What is the official website of Mahan Air ?

The official website of Mahan Air is http://www.mahanair.co.ir.

What is Mahan Air's cybersecurity risk score?

Mahan Air has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Mahan Air experienced?

According to Rankiteo, Mahan Air currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Mahan Air been affected by any supply chain cyber incidents ?

According to Rankiteo, Mahan Air has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Mahan Air have SOC 2 Type 1 certification ?

According to Rankiteo, Mahan Air is not certified under SOC 2 Type 1.

Does Mahan Air have SOC 2 Type 2 certification ?

According to Rankiteo, Mahan Air does not hold a SOC 2 Type 2 certification.

Does Mahan Air comply with GDPR ?

According to Rankiteo, Mahan Air is not listed as GDPR compliant.

Does Mahan Air have PCI DSS certification ?

According to Rankiteo, Mahan Air does not currently maintain PCI DSS compliance.

Does Mahan Air comply with HIPAA ?

According to Rankiteo, Mahan Air is not compliant with HIPAA regulations.

Does Mahan Air have ISO 27001 certification ?

According to Rankiteo,Mahan Air is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Mahan Air operate in ?

Mahan Air operates primarily in the Airlines and Aviation industry.

How many employees does Mahan Air have ?

Mahan Air employs approximately 2,171 people worldwide.

Does Mahan Air own any subsidiaries ?

Mahan Air presently has no subsidiaries across any sectors.

How many LinkedIn followers does Mahan Air have ?

Mahan Air's official LinkedIn profile has approximately 11,443 followers.

What is the NAICS classification code for Mahan Air ?

Mahan Air is classified under the NAICS code 481, which corresponds to Air Transportation.

Does Mahan Air have a Crunchbase profile ?

No, Mahan Air does not have a profile on Crunchbase.

Does Mahan Air have a LinkedIn profile ?

Yes, Mahan Air maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mahanair.

How many cybersecurity incidents has Mahan Air experienced ?

As of August 3, 2026, Rankiteo reports that Mahan Air has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Mahan Air have ?

Mahan Air has an estimated 3,833 peer or competitor companies worldwide.

What types of cybersecurity incidents has Mahan Air faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Mahan Air

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

Mahan Air Vendor Cyber Rating & Cyber Score

mahanair.co.ir

Add Your Compliance Badge

Mahan Air recognizes the dedication and diligence of 3300 staff as the key factor in our success. Every effort is made to create an exciting and rewarding working environment for them. To support our service excellence strategy, Mahan Air has adopted a rigorous quality control process for staff recruitment. All flight attendants must complete an intensive six month training course before serving their first passenger. This is one of the longest and most comprehensive flight attendant training programs of any major airline.

Mahan Air A.I CyberSecurity Scoring

Scoring History

Mahan Air

Mahan Air CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Mahan Air

Cyber Attack

100

11/2021

MAH850111122

Loading…

A.I.

Mahan Air Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Mahan Air

Incidents vs Airlines and Aviation Industry Avg (This Year)

No incidents recorded for Mahan Air in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Mahan Air in 2026.

Incident Types Mahan Air vs Airlines and Aviation Industry Avg (This Year)

No incidents recorded for Mahan Air in 2026.

Incident History - Mahan Air (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Mahan Air Subsidiaries

Parent Company

Mahan Air

Airlines and Aviation

Website: http://www.mahanair.co.ir

Company Size: 2,171

No subsidiary data available for this company.

Loading…

Mahan Air Similar Companies

Qantas

cb qantas.com

We would like to acknowledge the Traditional Custodians of the local lands and waterways on which we live, work and fly. We pay our respects to Elders past and present. Spirit is everything to us, and joining the Qantas team means bringing your spirit to ours. We have over 30,000 exceptional employees, and every year we fly millions of customers around Australia and the world – together. If you hop on board with the team, you'll experience a workplace where creativity, diversity and innovation are encouraged. We aim to give every member of the Qantas Group the support to follow their dreams, face new challenges, and let their future take flight. Ultimately, people are our priority – those who work for us and those who travel with us. Recruitment scam alert: We're aware of scammers posing as Qantas Group recruiters. We'll only contact candidates via official Qantas Group channels and company email addresses. Don't share personal details or documents unless you're confident it's genuine. Learn more or report a scam: https://www.qantas.com/en-au/help/cyber-safety-scams Member of the oneworld Alliance. Please read the Qantas LinkedIn House Rules at http://bit.ly/QFhouserules

