What is the official website of Pharmaconex Nigeria ?

The official website of Pharmaconex Nigeria is https://www.pharmaconex-exhibition.com/en1/Westafrica.html.

What is Pharmaconex Nigeria's cybersecurity risk score?

Pharmaconex Nigeria has an AI-generated cybersecurity risk score of 770 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Pharmaconex Nigeria experienced?

According to Rankiteo, Pharmaconex Nigeria currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Pharmaconex Nigeria been affected by any supply chain cyber incidents ?

According to Rankiteo, Pharmaconex Nigeria has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Pharmaconex Nigeria have SOC 2 Type 1 certification ?

According to Rankiteo, Pharmaconex Nigeria is not certified under SOC 2 Type 1.

Does Pharmaconex Nigeria have SOC 2 Type 2 certification ?

According to Rankiteo, Pharmaconex Nigeria does not hold a SOC 2 Type 2 certification.

Does Pharmaconex Nigeria comply with GDPR ?

According to Rankiteo, Pharmaconex Nigeria is not listed as GDPR compliant.

Does Pharmaconex Nigeria have PCI DSS certification ?

According to Rankiteo, Pharmaconex Nigeria does not currently maintain PCI DSS compliance.

Does Pharmaconex Nigeria comply with HIPAA ?

According to Rankiteo, Pharmaconex Nigeria is not compliant with HIPAA regulations.

Does Pharmaconex Nigeria have ISO 27001 certification ?

According to Rankiteo,Pharmaconex Nigeria is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Pharmaconex Nigeria operate in ?

Pharmaconex Nigeria operates primarily in the Pharmaceutical Manufacturing industry.

How many employees does Pharmaconex Nigeria have ?

Pharmaconex Nigeria employs approximately None employees people worldwide.

Does Pharmaconex Nigeria own any subsidiaries ?

Pharmaconex Nigeria presently has no subsidiaries across any sectors.

How many LinkedIn followers does Pharmaconex Nigeria have ?

Pharmaconex Nigeria's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Pharmaconex Nigeria ?

Pharmaconex Nigeria is classified under the NAICS code 3254, which corresponds to Pharmaceutical and Medicine Manufacturing.

Does Pharmaconex Nigeria have a Crunchbase profile ?

No, Pharmaconex Nigeria does not have a profile on Crunchbase.

Does Pharmaconex Nigeria have a LinkedIn profile ?

Yes, Pharmaconex Nigeria maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/pharmaconex-nigeria.

How many cybersecurity incidents has Pharmaconex Nigeria experienced ?

As of September 9, 2026, Rankiteo reports that Pharmaconex Nigeria has not experienced any cybersecurity incidents.

How many peer or competitor companies does Pharmaconex Nigeria have ?

Pharmaconex Nigeria has an estimated 5,760 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Pharmaconex Nigeria

Boost Score +25 with badge (5 left)

770

/1000

Fair

795

/1000

Fair

Pharmaconex Nigeria Vendor Cyber Rating & Cyber Score

pharmaconex-exhibition.com

Add Your Compliance Badge

Pharmaconex Nigeria – the latest expansion of the successful Pharmaconex event series. With a decade of success in Egypt, Pharmaconex is now taking the next step by introducing its one-of-a-kind platform to West Africa. In association with CPHI.

Pharmaconex Nigeria

Pharmaconex Nigeria CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Pharmaconex Nigeria Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Pharmaconex Nigeria

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Pharmaconex Nigeria in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Pharmaconex Nigeria in 2026.

Incident Types Pharmaconex Nigeria vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Pharmaconex Nigeria in 2026.

Incident History - Pharmaconex Nigeria (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Pharmaconex Nigeria Subsidiaries

Pharmaconex Nigeria

Pharmaceutical Manufacturing

Website: https://www.pharmaconex-exhibition.com/en1/Westafrica.html

Company Size: 11-50 employees

Informa MarketsEvents Services

LEAPEvents Services

HIMSSNon-profit Organizations

HIMSS Global Health Conference & ExhibitionEvents Services

Global Health Exhibition - ملتقى الصحة العالميEvents Services

VIBE SAUDIEvents Services

Cityscape GlobalReal Estate

ESTAADEvents Services

Informa U.S. Boat ShowsEvents Services

Hong Kong Convention and Exhibition Centre (Management) LimitedEvents Services

ABASTUREvents Services

HOTELEXEvents Services

UBM Sinoexpo-ExpofinefoodEvents Services

UBM Sinoexpo-Hotel SuppliesEvents Services

UBM Sinoexpo-Wine & SpiritsEvents Services

UBM Sinoexpo-Coffee & TeaEvents Services

Fi IndiaEvents Services

Fi India AwardsFood and Beverage Manufacturing

Aircraft Interiors Middle East- AIMEAviation and Aerospace Component Manufacturing

