What is the official website of Live Reply DE ?

The official website of Live Reply DE is https://www.reply.com/live-reply/de.

What is Live Reply DE's cybersecurity risk score?

Live Reply DE has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Live Reply DE experienced?

According to Rankiteo, Live Reply DE currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Live Reply DE been affected by any supply chain cyber incidents ?

According to Rankiteo, Live Reply DE has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Live Reply DE have SOC 2 Type 1 certification ?

According to Rankiteo, Live Reply DE is not certified under SOC 2 Type 1.

Does Live Reply DE have SOC 2 Type 2 certification ?

According to Rankiteo, Live Reply DE does not hold a SOC 2 Type 2 certification.

Does Live Reply DE comply with GDPR ?

According to Rankiteo, Live Reply DE is not listed as GDPR compliant.

Does Live Reply DE have PCI DSS certification ?

According to Rankiteo, Live Reply DE does not currently maintain PCI DSS compliance.

Does Live Reply DE comply with HIPAA ?

According to Rankiteo, Live Reply DE is not compliant with HIPAA regulations.

Does Live Reply DE have ISO 27001 certification ?

According to Rankiteo,Live Reply DE is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Live Reply DE operate in ?

Live Reply DE operates primarily in the IT Services and IT Consulting industry.

How many employees does Live Reply DE have ?

Live Reply DE employs approximately 104 people worldwide.

Does Live Reply DE own any subsidiaries ?

Live Reply DE presently has no subsidiaries across any sectors.

How many LinkedIn followers does Live Reply DE have ?

Live Reply DE's official LinkedIn profile has approximately 1,434 followers.

What is the NAICS classification code for Live Reply DE ?

Live Reply DE is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Live Reply DE have a Crunchbase profile ?

No, Live Reply DE does not have a profile on Crunchbase.

Does Live Reply DE have a LinkedIn profile ?

Yes, Live Reply DE maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/live-reply-de.

How many cybersecurity incidents has Live Reply DE experienced ?

As of August 16, 2026, Rankiteo reports that Live Reply DE has not experienced any cybersecurity incidents.

How many peer or competitor companies does Live Reply DE have ?

Live Reply DE has an estimated 41,350 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

LRD

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Live Reply DE Vendor Cyber Rating & Cyber Score

reply.com

Add Your Compliance Badge

Live Reply DE is the German Reply Group specialist in Digital Services and Solutions enabled by Telco & Media technologies. Live Reply DE provides consulting, development, system integration expertise and solutions on behalf of leading companies in the telco and media industry as well as tier 1 players in financial services, automotive and consumer products. Live Reply DE key areas of expertise are spanning from implementation of digital services, Last Generation Software Defined Network, solutions in the area of IOT-enabled services, mobile commerce, network and OSS. As a part of the international Reply network, Live Reply DE can leverage own capabilities accessing to the knowledge of thousands of IT experts.

LRD A.I CyberSecurity Scoring

Scoring History

LRD

Live Reply DE CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

LRD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for LRD

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Live Reply DE in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Live Reply DE in 2026.

Incident Types LRD vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Live Reply DE in 2026.

Incident History - LRD (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Live Reply DE Subsidiaries