Etihad

etihad.com

Marhaba! Welcome to Etihad Airways. We are proud to be the national airline of the UAE, flying to 100+ destinations via Abu Dhabi. At Etihad, we don't stop at the border of what's possible, we go beyond it. Proudly inspired by our Emirati identity, we are dedicated to delivering extraordinary travel experiences, helping our guests realise their ambitions. Our journey started in 2003. Since then, we have proudly helped millions of guests travel the globe. We are honoured to have had over 12 million valued members join our Etihad Guest loyalty programme. Diversity is key in driving us forward. At 12,000+ employees representing 140+ nationalities, our team comes together to deliver exceptional experiences at every stage of the journey. If you share our spirit of ambition and would like to reach new heights, visit https://careers.etihad.com/

KLM Royal Dutch Airlines

klmf.ly

Welcome to our LinkedIn page! To learn how we can assist you, please check: http://klmf.ly/ContactCentre. KLM was founded in 1919 and is the oldest airline in the world. With a vast network of European and intercontinental destinations, KLM can offer direct flights to major cities and economic centres all over the world. Through our LinkedIn account, we make sure you are kept up-to-date about KLM and other developments in the air transport industry.

Ryanair - Europe's Favourite Airline

cb ryanair.com

Ryanair Holdings plc, Europe’s largest airline group, is the parent company of Ryanair DAC, Lauda, Buzz and Ryanair UK. Carrying 160m+ guests p.a. on over 3,000 daily flights to/from 225 airports. Plan to carry 225m+ guests p.a. by 2026. Unfortunately, we are unable to answer customer service queries through LinkedIn. Please contact our customer service department through our website: http://www.ryanair.com/ie/questions/contacting-customer-service/ alternatively you can contact us through Twitter @askRyanair or on facebook.com/Ryanair

JetBlue

jetblue.com

JetBlue — New York's Hometown Airline — was born at JFK in 1999 with the mission of bringing humanity back to air travel, and is now a leading carrier in NYC, Boston, Fort Lauderdale, Orlando, and San Juan. JetBlue serves 40M+ customers annually, with low fares and award-winning service to 100+ destinations on both sides of the Atlantic. Questions? We’ve got you. Visit jetblue.com

Lufthansa Group

cb lufthansagroup.com

The Lufthansa Group is an aviation company with operations worldwide. It plays a leading role in its European home market. With 109,509 employees, the Lufthansa Group generated revenue of EUR 32.770m in the financial year 2022. The Passenger Airlines segment includes, on the one hand, the network airlines Lufthansa German Airlines, SWISS, Austrian Airlines and Brussels Airlines. As part of the multihub strategy, they offer their passengers a broad range of flights from their global hubs in Frankfurt, Munich and Zurich as well as their national hubs in Vienna and Brussels. Lufthansa German Airlines also includes the regional airlines Lufthansa CityLine, Air Dolomiti and Eurowings Discover, the Lufthansa Group’s holiday airline. Besides the network airlines, Eurowings also belongs to the Passenger Airlines segment. This airline provides a comprehensive range of point-to-point connections for European short-haul destinations, in particular from German-speaking countries. Besides its Passenger Airlines business segment, the Lufthansa Group also comprises aviation services. This includes the Logistics, MRO and Catering segments in particular. The Lufthansa Group also includes the Additional Businesses and Group Functions. These comprise Lufthansa Aviation Training and Lufthansa Systems especially.

Air Canada

cb aircanada.com

Canada's largest airline, the country’s flag carrier and a founding member of Star Alliance, the world's most comprehensive air transportation network celebrating its 25thanniversary in 2022, Air Canada provides scheduled passenger service directly to 51 airports in Canada, 51 in the United States and 86 internationally. It is the only international network carrier in North America to receive a Four-Star ranking from Skytrax, which in 2021 gave Air Canada awards for the Best Airline Staff in North America, Best Airline Staff in Canada, Best Business Class Lounge in North America, and an excellence award for its management of the COVID-19 pandemic. ** Air Canada est la plus importante société aérienne du Canada, le transporteur national du pays et un membre cofondateur du réseau Star Alliance — le plus vaste regroupement mondial de sociétés aériennes, qui célèbre son 25e anniversaire en 2022. Les lignes passagers régulières d’Air Canada relient sans escale 51 aéroports au Canada, 51 aux États-Unis et 86 sur le reste du globe. En Amérique du Nord, Air Canada constitue le seul transporteur aérien d’envergure internationale offrant une gamme complète de services à détenir la cote quatre étoiles de Skytrax qui, en 2021, lui a décerné les prix Meilleur personnel au sol et à bord en Amérique du Nord, Meilleur personnel au sol et à bord au Canada, Meilleur salon de classe affaires en Amérique du Nord ainsi qu’un Prix d’excellence pour sa gestion de la pandémie de la COVID-19.

Delta Air Lines

delta.com

Delta Air Lines (NYSE: DAL) is the U.S. global airline leader in safety, innovation, reliability and customer experience. Powered by our employees around the world, Delta has for a decade led the airline industry in operational excellence while maintaining our reputation for award-winning customer service. With our mission of connecting the people and cultures of the globe, Delta strives to foster understanding across a diverse world and serve as a force for social good.

AirAsia

airasia.com

It all starts here. 23 years ago, a dream took flight - shaping and forever changing the travel industry in Asia. The idea was simple: Make flying affordable for everyone. We made that dream happen. We started an airline in 2001. Today, we’ve evolved to become something much bigger. We’re now a world-class brand, a leading Asean airline, a digital travel and lifestyle platform; and we’re not stopping. If you’re passionate about connecting people and transforming lives, we want you onboard. When it comes to your career, your Allstar journey will be an adventure. Find your dream career destination with us.

Loading…

NEWS

Mahan Air CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 19, 2024 08:00 AM

How the US can ground Iran’s ‘terrorist airlines’

The Biden administration has a unique opportunity to step up its campaign against anti-American regimes in Venezuela, Iran and Nicaragua.

Read Article

December 22, 2023 08:00 AM

South Africa Helps Iran Skirt US Aviation Embargoes

A global conflict tracker has revealed how South Africa helped Iran circumvent the United States' sanctions on the Islamic Republic's...

Read Article

November 23, 2021 08:00 AM

Iran’s Mahan Air sustains cyberattack, data leaked

Mahan Air, Iran's second largest airline, has sustained a serious cyberattack. The incident occurred on November 21, 2021.

Read Article

November 22, 2021 08:00 AM

Hackers hit Iran's Mahan airline, claim confidential data theft

One of Iran's largest privately-owned airlines, Mahan Air, has announced a cybersecurity incident that has resulted in its website going offline and...

Read Article

November 21, 2021 08:00 AM

Iran's Mahan Air says its has foiled a cyber attack - TV

A cyber attack against Iranian private airline Mahan Air has been foiled, Iranian state media reported on Sunday, adding that the airliner's...

Read Article

November 21, 2021 08:00 AM

Iran’s Mahan Air Says It Foiled Cyber Attack on Systems

Iranian airline Mahan Air foiled a cyber attack targeting the company's “internal systems” on Sunday, a spokesman said on state TV.

Read Article

November 21, 2021 08:00 AM

Iran’s Mahan Air foils cyberattack, flights operating on schedule

Iran's Mahan Air has announced it foiled a cyberattack targeting the company's “internal systems” and that all flights were operating on schedule.

Read Article

August 19, 2020 07:00 AM

U.S. imposes sanctions on two UAE-based companies for aiding Iran's biggest airline

Parthia Cargo and Delta Parts Supply FZC provided key parts and logistics services for Iran's Mahan Air, which is currently blacklisted by...

Read Article

November 02, 2019 07:00 AM

Italy to ban flights by Iran's Mahan Air from mid-December

Italy is set to ban flights by Iran's Mahan Air, an Iranian industry official said on Saturday, as the United States seeks action against...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…