Black Hat MEAEvents Services

InFlavourFood and Beverage Services

EXPOMAFEMachinery Manufacturing

Electric & Hybrid Vehicle Technology ExpoEvents Services

Cosmoprof AsiaEvents Services

WWETT ShowUtilities

CMA ShippingMaritime Transportation

ISSA Show North AmericaEvents Services

CAMWATERGovernment Administration

WHX DubaiEvents Services

EastPack LimitedFarming

GROWTECH. EventsEvents Services

VIETSTOCK Expo & ForumEvents Services

Art MiamiEvents Services

FIREX EgyptEvents Services

Mining IndonesiaMining

FHC - Shanghai Global Food Trade ShowEvents Services

AQUACULTURE VIETNAM EXPO & FORUMEvents Services

Global Aerospace SummitAirlines and Aviation

THE GREEN EXPO® MEXICOEvents Services

DesignConEvents Services

METALTECH & AUTOMEXMachinery Manufacturing

Adhesives & Bonding Expo EuropeEvents Services

Manufacturing by InformaEvents Services

PlasticsTodayTechnology, Information and Media

MD+DITechnology, Information and Media

Packaging DigestTechnology, Information and Media

MD&M Trade ShowsEvents Services

Pharmaceutical & Medical Packaging News (PMPN)Packaging and Containers Manufacturing

Design NewsTechnology, Information and Media

Powder & Bulk SolidsTechnology, Information and Media

MedTech WorldMedical Equipment Manufacturing

Qmed NewsMedical Equipment Manufacturing

EMDTMedical Equipment Manufacturing

HBA EventsPackaging and Containers Manufacturing

Cityscape BahrainReal Estate

Intertraffic AmericasFacilities Services

Informa Markets MalaysiaEvents Services

Super Terminal ExpoEvents Services

Untitled ArtArtists and Writers

Furniture ChinaEvents Services

Build Show LIVEResidential Building Construction

Informa Markets - MéxicoEvents Services

COTTM - China Outbound Travel & Tourism MarketEvents Services

Electric & Power IndonesiaAppliances, Electrical, and Electronics Manufacturing

HospitalarAdvertising Services

Informa Markets in the PhilippinesEvents Services

Beauty Expo AustraliaEvents Services

Sustainable Manufacturing ConferenceEvents Services

OSH IndiaPublic Safety

Construction Indonesia & Concrete Show SEAConstruction

Jakarta International ExpoEvents Services

UTECH LAS AMÉRICASPlastics and Rubber Product Manufacturing

TOC AsiaEducation

Client Solutions - North AmericaEvents Services

Newport International Boat ShowEvents Services

Nigeria EnergyEvents Services

Water IndonesiaEvents Services

OSH BangladeshEvents Services

Informa Markets - Infrastructure & ConstructionEvents Services

Medlab Middle East by BeelalRetail Health and Personal Care Products

The Battery Show EuropeAppliances, Electrical, and Electronics Manufacturing

The Battery ShowEvents Services

Electric & Hybrid Vehicle Technology Expo EuropeAppliances, Electrical, and Electronics Manufacturing

Informa Markets in AsiaEvents Services

APLFEvents Services

HOFEXFood and Beverage Services

The Battery Show AsiaEvents Services

Data Center AsiaEvents Services

Natural & Organic AsiaEvents Services

Restaurant, Bar & Café Hong KongEvents Services

Concrete ShowConstruction

Autotech EgyptMotor Vehicle Manufacturing

World of ConcreteConstruction

Gulf Print & PackPrinting Services

Thermal Management ExpoEvents Services

Pharmapack EuropeEvents Services

Seatrade CruiseEvents Services

F&B@SeaFood and Beverage Services

PharmaconexEvents Services

Loading…

Pharmaconex Nigeria Similar Companies

Novartis

novartis.com

Novartis is an innovative medicines company. Every day, working to reimagine medicine to improve and extend people’s lives so that patients, healthcare professionals and societies are empowered in the face of serious disease. Our medicines reach more than 250 million people worldwide. Find out more at https://www.novartis.com See our community guidelines: https://go.novartis.social/3Nboxki

Sanofi

sanofi.com

We are an R&D driven, AI-powered biopharma company committed to improving people’s lives and delivering compelling growth. We apply our deep understanding of the immune system to invent medicines and vaccines that treat and protect millions of people around the world, with an innovative pipeline that could benefit millions more. Our team is guided by one purpose: we chase the miracles of science to improve people’s lives; this inspires us to drive progress and deliver positive impact for our people and the communities we serve, by addressing the most urgent healthcare, environmental, and societal challenges of our time. Interactions with this account must comply with the Terms: https://bit.ly/sanofi-terms

