What is the official website of RAMSEIER Suisse AG ?

The official website of RAMSEIER Suisse AG is http://www.ramseier-suisse.ch.

What is RAMSEIER Suisse AG's cybersecurity risk score?

RAMSEIER Suisse AG has an AI-generated cybersecurity risk score of 747 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has RAMSEIER Suisse AG experienced?

According to Rankiteo, RAMSEIER Suisse AG currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has RAMSEIER Suisse AG been affected by any supply chain cyber incidents ?

According to Rankiteo, RAMSEIER Suisse AG has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does RAMSEIER Suisse AG have SOC 2 Type 1 certification ?

According to Rankiteo, RAMSEIER Suisse AG is not certified under SOC 2 Type 1.

Does RAMSEIER Suisse AG have SOC 2 Type 2 certification ?

According to Rankiteo, RAMSEIER Suisse AG does not hold a SOC 2 Type 2 certification.

Does RAMSEIER Suisse AG comply with GDPR ?

According to Rankiteo, RAMSEIER Suisse AG is not listed as GDPR compliant.

Does RAMSEIER Suisse AG have PCI DSS certification ?

According to Rankiteo, RAMSEIER Suisse AG does not currently maintain PCI DSS compliance.

Does RAMSEIER Suisse AG comply with HIPAA ?

According to Rankiteo, RAMSEIER Suisse AG is not compliant with HIPAA regulations.

Does RAMSEIER Suisse AG have ISO 27001 certification ?

According to Rankiteo,RAMSEIER Suisse AG is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does RAMSEIER Suisse AG operate in ?

RAMSEIER Suisse AG operates primarily in the Food and Beverage Manufacturing industry.

How many employees does RAMSEIER Suisse AG have ?

RAMSEIER Suisse AG employs approximately 129 people worldwide.

Does RAMSEIER Suisse AG own any subsidiaries ?

RAMSEIER Suisse AG presently has no subsidiaries across any sectors.

How many LinkedIn followers does RAMSEIER Suisse AG have ?

RAMSEIER Suisse AG's official LinkedIn profile has approximately 7,654 followers.

What is the NAICS classification code for RAMSEIER Suisse AG ?

RAMSEIER Suisse AG is classified under the NAICS code 311, which corresponds to Food Manufacturing.

Does RAMSEIER Suisse AG have a Crunchbase profile ?

No, RAMSEIER Suisse AG does not have a profile on Crunchbase.

Does RAMSEIER Suisse AG have a LinkedIn profile ?

Yes, RAMSEIER Suisse AG maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ramseier-schweiz-ag.

How many cybersecurity incidents has RAMSEIER Suisse AG experienced ?

As of September 9, 2026, Rankiteo reports that RAMSEIER Suisse AG has not experienced any cybersecurity incidents.

How many peer or competitor companies does RAMSEIER Suisse AG have ?

RAMSEIER Suisse AG has an estimated 4,483 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

RSA

Boost Score +25 with badge (5 left)

747

/1000

Moderate

772

/1000

Fair

RAMSEIER Suisse AG Vendor Cyber Rating & Cyber Score

ramseier-suisse.ch

Add Your Compliance Badge

250 engagierte Mitarbeiterinnen und Mitarbeiter tragen täglich zum Erfolg der RAMSEIER Suisse bei. Das macht das Unternehmen zu einem der grössten Schweizer Getränkeproduzenten. Die RAMSEIER Suisse AG gibt es unter diesem Namen seit 2008. Entstanden ist das Unternehmen aus dem Zusammenschluss traditionsreicher Firmen. Eine Entwicklung, die sich über Jahrzehnte erstreckte. Die RAMSEIER Suisse AG gehört zur fenaco-Gruppe. Sie führt Press- und Produktionsbetriebe an fünf Standorten in der Schweiz. Ihr Hauptsitz liegt in Sursee im Kanton Luzern. Heute ist die RAMSEIER Suisse AG einer der grössten Schweizer Getränkeproduzenten. Das Unternehmen stellt Obst- und Fruchtsäfte, Erfrischungsgetränke, Mineralwasser, Sirup und Bier her. Das eigene

RSA

RAMSEIER Suisse AG CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

RSA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for RSA

Incidents vs Food and Beverage Manufacturing Industry Avg (This Year)

No incidents recorded for RAMSEIER Suisse AG in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for RAMSEIER Suisse AG in 2026.