LRD

IT Services and IT Consulting

Website: https://www.reply.com/live-reply/de

Company Size: 104

122

ReplyIT Services and IT Consulting

Open Reply ITIT Services and IT Consulting

Blue Reply ITIT Services and IT Consulting

Concept Quality ReplyIT Services and IT Consulting

Spike ReplyIT Services and IT Consulting

Communication Valley ReplyComputer and Network Security

Machine Learning ReplyIT Services and IT Consulting

AIM ReplyIT Services and IT Consulting

Target Reply RomeIT Services and IT Consulting

Data Reply UKIT Services and IT Consulting

Airwalk ReplyIT Services and IT Consulting

Wemanity Learning CenterDéveloppement professionnel et coaching

Sense ReplyIT Services and IT Consulting

ARLANIS REPLYIT Services and IT Consulting

Concept Reply GmbHInformation Technology & Services

Spur ReplyBusiness Consulting and Services

Business Elements ReplyIT Services and IT Consulting

Sprint Reply ITInformation Technology & Services

Sprint Reply DEIT Services and IT Consulting

Glue ReplyIT Services and IT Consulting

Logistics Reply UKSoftware Development

Like ReplyAdvertising Services

KI ReplyInformation Technology & Services

Sprint Reply BEIT Services and IT Consulting

Comwrap Reply DACHTechnology, Information and Internet

Core ReplyInformation Technology & Services

Fincon Reply GmbHInformation Services

Starbytes.itInformation Technology & Services

Open ReplyInformation Technology & Services

Logistics Reply USSoftware Development

Open Reply UKInformation Technology & Services

Up ReplyIT Services and IT Consulting

Life At ReplyIT Services and IT Consulting

Avantage ReplyFinancial Services

IFRS 9Financial Services

Compliance and Conduct RiskFinancial Services

Valorem ReplyIT Services and IT Consulting

Valorem Reply - Technology Industry SolutionsIT Services and IT Consulting

BitmamaAdvertising Services

Nexi DigitalFinancial Services

CLUSTER REPLYIT Services and IT Consulting

Technology ReplySoftware Development

Wemanity MarocIT Services and IT Consulting

Storm ReplyIT Services and IT Consulting

Machine Learning Reply GmbHIT Services and IT Consulting

Threepipe ReplyAdvertising Services

Xister ReplyAdvertising Services

ATLAS REPLYIT Services and IT Consulting

Syskoplan Reply USIT Services and IT Consulting

Wemanity BelgiumInformation Technology & Services

Go ReplyIT Services and IT Consulting

WM ReplyIT Services and IT Consulting

Lynx RecruitmentStaffing and Recruiting

Laife ReplyInformation Technology & Services

Cloud9 ReplyIT Services and IT Consulting

Mansion House ConsultingBusiness Consulting and Services

TD ReplyBusiness Consulting and Services

Sytel ReplyIT Services and IT Consulting

Cluster Reply DEIT Services and IT Consulting

Data Reply FRInformation Technology & Services

ARLANIS REPLY ITIT Services and IT Consulting

Pay ReplyInformation Technology & Services

Comsysto Reply GmbHIT Services and IT Consulting

Net ReplyIT Services and IT Consulting

Graymatter ReplyAdvertising Services

Graymatter REPLY DigitalAdvertising Services

Business ReplySoftware Development

Syskoplan Reply DACHInformation Technology & Services

4brands ReplyInformation Technology & Services

Concept Engineering ReplyIT Services and IT Consulting

Aktive ReplyInformation Technology & Services

Blue Reply DEIT Services and IT Consulting

Light ReplyIT Services and IT Consulting

Triplesense ReplyTechnology, Information and Internet

Canvas ReplyIT Services and IT Consulting

Cortex Reply DEIT Services and IT Consulting

Connect ReplyIT Services and IT Consulting

Technology Reply RomaniaIT Services and IT Consulting

Autonomous Reply FRIT Services and IT Consulting

Shield ReplyIT Services and IT Consulting

Logistics Reply DESoftware Development

Spike Reply LuxembourgIT Services and IT Consulting

Cortex Reply UKTechnology, Information and Internet

Accelerator 365 by ReplySoftware Development

Storm Reply DEIT Services and IT Consulting

Sytel Reply NorthInformation Technology & Services

Neo ReplyIT Services and IT Consulting

Live Reply ItalyIT Services and IT Consulting

Net Reply UKIT Services and IT Consulting

Arlanis Reply UKIT Services and IT Consulting

Infinity Reply DEIT Services and IT Consulting

Brick Reply | IT Solutions and Services for ManufacturingSoftware Development

Macros Reply GmbHIT Services and IT Consulting

Sprint Reply UKIT Services and IT Consulting

Eos ReplyIT Services and IT Consulting

Spike Reply UKTechnology, Information and Internet

Alpha ReplyIT Services and IT Consulting

Storm Reply, Inc.Professional Services

Target ReplyData Infrastructure and Analytics

Data Reply ITIT Services and IT Consulting

Data Reply DEInformation Technology & Services

Wemanity NetherlandsProfessional Training and Coaching

Blockchain ReplyIT Services and IT Consulting

Leadvise ReplyBusiness Consulting and Services

Digital Transformation der Regulatory AffairsUnternehmensberatung

Affinity ReplyIT Services and IT Consulting

Concept Reply USInformation Technology & Services

Ki Reply UKIT Services and IT Consulting

Open Reply Benelux - FranceBusiness Consulting and Services

Cluster Reply PLIT Services and IT Consulting

Nimbus ReplyIT Services and IT Consulting

