What is the official website of Solidsoft Reply ?

The official website of Solidsoft Reply is http://www.solidsoftreply.com.

What is Solidsoft Reply's cybersecurity risk score?

Solidsoft Reply has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Solidsoft Reply experienced?

According to Rankiteo, Solidsoft Reply currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Solidsoft Reply been affected by any supply chain cyber incidents ?

According to Rankiteo, Solidsoft Reply has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Solidsoft Reply have SOC 2 Type 1 certification ?

According to Rankiteo, Solidsoft Reply is not certified under SOC 2 Type 1.

Does Solidsoft Reply have SOC 2 Type 2 certification ?

According to Rankiteo, Solidsoft Reply does not hold a SOC 2 Type 2 certification.

Does Solidsoft Reply comply with GDPR ?

According to Rankiteo, Solidsoft Reply is not listed as GDPR compliant.

Does Solidsoft Reply have PCI DSS certification ?

According to Rankiteo, Solidsoft Reply does not currently maintain PCI DSS compliance.

Does Solidsoft Reply comply with HIPAA ?

According to Rankiteo, Solidsoft Reply is not compliant with HIPAA regulations.

Does Solidsoft Reply have ISO 27001 certification ?

According to Rankiteo,Solidsoft Reply is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Solidsoft Reply operate in ?

Solidsoft Reply operates primarily in the IT Services and IT Consulting industry.

How many employees does Solidsoft Reply have ?

Solidsoft Reply employs approximately 66 people worldwide.

Does Solidsoft Reply own any subsidiaries ?

Solidsoft Reply presently has no subsidiaries across any sectors.

How many LinkedIn followers does Solidsoft Reply have ?

Solidsoft Reply's official LinkedIn profile has approximately 2,225 followers.

What is the NAICS classification code for Solidsoft Reply ?

Solidsoft Reply is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Solidsoft Reply have a Crunchbase profile ?

No, Solidsoft Reply does not have a profile on Crunchbase.

Does Solidsoft Reply have a LinkedIn profile ?

Yes, Solidsoft Reply maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/solidsoft.

How many cybersecurity incidents has Solidsoft Reply experienced ?

As of August 16, 2026, Rankiteo reports that Solidsoft Reply has not experienced any cybersecurity incidents.

How many peer or competitor companies does Solidsoft Reply have ?

Solidsoft Reply has an estimated 41,350 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Solidsoft Reply

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

Solidsoft Reply Vendor Cyber Rating & Cyber Score

solidsoftreply.com

Add Your Compliance Badge

Solidsoft Reply specialises in developing tailored digital applications & clinical integrations for the healthcare & pharma industries using Microsoft’s Azure suite. The benefits of our award-winning solutions have enabled our customers to be more efficient, increase medicines safety and provide better insight at the point of care. www.solidsoft.reply.com

Solidsoft Reply A.I CyberSecurity Scoring

Scoring History

Solidsoft Reply

Solidsoft Reply CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Solidsoft Reply Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Solidsoft Reply

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Solidsoft Reply in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Solidsoft Reply in 2026.

Incident Types Solidsoft Reply vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Solidsoft Reply in 2026.

Incident History - Solidsoft Reply (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Solidsoft Reply Subsidiaries

Solidsoft Reply

IT Services and IT Consulting

Website: http://www.solidsoftreply.com

Company Size: 66

124

ReplyIT Services and IT Consulting

Spike ReplyIT Services and IT Consulting

Airwalk ReplyIT Services and IT Consulting

Blue Reply ITIT Services and IT Consulting

Concept Reply GmbHInformation Technology & Services

Machine Learning ReplyIT Services and IT Consulting

Open Reply ITIT Services and IT Consulting

Spur ReplyBusiness Consulting and Services

Communication Valley ReplyComputer and Network Security

Concept Quality ReplyIT Services and IT Consulting

Data Reply UKIT Services and IT Consulting

Like ReplyAdvertising Services

Fincon Reply GmbHInformation Services

Wemanity Learning CenterDéveloppement professionnel et coaching

ARLANIS REPLYIT Services and IT Consulting

HERMES REPLYInformation Technology & Services

AIM ReplyIT Services and IT Consulting

Sense ReplyIT Services and IT Consulting

Glue ReplyIT Services and IT Consulting

Target Reply RomeIT Services and IT Consulting

Business Elements ReplyIT Services and IT Consulting

Sprint Reply ITInformation Technology & Services

Concept Reply USInformation Technology & Services

Liquid ReplyIT Services and IT Consulting

Life At ReplyIT Services and IT Consulting

Avantage ReplyFinancial Services

IFRS 9Financial Services

Compliance and Conduct RiskFinancial Services

Valorem ReplyIT Services and IT Consulting

Valorem Reply - Technology Industry SolutionsIT Services and IT Consulting

CLUSTER REPLYIT Services and IT Consulting

BitmamaAdvertising Services

Nexi DigitalFinancial Services

Threepipe ReplyAdvertising Services

Lynx RecruitmentStaffing and Recruiting

Wemanity BelgiumInformation Technology & Services

Storm ReplyIT Services and IT Consulting

Syskoplan Reply USIT Services and IT Consulting

ATLAS REPLYIT Services and IT Consulting

Go ReplyIT Services and IT Consulting

Cluster Reply DEIT Services and IT Consulting

WM ReplyIT Services and IT Consulting

Wemanity MarocIT Services and IT Consulting

Xister ReplyAdvertising Services

Cloud9 ReplyIT Services and IT Consulting

Business ReplySoftware Development

Pay ReplyInformation Technology & Services

Net ReplyIT Services and IT Consulting

Mansion House ConsultingBusiness Consulting and Services

Technology ReplySoftware Development

Data Reply FRInformation Technology & Services

Concept Engineering ReplyIT Services and IT Consulting

Comsysto Reply GmbHIT Services and IT Consulting

Machine Learning Reply GmbHIT Services and IT Consulting

Light ReplyIT Services and IT Consulting

TD ReplyBusiness Consulting and Services

Canvas ReplyIT Services and IT Consulting

Laife ReplyInformation Technology & Services

Comwrap Reply ITIT Services and IT Consulting

Whitehall ReplyIT Services and IT Consulting

ARLANIS REPLY ITIT Services and IT Consulting

Triplesense ReplyTechnology, Information and Internet

Blue Reply DEIT Services and IT Consulting

Technology Reply RomaniaIT Services and IT Consulting

Logistics Reply DESoftware Development

Connect ReplyIT Services and IT Consulting

Graymatter ReplyAdvertising Services

Ringmaster S.r.l.Software Development

Aktive ReplyInformation Technology & Services

Shield ReplyIT Services and IT Consulting

Cortex Reply UKTechnology, Information and Internet

Syskoplan Reply DACHInformation Technology & Services

4brands ReplyInformation Technology & Services

Cortex Reply DEIT Services and IT Consulting

Spike Reply LuxembourgIT Services and IT Consulting

Autonomous Reply FRIT Services and IT Consulting

Accelerator 365 by ReplySoftware Development

Roboverse Reply DEIT Services and IT Consulting

Logistics Reply UKSoftware Development

Sprint Reply DEIT Services and IT Consulting

Sprint Reply BEIT Services and IT Consulting

Open Reply UKInformation Technology & Services

Starbytes.itInformation Technology & Services

KI ReplyInformation Technology & Services

Comwrap Reply DACHTechnology, Information and Internet

Reply ChallengesFornitori di e-learning

Data Reply ITIT Services and IT Consulting

Target ReplyData Infrastructure and Analytics

Wemanity NetherlandsProfessional Training and Coaching

Sytel ReplyIT Services and IT Consulting

Data Reply DEInformation Technology & Services

Blockchain ReplyIT Services and IT Consulting

Leadvise ReplyBusiness Consulting and Services

Digital Transformation der Regulatory AffairsUnternehmensberatung

Open ReplyInformation Technology & Services

Infinity Reply ITIT Services and IT Consulting

Logistics Reply USSoftware Development

Live Reply DEIT Services and IT Consulting

Storm Reply DEIT Services and IT Consulting

Brick Reply | IT Solutions and Services for ManufacturingSoftware Development

Core ReplyInformation Technology & Services

Up ReplyIT Services and IT Consulting

Sprint Reply UKIT Services and IT Consulting

Red Reply DEIT Services and IT Consulting

Neo ReplyIT Services and IT Consulting

Live Reply ItalyIT Services and IT Consulting

Sytel Reply NorthInformation Technology & Services

Net Reply UKIT Services and IT Consulting

Air ReplyIT Services and IT Consulting

Macros Reply GmbHIT Services and IT Consulting

Arlanis Reply UKIT Services and IT Consulting

Infinity Reply DEIT Services and IT Consulting

Alpha ReplyIT Services and IT Consulting

Zest ReplyIT Services and IT Consulting

Eos ReplyIT Services and IT Consulting

Storm Reply, Inc.Professional Services

Spike Reply UKTechnology, Information and Internet