Bristol Myers Squibb

cb bms.com

At Bristol Myers Squibb, we work every day to transform patients’ lives through science. That work inspires some of the most interesting, meaningful, and life-changing careers you’ll experience. Join us and pursue innovative ideas alongside some of the brightest minds in biopharma, collaborating with a team rich in diversity of experiences, and perspectives. We have built a sustainable pipeline of potential therapies and are leveraging translational medicine and data analytics to understand how we can deliver the right medicine to the right patient, at the right time, to achieve the best outcome. Whether in a scientific, business or supporting function, a career at BMS means you’ll be inspired every day to grow and thrive through opportunities that are uncommon in scale and scope. Here, you’ll be on the cutting edge of powerful innovation in oncology, hematology, immunology, cardiovascular disease, and fibrosis, with colleagues united in the mission to help patients. Through the Bristol Myers Squibb Foundation, we also promote health equity and seek to improve health outcomes of populations disproportionately affected by serious diseases and conditions. Our mission is to give new hope to help patients prevail over serious disease – it drives everything we do. Review our Social Media Community Guidelines at: https://www.bms.com/social-media-community-guidelines.html

PT Kalbe Farma, Tbk

kalbe.co.id

Established in 1966, PT Kalbe Farma Tbk. (“the Company” or “Kalbe”) has gone a long way from its humble beginnings as a garage-operated pharmaceutical business in North Jakarta. It has expanded by strategic acquisitions of pharmaceutical companies, building a leading brand positioning and reaching to international markets to transform itself into an integrated consumer health and nutrition enterprise to promote its mission to improve health for a better life. Kalbe expands its business interests and transformed itself to become a provider of an integrated healthcare solution through its 4 business divisions: the Prescription Pharmaceutical Division, Consumer Health Division, Nutritionals Division and Distribution and Logistics Division. These business divisions manage an extensive portfolio of prescription pharmaceuticals and OTC drugs, energy drink and nutrition products, as well as a robust distribution arm serving over one million outlets across Indonesia’s vast archipelago. In the international market, the Company has established its footprint in ASEAN countries, Nigeria, and South Africa, positioning Kalbe as a national pharmaceutical company with a competitive edge in the export market. Kalbe Farma has established a robust research and development activities in leading edge generic drug formulation and continuous development of innovative consumer and nutritional products. Through strategic alliances with international partners, Kalbe have also started to support several successful research and development venture working on cancer drugs, stem cells and biotechnology research. With 17,000 employees, Kalbe Farma is the largest healthcare provider in Indonesia, with unrivaled marketing, branding, distribution, financial strength and research and development expertise. Kalbe Farma is also the largest publicly-listed pharmaceutical company in Southeast Asia, commanding a market capitalization of Rp71.0 trillion and sales turnover Rp21.0 trillion by end of 2018.

Alembic Pharmaceuticals Limited

alembic-india.com

Established in 1907, Alembic Pharmaceuticals Limited is a leading pharmaceutical company in India. The Company is vertically integrated with the ability to develop, manufacture and market pharmaceutical products, pharmaceutical substances and Intermediates. Alembic is the market leader in the Macrolides segment of anti-infective drugs in India. Alembic's manufacturing facilities are located in Vadodara and Baddi in Himachal Pradesh. The plant at Vadodara has the largest fermentation capacity in India. The Panelav facility houses the API and formulation manufacturing (both US FDA approved) plants. The plant at Baddi, Himachal Pradesh manufactures formulations for the domestic and non-regulated export market. The company has a state of the art Research Centre at Vadodara.

AUROBINDO PHARMA LTD

aurobindo.com

Aurobindo Pharma Limited (NSE: AUROPHARMA, BSE: 524804, Reuters: ARBN.NS, Bloomberg: ARBP IN) is an integrated global pharmaceutical company headquartered in Hyderabad, India. The Company develops, manufactures, and markets a wide range of generic pharmaceuticals, branded specialty drugs, and active pharmaceutical ingredients (APIs) across more than 150 countries. It is ranked among the top 10 generic companies in eight European nations and holds the distinction of being the largest generic pharmaceutical company in the United States. With over 30 state-of-the-art manufacturing and packaging facilities approved by leading global regulatory authorities including USFDA, UK MHRA, EDQM, Japan PMDA, WHO, Health Canada, South Africa MCC, and Brazil ANVISA, Aurobindo Pharma ensures the highest standards of quality. Its robust portfolio spans eight major therapeutic areas: Central Nervous System (CNS), Antiretroviral (ARV), Cardiovascular (CVS), Antibiotics, Gastroenterology, Anti-diabetics, Oncology, and Dermatology, supported by a strong R&D infrastructure that drives innovation, affordability, and accessibility.