Incident Types RSA vs Food and Beverage Manufacturing Industry Avg (This Year)

No incidents recorded for RAMSEIER Suisse AG in 2026.

Incident History - RSA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

RAMSEIER Suisse AG Subsidiaries

RSA

Food and Beverage Manufacturing

Website: http://www.ramseier-suisse.ch

Company Size: 129

fenacoFarming

AGROLA AGServices for Renewable Energy

Volg Konsumwaren AGRetail

TRAVECO Transporte AGTruck Transportation

BISON GroupIT Services and IT Consulting

LANDI Schweiz AGRetail

ProvinsBeverage Manufacturing

frigemo agFood and Beverage Manufacturing

CFD SA / CulturefoodFood & Beverages

UFA AGFarming

Kellenberger Frisch Service frigemo AGWholesale Food and Beverage

Serco SuisseFarming

granaagro Deutschland GmbHTransportation, Logistics, Supply Chain and Storage

UFAG Laboratorien AGPharmaceutical Manufacturing

LANDI Reba AGFarming

LANDI Thun GenossenschaftFarming

Landor fenaco GenossenschaftFarming

Umatec SAFarming

Rutishauser-DiVino SABeverage Manufacturing

Anicom AGFarming

UFA-Samen PROFI GRÜNFarming

Gourmador UnterseenFood and Beverage Services

Halag Chemie AGChemical Manufacturing

Gourmador frigemo agWholesale

Landi Centre BroyeRetail

Landi Pilatus AGRetail

LANDI Broye-Vully SARetail

Meliofeed AGFarming

Meliofeed SAFarming

LANDI Region LangnauRetail

AGROLINE fenaco GenossenschaftFarming

Ernst Sutter AGFood and Beverage Manufacturing

Gebrüder Marksteiner frigemo AGFood and Beverage Services

LANDI Zola AGFarming

LANDI La Côte SARetail

Loading…

RAMSEIER Suisse AG Similar Companies

Arla Foods

arla.com

We are more than 23,000 colleagues across 39 countries and 7,624 dairy farmer-owners in Denmark, Sweden, United Kingdom, Germany, Belgium, Luxembourg, and the Netherlands. We aim to create the future of dairy, to bring healthy and sustainable dairy products to people across the world, and to lead the transition towards sustainable dairy farming and production. We work continuously on the farms, at the dairies, and in our administration to reduce our carbon footprint and environmental impact. We are committed to champion good food habits and inspire a healthy life. We collaborate with NGOs and public stakeholders to develop viable dairy sectors in our emerging markets and to ensure access to affordable dairy nutrients. And we take our responsibility, our relationships, and our role in society seriously. Through these actions, we support a stronger planet and enable stronger people. We work together with our customers, scientists, suppliers, NGO’s, and other stakeholders who help us develop our business. Our consumers will benefit from our innovative approach and quality focus through our well-known brands Arla®, Lurpak®, Castello®, and Puck®, which are sold in more than 120 countries. • Revenue 2024: 13.8 billion EUR • Cooperative farmer owners 2024: 7,624 • Milk volume 2024: 13.7bn kilogram

ADM

adm.com

ADM unlocks the power of nature to enrich the quality of life. We’re an essential global agricultural supply chain manager and processor, providing food security by connecting local needs with global capabilities. We’re a premier human and animal nutrition provider, offering one of the industry’s broadest portfolios of ingredients and solutions from nature. We’re a trailblazer in health and well-being, with an industry-leading range of products for consumers looking for new ways to live healthier lives. We’re a cutting-edge innovator, guiding the way to a future of new bio-based consumer and industrial solutions. And we're leading in business-driven sustainability efforts that support a strong agricultural sector, resilient supply chains, and a vast and growing bioeconomy. Around the globe, our expertise and innovation are meeting critical needs from harvest to home. Learn more at www.adm.com.

Mondelēz International

mondelezinternational.com

Mondelēz International, Inc. (NASDAQ: MDLZ) is an American multinational confectionery, food, and beverage company based in Illinois which employs approximately 80,000 individuals around the world. Our Purpose Our purpose is to empower people to snack right. We will lead the future of snacking around the world by offering the right snack, for the right moment, made the right way. Our Brands We’re leading the future of snacking with iconic brands such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. Our People Our 80,000+ colleagues around the world are key to the success of our business. Our Values and Leadership Commitments of Love our Consumers and Brands, Grow Every Day, and Do What's Right shapes our culture – what we believe in, stand for, and what guides our actions and decisions. Great people and great brands. That’s who we are. Our Strategies We are uniquely positioned to lead the future of snacking with strong leadership in our categories, an unparalleled portfolio of global and local brands and a solid footprint in fast-growing markets. Aimed at delivering sustainable growth, our strategic plan is centered around three strategic priorities: • Growth: accelerate consumer-centric growth • Execution: drive operational excellence • Culture: build a winning growth culture

Bimbo Bakeries USA

bimbobakeriesusa.com

Have you ever started your morning with a Thomas’® English muffin or bagel? Or bitten into the perfect slice of Sara Lee® bread? Do you break open a fresh box of Entenmann’s® donuts at family gatherings? If so, you’re already a fan of Bimbo Bakeries USA – the powerhouse behind these iconic brands! Bimbo Bakeries USA is part of Grupo Bimbo, the world’s largest baking company with operations in 39 countries. Bimbo Bakeries USA employs 20,000 associates across the Country in bakeries, sales centers, corporate offices and on sales routes to ensure our consumers have the freshest products to feed their families at every meal.

JBS

cb jbs.com.br

Na JBS, a gente alimenta um futuro melhor. Tudo começou com uma pequena porta de um açougue, há mais de 70 anos. E, daquela porta, surgiram muitas outras. Foi acreditando em coisas simples, em fazer sempre melhor, contando com o trabalho de muita gente e abrindo portas com quem cresce ao nosso lado, que, hoje, estamos presentes em 5 continentes. Com mais de 280 mil colaboradores em mais de 20 países, somos uma das maiores empresas de alimentos do mundo. Contamos com um portfólio diversificado de produtos, que inclui frango, bovinos, suínos, cordeiro, peixes e proteínas vegetais. Com marcas reconhecidas pela excelência e inovação, como Friboi, Seara, Swift, Mantiqueira, Pilgrim's, Just Bare, Principe, Richmond, Vivera, Rigamonti, Primo, Huon, Great Southern, entre outras, levamos qualidade à mesa de consumidores em 180 países. Também atuamos em negócios correlatos, como couro, biodiesel, colágeno, envoltórios naturais, soluções para gestão de resíduos sólidos, reciclagem e transporte, com foco na economia circular. Do campo à mesa, o nosso propósito é alimentar o mundo de forma cada vez mais sustentável, sem nunca esquecer da nossa origem. Porque a chave para abrir novas portas é sempre a mesma: trabalho duro, humildade e simplicidade. JBS A gente alimenta um futuro melhor *** Para que esta página esteja alinhada às nossas políticas e condutas internas, não serão tolerados comentários ofensivos, inadequados ou preconceituosos, bem como ameaças, spams e divulgação de marcas ou venda de produtos. Portanto, todos os comentários que não seguirem as regras serão deletados sem aviso prévio.

McCain Foods

mccain.com

At McCain, we believe food plays an important role in people’s lives, with the power to bring individuals, families, and communities together. As a privately owned family company with over 67 years of experience, a presence in over 160 countries, and a global team of 23,000+ people, our values and culture are at the heart of everything we do. Our product quality, people and customer dedication help us achieve global sales in excess of CDN $14 billion. Through our investment and innovation agenda, we continue to be a global leader in prepared potato products, including our famous French Fries and appetizers. Guided by our purpose—celebrating real connections through delicious, planet-friendly food—we believe that working together with our teams, business and community partners will bring sustainable growth and positive change. At McCain, sustainability goes to the heart of our purpose as a business. That purpose means putting agronomy at the forefront of all we do to ensure healthier soils which lead to more sustainably sourced food. It means reducing our climate impact and supporting the communities where we operate—today, tomorrow and for generations to come. 🌱🥔🍟 Connect with McCain Foods on: Instagram: @McCainGlobal Twitter: @McCainGlobal YouTube: @McCainFoodsGlobal Threads: @mccainglobal 💛 #WeAreMcCain

Greencore

cb greencore.com

Greencore is the UK’s leading convenience food manufacturer. We bring industry-leading innovation to create high-quality, fresh and convenient food to customers and consumers. We supply all major UK supermarkets, convenience and travel retail outlets, discounters, coffee shops, foodservice providers, and other retailers. Our portfolio spans products across all meal occasions, including sandwiches, salads, sushi, chilled snacking, ready meals, pizza and bread, chilled soups and sauces, quiche, ambient sauces, pickles, frozen Yorkshire puddings, dips and desserts. In addition, we’re a well-established national manufacturer of fresh meals to grocery retailers in the US, producing fresh meals, breads, dips soups, sauces and burritos out of manufacturing facilities in California, Texas and North Carolina. Headquartered in Dublin, Ireland, the combined entity generated approximately £4 billion in revenue in FY25 and employs around 28,000 people.

FrieslandCampina

cb frieslandcampina.com

FrieslandCampina is a large international dairy company with a cooperative history dating back more than 150 years. The company processes milk into a wide range of dairy products and ingredients. Royal FrieslandCampina N.V. is fully owned by Zuivelcoöperatie FrieslandCampina U.A., with 14,634 dairy farmers in the Netherlands, Belgium and Germany as members. Through the cooperative, these member dairy farmers jointly own the company. FrieslandCampina provides consumers with dairy products, such as milk, yoghurt, condensed milk, dairy-based beverages, cheese, butter, quark and cream. The dairy company supplies specific nutrition geared to meet the needs of specific consumer groups, such as children, the elderly and sportspeople. Professional customers, such as bakers, pastry chefs, chocolate confectioners, chefs and caterers can also rely on our broad product range, including creams, butter, desserts and fillings. In addition, the company supplies high-quality ingredients to international food producers and pharmaceutical companies. With 20,928 employees (FTEs) and branches in 29 countries, our products find their way to more than 100 countries worldwide. Our company has an inclusive culture that reflects our heritage. That means people here are open, friendly, straight-forward and pragmatic. Our team players are always seeking collaborations built on trust and respect, and that spirit fuels the power of ‘We’. Our culture is about embracing the power of differences in order to grow together. It is the diversity of our people, their individual enthusiasm and collective commitment to shaping the future of dairy that makes FrieslandCampina such a special place to work. We believe that when you stay true to your nature, you will get the most out of your natural potential. If that is in your nature too. Bring your spark. Join us. Grow with us.

Louis Dreyfus Company

cb ldc.com

Louis Dreyfus Company is a leading merchant and processor of agricultural goods. We leverage our global reach and extensive asset network to serve our customers and consumers around the world, delivering the right products to the right location, at the right time – safely, responsibly and reliably. Our activities span the entire value chain from farm to fork, across a broad range of business lines (platforms). Since 1851 our portfolio has grown to include Grains & Oilseeds, Food & Feed Solutions, Coffee, Cotton, Juice, Rice, Sugar, Freight and Global Markets. We help feed and clothe some 500 million people every year by originating, processing and transporting approximately 80 million tons of products. Structured as a matrix organization of six geographical regions and nine platforms, Louis Dreyfus Company is active in over 100 countries and employs approximately 18,000 people globally. For more information, visit www.ldc.com.

Loading…

NEWS

RAMSEIER Suisse AG CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86564

SUMMARY

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-55250

SUMMARY

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-53639

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r

CVE-2026-53638

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp

CVE-2026-53637

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

RAMSEIER Suisse AG Vendor Cyber Rating & Cyber Score

RSA A.I CyberSecurity Scoring

RAMSEIER Suisse AG CyberSecurity News & History

RSA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for RSA

Incidents vs Food and Beverage Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types RSA vs Food and Beverage Manufacturing Industry Avg (This Year)

Incident History - RSA (X = Date, Y = Severity)

RAMSEIER Suisse AG Subsidiaries

RSA

RAMSEIER Suisse AG Similar Companies

Arla Foods

ADM

Mondelēz International

Bimbo Bakeries USA

JBS

McCain Foods

Greencore

FrieslandCampina

Louis Dreyfus Company

RAMSEIER Suisse AG CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

RAMSEIER Suisse AG CyberSecurity News & History

RSA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for RSA

Incidents vs Food and Beverage Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types RSA vs Food and Beverage Manufacturing Industry Avg (This Year)

Incident History - RSA (X = Date, Y = Severity)

RAMSEIER Suisse AG Subsidiaries

RSA

RAMSEIER Suisse AG Similar Companies

Arla Foods

ADM

Mondelēz International

Bimbo Bakeries USA

JBS

McCain Foods

Greencore

FrieslandCampina

Louis Dreyfus Company

RAMSEIER Suisse AG CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo