable world, where air transport is more environmentally friendly, comfortable and accessible. Safran has a global presence, with 100,000 employees and holds, alone or in partnership, world or European leadership positions in its core markets.

Blue Origin

cb blueorigin.com

We are building a road to space for the benefit of Earth, humanity’s blue origin. Our team is focused on radically reducing the cost of access to space and harnessing its vast resources while mobilizing future generations to realize this mission. Blue Origin builds reusable rocket engines, launch vehicles, in-space systems, and lunar landers. Discover more at BlueOrigin.com. *We hope you engage with us and our community. However, we reserve the right to remove derogatory or off-topic comments from our social media accounts. Thank you for understanding.*

B/E Aerospace

beaerospace.com

B/E Aerospace is now part of Rockwell Collins. With the acquisition of B/E Aerospace in April 2017, Rockwell Collins is now a world leader in designing, developing and manufacturing cabin interior products and services that deliver innovation, reliability and efficiency. Our broad range of offerings include aircraft cabin seating, lighting and engineering solutions, oxygen systems, food and beverage preparation and storage equipment, galley systems, water and waste systems, and advanced lavatory systems. We also collaborate closely with our customers to provide customized cabin interior reconfiguration, program management and certification services.

Spirit AeroSystems

spiritaero.com

Inventing, designing and building what’s best in aerospace. Spirit AeroSystems is one of the world’s largest manufacturers of aerostructures for commercial airplanes, defense platforms, and business/regional jets. With expertise in aluminum and advanced composite manufacturing solutions, the company’s core products include fuselages, integrated wings and wing components, pylons, and nacelles. Also, Spirit serves the aftermarket for commercial and business/regional jets. Headquartered in Wichita, Kansas, Spirit has facilities in the U.S., U.K., France, Malaysia and Morocco.

Bombardier

bombardier.com

Bombardier is a global leader in aviation, focused on designing, manufacturing, and servicing the world's most exceptional business jets. Bombardier’s Challenger and Global aircraft families are renowned for their cutting-edge innovation, cabin design, performance, and reliability. Bombardier has a worldwide fleet of approximately 5,000 aircraft in service with a wide variety of multinational corporations, charter and fractional ownership providers, governments, and private individuals. Bombardier aircraft are also trusted around the world in government and military special-mission roles leveraging Bombardier Defense’s proven expertise.   Headquartered in Greater Montréal, Québec, Bombardier operates aerostructure, assembly and completion facilities in Canada, the United States and Mexico. The company’s robust customer support network services the Learjet, Challenger and Global families of aircraft, and includes facilities in strategic locations in the United States and Canada, as well as in the United Kingdom, Germany, France, Switzerland, Italy, Austria, the UAE, Singapore, China and Australia.   For corporate news and information, including Bombardier’s Environmental, Social and Governance report, as well as the company’s plans to cover all its flight operations with Sustainable Aviation Fuel (SAF) utilizing the Book and Claim system visit bombardier.com. Learn more about Bombardier’s industry-leading products and customer service network at businessaircraft.bombardier.com. Follow us on Twitter @Bombardier.   

Loading…

NEWS

Avio Aero CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 04, 2025 07:00 AM

Europe On Defense: Space And Security Autonomy Stocks In Focus

European defense stocks have strong growth potential. Read more on investments in this sector as geopolitical tensions rise and defense...

Read Article

October 17, 2024 07:00 AM

Brave new world: Building Europe’s capacities for defence and security R&D

For the first time since the end of the Cold War, the next period of EU politics and policy-making will be dominated by security issues.

Read Article

March 12, 2024 06:19 PM

GE Aviation's Quick Six with Carlo Porro

In our next installment of Quick Six, The Bike Shop sat down with Carlo Porro, an intellectual property cybersecurity manager at Avio Aero in Italy.

Read Article

December 04, 2022 08:00 AM

World Space Travel Day

On April 12, 1961 the Russian cosmonaut Yuri Gagarin, 27 years old, completed the first space journey of a human being, making an orbital...

Read Article

March 25, 2022 07:00 AM

Airbus selects Avio Aero engine solution for Eurodrone

Following a competitive tender process as well as an extensive technical analysis phase, Airbus has selected Avio Aero from Italy to power...

Read Article

July 21, 2021 07:00 AM

How GE’s Avio Aero deploys Microsoft SharePoint using AWS Storage solutions

In this blog post, we discuss how my company used Amazon FSx for Windows File Server (Amazon FSx) as a high-performance storage repository for our SharePoint...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8718

SUMMARY

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 8.4)

cvss3

Base Score: 8.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Impact Score

5.8

Exploitability

REFERENCES

CVE-2026-48161

SUMMARY

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/dai-shi/react18-use/security/advisories/GHSA-32xh-vg5f-64fm

CVE-2026-11812

SUMMARY

The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 2.5)

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-11811

SUMMARY

The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2025-30241

SUMMARY

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.tp-link.com/us/support/faq/5239/

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…