Open Reply Benelux - FranceBusiness Consulting and Services

Ki Reply UKIT Services and IT Consulting

Nimbus ReplyIT Services and IT Consulting

Affinity ReplyIT Services and IT Consulting

Cluster Reply PLIT Services and IT Consulting

Atomic ReplyBusiness Consulting and Services

Industrie Reply USMotor Vehicle Manufacturing

Loading…

Solidsoft Reply Similar Companies

VOIS

voiscentre.com

VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation. As the largest shared services organisation in the global telco industry, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. We are pioneering a new Partnership model for the Telco industry, where the sharing of ideas, innovation, platforms and services will unlock opportunities for our people and value for our customers. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability. We deliver value and results at scale by leveraging technology, data and our talented international team of 30K professionals in the following services: Technology, Business, B2B, Corporate Services, Customer Care. Our commercial model creates clear, benchmarked and competitively-priced services so that we can offer guaranteed outcomes for customers with flexibility and optionality. Bringing together our combined strengths with our strategic partner Accenture our strategy is to: Commercialise: Create cost transparency and foster trust and growth for our customers Re-platform: To simplify, streamline and scale our business Extend beyond our borders: deepening our relationships, growing our services and expanding our customer base across new customers & new geographies We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal.

Tata Consultancy Services

tcs.com

Tata Consultancy Services (TCS) is the technology partner of choice for industry leading organizations worldwide. Since its inception in 1968, TCS has upheld the highest standards of innovation, engineering excellence, and customer service. It has set an aspiration to become the world's largest AI-led technology services company and is enabling its clients to transform themselves across the full AI stack, from infrastructure to intelligence. Rooted in the heritage of the Tata Group, TCS is focused on creating long term value for its clients, its investors, its employees, and the community at large. With a highly skilled workforce spread across 55 countries and 202 service delivery centers across the world, the company has been recognized as a top employer in six continents. With the ability to rapidly apply and scale new technologies, the company has built long term partnerships with its clients – helping them emerge as perpetually adaptive enterprises. Many of these relationships have endured into decades and navigated every technology cycle, from mainframes in the 1970s to artificial intelligence today. TCS sponsors 14 of the world’s most prestigious marathons and endurance events, including the TCS New York City Marathon, TCS London Marathon and TCS Sydney Marathon with a focus on promoting health, sustainability, and community empowerment. Caution against fraudulent job offers: TCS doesn’t charge any fee throughout the recruitment process. Refer here: https://www.tcs.com/careers/india/recruitment-fraud-alert

FPT Software

cb fptsoftware.com

FPT Software, a subsidiary of FPT Corporation, is a global technology and IT services provider headquartered in Vietnam, with USD 1.22 billion in revenue (2024) and over 33,000 employees in 30 countries. Embracing an AI-first approach, FPT Software enables breakthrough speed, scalability and quality through AI-powered services and solutions and an AI-augmented workforce. It has partnered with over 1,100 clients worldwide, more than 130 of which are Fortune Global 500 companies in Aviation, Automotive, Banking, Financial Services and Insurance, Healthcare, Logistics, Manufacturing, Utilities, and more. For more information, please visit https://fptsoftware.com/.

TELUS Digital

telusdigital.com

TELUS Digital crafts unique and enduring experiences for customers and employees, and creates future-focused digital transformations that stand the test of time. We are the brand behind the brands. Our global team members are both passionate ambassadors of our clients’ products and services, and visionary technology experts resolute in our pursuit to elevate their end customer journeys, solve business challenges, mitigate risks, and drive continuous innovation. Our portfolio of end-to-end, integrated capabilities include digital IT services, such as cloud solutions and AI-fueled automation, trust and safety services, AI data solutions, including expertise in computer vision, and front-end digital design and consulting services. Fuel iX™ is TELUS Digital’s proprietary GenAI engine at the heart of our innovation, helping enterprises advance their GenAI pilots to working prototypes and production at scale, quickly, securely and responsibly across multiple environments, applications and clouds. Powered by purpose, TELUS Digital leverages technology, human ingenuity and compassion to fuel remarkable outcomes and create inclusive, thriving communities in the regions where we operate around the world. Guided by our Humanity-in-the-loop principles, we take a responsible approach to the transformational technologies we develop and deploy by proactively considering and addressing the broader impacts of our work.

TransUnion

transunion.com

TransUnion is a global information and insights company that makes trust possible in the modern economy. We do this by providing an actionable picture of each person so they can be reliably represented in the marketplace. As a result, businesses and consumers can transact with confidence and achieve great things. This picture is grounded in our legacy as a credit reporting agency which enables us to tap into both credit and public record data; our data fusion methodology that helps us link, match and tap into the awesome combined power of that data; and our knowledgeable and passionate team, who stewards the information with expertise, and in accordance with local legislation around the world. A leading presence in more than 30 countries across five continents, TransUnion provides solutions that help create economic opportunity, great experiences and personal empowerment for hundreds of millions of people. We call this Information for Good® — it’s our purpose, and what drives us every day. Get Support / Contact Us Customer Support: https://transu.co/60024D64I Business Support: https://transu.co/60044D67G

EPAM Systems

epam.com

Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We leverage AI and GenAI to deliver transformative solutions that accelerate our clients’ digital innovation and enhance their competitive edge. Through platforms like EPAM AI/RUN™ and initiatives like DIALX Lab, we integrate advanced AI technologies into tailored business strategies, driving significant industry impact and fostering continuous innovation. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as Most Loved Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.

SoftwareOne

softwareone.com

SoftwareOne is a global software and cloud solutions provider. With a presence in over 70 countries and a team of around 13,000 professionals, we combine global scale and local expertise to help clients optimize costs, accelerate growth, and navigate complex IT environments with confidence. Leveraging deep capabilities in cloud, software, and data and AI, the company empowers organizations to modernize, innovate, and unlock the full value of their technology investments. Headquartered in Switzerland, SoftwareOne is listed on the SIX Swiss Exchange and Euronext Oslo Børs under the ticker symbol SWON. Visit us: https://www.softwareone.com/en

Verizon

verizon.com

We get you. You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. You’ll find all that here. Because we empower you. We power and empower how people live, work and play by connecting them to what brings them joy. The same is true inside our walls. We do what we love — driving innovation, creativity, and impact in the world. And wherever you go, we got your back. This is a team sport. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together— lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life.

TIVIT

tivit.com

TIVIT is a Brazil-based multinational company that offers enterprise-level digital solutions, and operates in ten countries in Latin America. We help our clients develop their businesses by offering industry-leading digital solutions divided into four main categories: Digital Business, Cloud Solutions, Digital Payments, and Technology Platforms. For over 19 years, we have been developing cutting-edge technology, digital solutions and hybrid-cloud-based services to help companies overcome their most demanding challenges. With proven expertise in several areas, such as payments, financial services, utilities, retail and infrastructure, TIVIT is a technologically independent company that integrates different platforms, bringing forth innovative solutions that improve our clients’ competitiveness. Eight out of Brazil’s ten biggest companies, and 100 out of the biggest 500 in Latin America rely on TIVIT’s technological expertise to bring efficiency and innovation to their businesses.

Loading…

NEWS

Solidsoft Reply CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 18, 2025 07:00 AM

Solidsoft Reply successfully integrates the Hellenic Medicines Verification System into the European Medicines Verification Platform

18th. March 2025. In collaboration with the Hellenic Medicines Verification Organisation (HMVO), Solidsoft Reply, a Reply Group company...

Read Article

August 05, 2024 07:00 AM

Is HIPAA enough to protect patient privacy in the digital era?

It's well known that HIPAA was developed and enacted in order to protect patient privacy, but is it enough in 2024?

Read Article

October 19, 2023 07:00 AM

Reply Earns All Six Microsoft Solution Partner Designations for the Second Consecutive Year

TURIN, Italy--(BUSINESS WIRE)--Reply, a global systems integrator and consulting firm, announced today that it has attained all six...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…