Zest ReplyIT Services and IT Consulting

Air ReplyIT Services and IT Consulting

Infinity Reply ITIT Services and IT Consulting

HERMES REPLYInformation Technology & Services

Liquid ReplyIT Services and IT Consulting

Red Reply DEIT Services and IT Consulting

Industrie Reply USMotor Vehicle Manufacturing

Roboverse Reply DEIT Services and IT Consulting

Solidsoft ReplyIT Services and IT Consulting

Atomic ReplyBusiness Consulting and Services

Reply ChallengesFornitori di e-learning

Loading…

Live Reply DE Similar Companies

Luxoft

cb luxoft.com

Luxoft, a DXC Technology Company (NYSE: DXC), is a digital strategy and software engineering firm providing bespoke technology solutions that drive business change for customers the world over. Acquired by U.S. company DXC Technology in 2019, Luxoft is a global operation in 44 cities and 21 countries with an international, agile workforce of nearly 18,000 people. It combines a unique blend of engineering excellence and deep industry expertise, helping over 425 global clients innovate in the areas of automotive, financial services, travel and hospitality, healthcare, life sciences, media and telecommunications. DXC Technology is a leading Fortune 500 IT services company which helps global companies run their mission critical systems. Together, DXC and Luxoft offer a differentiated customer-value proposition for digital transformation by combining Luxoft’s front-end digital capabilities with DXC’s expertise in IT modernization and integration. Follow our profile for regular updates and insights into technology and business needs.

Infosys

infosys.com

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem. Visit www.infosys.com to see how Infosys (NYSE: INFY) can help your enterprise navigate your next.

IBM

ibm.com

At IBM, we do more than work. We create. We create as technologists, developers, and engineers. We create with our partners. We create with our competitors. If you're searching for ways to make the world work better through technology and infrastructure, software and consulting, then we want to work with you. We're here to help every creator turn their "what if" into what is. Let's create something that will change everything.

Eviden

eviden.com

Eviden is the Atos Group brand for hardware and software products with c. € 1 billion in revenue, operating in 36 countries and comprising four business units: advanced computing, cybersecurity products, mission-critical systems and vision AI. As a next-generation technology leader, Eviden offers a unique combination of hardware and software technologies for businesses, public sector and defense organizations and research institutions, helping them to create value out of their data. Bringing together more than 4,500 world-class talents and holding more than 2,100 patents, Eviden provides a strong portfolio of innovative and eco-efficient solutions in AI, computing, security, data and applications.

Globant

cb globant.link

At Globant, we create the digitally-native products that people love. We bridge the gap between businesses and consumers through technology and creativity, leveraging our experience as an AI powerhouse. We dare to digitally transform organizations and strive to delight their customers. - We have more than 30,000 employees and are present in 33 countries across 5 continents, working for companies like Google, Electronic Arts, and Santander, among others. - We were named a Worldwide Leader in AI Services (2023) and a Worldwide Leader in CX Improvement Services (2020) by IDC MarketScape report. - We are the fastest-growing IT brand and the 5th strongest IT brand globally (2024), according to Brand Finance. - We were featured as a business case study at Harvard, MIT, and Stanford. - We are active members of The Green Software Foundation (GSF) and the Cybersecurity Tech Accord. For more information, visit https://bit.ly/globant_com Follow us: http://www.twitter.com/globant http://www.youtube.com/Globant http://www.facebook.com/Globant https://instagram.com/Globant https://www.tiktok.com/@globant

TransUnion

transunion.com

TransUnion is a global information and insights company that makes trust possible in the modern economy. We do this by providing an actionable picture of each person so they can be reliably represented in the marketplace. As a result, businesses and consumers can transact with confidence and achieve great things. This picture is grounded in our legacy as a credit reporting agency which enables us to tap into both credit and public record data; our data fusion methodology that helps us link, match and tap into the awesome combined power of that data; and our knowledgeable and passionate team, who stewards the information with expertise, and in accordance with local legislation around the world. A leading presence in more than 30 countries across five continents, TransUnion provides solutions that help create economic opportunity, great experiences and personal empowerment for hundreds of millions of people. We call this Information for Good® — it’s our purpose, and what drives us every day. Get Support / Contact Us Customer Support: https://transu.co/60024D64I Business Support: https://transu.co/60044D67G

LTIMindtree

ltimindtree.com

LTIMindtree is a global technology consulting and digital solutions company that partners with enterprises across industries to reimagine business models, accelerate innovation, and drive AI-centric growth. Trusted by more than 700 clients worldwide, we use advanced technologies to enable operational excellence, elevated customer experiences, and long-term value creation. With a workforce of more than 86,000 talented and entrepreneurial professionals across over 40 countries, LTIMindtree — a Larsen & Toubro Group company — is dedicated to solving complex business challenges and delivering transformation at scale. LTIMindtree is proud to be an equal opportunity employer. We are committed to providing equal employment opportunities regardless of race, ethnicity, nationality, gender, gender identity, gender expression, language, age, sexual orientation, religion, marital status, veteran status, socio-economic status, disability, or any other characteristic protected by applicable law. Please note that neither LTIMindtree nor any of its authorized recruitment agencies/partners charge candidates any registration fees or other fees for appearing in interviews or securing employment/internships. Candidates are solely responsible for verifying the credentials of any agency or consultant claiming to work with LTIMindtree for recruitment purposes. Please note that anyone relying on representations made by fraudulent employment agencies/consultant does so at their own risk. LTIMindtree disclaims any liability for loss or damage suffered as a result of such actions. For more info, please visit www.ltimindtree.com.

SoftwareOne

softwareone.com

SoftwareOne is a global software and cloud solutions provider. With a presence in over 70 countries and a team of around 13,000 professionals, we combine global scale and local expertise to help clients optimize costs, accelerate growth, and navigate complex IT environments with confidence. Leveraging deep capabilities in cloud, software, and data and AI, the company empowers organizations to modernize, innovate, and unlock the full value of their technology investments. Headquartered in Switzerland, SoftwareOne is listed on the SIX Swiss Exchange and Euronext Oslo Børs under the ticker symbol SWON. Visit us: https://www.softwareone.com/en

Canon EMEA

canon-europe.com

We are Canon Europe. We are the world's best imaging company. This page represents our offices in Europe, the Middle East and Africa. Founded in 1937, the desire to continuously innovate has kept Canon at the forefront of imaging excellence throughout its 85-year history and has commitments to invest in the right areas and capture growth opportunities. From cameras to commercial printers, and business consultancy to healthcare technologies, Canon enriches lives and businesses through imaging innovation. Canon’s corporate philosophy is Kyosei – ‘living and working together for the common good’. In EMEA, Canon Europe pursues sustainable business growth, focusing on reducing its own environmental impact and supporting customers to reduce theirs using Canon’s products, solutions and services. Canon Europe has operations in roughly 120 countries, with approximately 13,500 employees and contributes to around a quarter of Canon’s global revenues annually.

Loading…

NEWS

Live Reply DE CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 07, 2025 04:48 PM

Reply 2025 Italian International Under 16 Championship

The annual Reply Italian International Under 16 Championship returns for its 18th edition, set to take place on the renowned course of Golf Club Biella "Le...

Read Article

July 07, 2025 07:00 AM

Reply AI Music Contest - Announced the Winner of the First International Competition Connecting AI Technologies With Music and Live Performances

TURIN, Italy, July 07, 2025--Reply, an international group specialized in the creation of new business models enabled by Artificial...

Read Article

June 05, 2025 07:00 AM

Live updates: Musk backs Trump impeachment, links him to Epstein, as fight escalates

A fight between President Trump and Elon Musk that broke into the open over the “big, beautiful bill” earlier in the week escalated quickly...

Read Article

September 12, 2024 07:33 PM

European Cybersecurity Challenge 2024

Reply is Diamond Sponsor of the 2024 edition of the European Cybersecurity Challenge to be held from 7th to 11th October at the OGR in Turin.

Read Article

September 06, 2024 07:49 PM

Spike Reply at it-sa 2024

Meet Spike Reply at it-sa 2024 in Nuremberg. Experience ICS/I(I)oT security devices live and find out about cyber security at Ectacoma.

Read Article

July 02, 2024 07:00 AM

Augmented Reality for immersive experiences in the Monumental Complex of Santa Croce

Reply is a network of highly specialized companies that support leading industrial groups in defining and developing business models enabled...

Read Article

May 09, 2024 04:13 PM

Pringles "Pop To The Top" campaign

A campaign featuring the first-ever Pringles Island in Fortnite. Xister Reply invited four top Italian Fortnite gamers to stream the Pringles map on Twitch.

Read Article

November 26, 2021 08:02 AM

Phishing: Spot and report scam emails, texts, websites and calls

'Phishing' is when criminals use scam emails, text messages or phone calls to trick their victims. The aim is often to make you visit a website.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…