UCB

cb ucb.com

At UCB, we believe everyone deserves to live the best life they can - as free as possible from the challenges and uncertainty of disease. Our purpose is to support people living with severe central nervous system and immunological conditions by delivering meaningful solutions that go beyond medicine. We are driven by the experiences of patients and caregivers, and inspired to pursue innovations that create real value - not just in clinical outcomes, but in everyday moments, dreams pursued, and simple pleasures enjoyed. Our ambition is to unlock transformative science and technologies that respond to unmet needs and elevate lives. From our headquarters in Belgium to nearly 40 countries around the world, we nurture a culture of respect and care. By listening deeply and collaborating across borders and disciplines, we enable cutting-edge research shaped by patients’ needs. Through strong connections with healthcare professionals, partners, and communities, we strive to make a lasting impact - today and into the future. We're inspired by patients, driven by science.

Cipla

cipla.com

Cipla is a leading global pharmaceutical company trusted by healthcare professionals and patients across the world since 1935. A compassionate approach to healthcare that goes beyond the pursuit of profit and growth has been the force impelling Cipla’s history over the years. Our credo and our purpose of ‘Caring for Life' continues to guide our actions towards our people and the planet for creating a sustainable future. Cipla today has presence in 80+ countries, providing over 1,500 products across various therapeutic categories in 50+ dosage forms. Keeping with our legacy of care, we constantly strive to ensure access to high-quality medicines that make a difference in the lives of patients. Our paradigm-changing offer of a triple anti-retroviral (ARV) therapy in HIV/AIDS at less than a dollar a day in Africa in 2001 was pivotal in bringing inclusiveness, accessibility and affordability to the centre of the HIV movement. An unmatched presence across the care continuum (awareness, prevention, diagnosis, treatment and adherence) and the widest range of drug-device combinations has established Cipla’s respiratory leadership in India and other key emerging markets. Armed with this legacy and a deep understanding of the lungs, we have articulated our aspiration to become a global lung leader and help millions breathe free.

Glenmark Pharmaceuticals

glenmarkpharma.com

Glenmark Pharmaceuticals Limited is a research-led, global organization committed to enriching lives. Innovation is deeply embedded in Glenmark’s culture; it is how we differentiate ourselves in our key markets and create greater value for our stakeholders. In our journey of innovation over the past four and a half decades, we have evolved from a generics company to a global organization offering specialty and branded products. Glenmark’s core values of Achievement, Respect, and Knowledge impart a sense of organizational unity that drives our growth. We have established a robust global branded generics, specialty, and OTC business; with a significant presence in the therapy areas of dermatology, respiratory, and oncology. Our ten state-of-the-art manufacturing facilities spread across four continents with operations in over 80 countries help us impact millions of patients across the globe. We recently consolidated our innovation efforts in small molecules and biologics research with the formation of ‘Ichnos Glenmark Innovation’ (IGI). This alliance is aimed at leveraging the capabilities of Glenmark and its subsidiary, Ichnos Sciences, to accelerate innovation in cancer treatment. To know more about IGI, check out: https://iginnovate.com/ Sustainability is an integral aspect of all our operations and we are focused on achieving our Environment, Social and Governance (ESG) goals. Our responsibility also extends to our communities, and over the years, our CSR efforts have touched the lives of over 3 million people.

Loading…

NEWS

Pharmaconex Nigeria CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86564

SUMMARY

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-55250

SUMMARY

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-53639

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r

CVE-2026-53638

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp

CVE-2026-53637

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Pharmaconex Nigeria Vendor Cyber Rating & Cyber Score

Pharmaconex Nigeria A.I CyberSecurity Scoring

Pharmaconex Nigeria CyberSecurity News & History

Pharmaconex Nigeria Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Pharmaconex Nigeria

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Pharmaconex Nigeria vs Pharmaceutical Manufacturing Industry Avg (This Year)

Incident History - Pharmaconex Nigeria (X = Date, Y = Severity)

Pharmaconex Nigeria Subsidiaries

Pharmaconex Nigeria

Pharmaconex Nigeria Similar Companies

Novartis

Sanofi

Bristol Myers Squibb

PT Kalbe Farma, Tbk

Alembic Pharmaceuticals Limited

AUROBINDO PHARMA LTD

UCB

Cipla

Glenmark Pharmaceuticals

Pharmaconex Nigeria CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Pharmaconex Nigeria CyberSecurity News & History

Pharmaconex Nigeria Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Pharmaconex Nigeria

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Pharmaconex Nigeria vs Pharmaceutical Manufacturing Industry Avg (This Year)

Incident History - Pharmaconex Nigeria (X = Date, Y = Severity)

Pharmaconex Nigeria Subsidiaries

Pharmaconex Nigeria

Pharmaconex Nigeria Similar Companies

Novartis

Sanofi

Bristol Myers Squibb

PT Kalbe Farma, Tbk

Alembic Pharmaceuticals Limited

AUROBINDO PHARMA LTD

UCB

Cipla

Glenmark Pharmaceuticals

Pharmaconex Nigeria CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo