What is the official website of Sterling Bank & Trust, a division of EverBank, N.A. ?

The official website of Sterling Bank & Trust, a division of EverBank, N.A. is http://www.sterlingbank.com.

What is Sterling Bank & Trust, a division of EverBank, N.A.'s cybersecurity risk score?

Sterling Bank & Trust, a division of EverBank, N.A. has an AI-generated cybersecurity risk score of 722 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Sterling Bank & Trust, a division of EverBank, N.A. experienced?

According to Rankiteo, Sterling Bank & Trust, a division of EverBank, N.A. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Sterling Bank & Trust, a division of EverBank, N.A. been affected by any supply chain cyber incidents ?

According to Rankiteo, Sterling Bank & Trust, a division of EverBank, N.A. has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Sterling Bank & Trust, a division of EverBank, N.A. have SOC 2 Type 1 certification ?

According to Rankiteo, Sterling Bank & Trust, a division of EverBank, N.A. is not certified under SOC 2 Type 1.

Does Sterling Bank & Trust, a division of EverBank, N.A. have SOC 2 Type 2 certification ?

According to Rankiteo, Sterling Bank & Trust, a division of EverBank, N.A. does not hold a SOC 2 Type 2 certification.

Does Sterling Bank & Trust, a division of EverBank, N.A. comply with GDPR ?

According to Rankiteo, Sterling Bank & Trust, a division of EverBank, N.A. is not listed as GDPR compliant.

Does Sterling Bank & Trust, a division of EverBank, N.A. have PCI DSS certification ?

According to Rankiteo, Sterling Bank & Trust, a division of EverBank, N.A. does not currently maintain PCI DSS compliance.

Does Sterling Bank & Trust, a division of EverBank, N.A. comply with HIPAA ?

According to Rankiteo, Sterling Bank & Trust, a division of EverBank, N.A. is not compliant with HIPAA regulations.

Does Sterling Bank & Trust, a division of EverBank, N.A. have ISO 27001 certification ?

According to Rankiteo,Sterling Bank & Trust, a division of EverBank, N.A. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Sterling Bank & Trust, a division of EverBank, N.A. operate in ?

Sterling Bank & Trust, a division of EverBank, N.A. operates primarily in the Banking industry.

How many employees does Sterling Bank & Trust, a division of EverBank, N.A. have ?

Sterling Bank & Trust, a division of EverBank, N.A. employs approximately 150 people worldwide.

Does Sterling Bank & Trust, a division of EverBank, N.A. own any subsidiaries ?

Sterling Bank & Trust, a division of EverBank, N.A. presently has no subsidiaries across any sectors.

How many LinkedIn followers does Sterling Bank & Trust, a division of EverBank, N.A. have ?

Sterling Bank & Trust, a division of EverBank, N.A.'s official LinkedIn profile has approximately 3,302 followers.

What is the NAICS classification code for Sterling Bank & Trust, a division of EverBank, N.A. ?

Sterling Bank & Trust, a division of EverBank, N.A. is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does Sterling Bank & Trust, a division of EverBank, N.A. have a Crunchbase profile ?

No, Sterling Bank & Trust, a division of EverBank, N.A. does not have a profile on Crunchbase.

Does Sterling Bank & Trust, a division of EverBank, N.A. have a LinkedIn profile ?

Yes, Sterling Bank & Trust, a division of EverBank, N.A. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sterling-bank-and-trust.

How many cybersecurity incidents has Sterling Bank & Trust, a division of EverBank, N.A. experienced ?

As of July 14, 2026, Rankiteo reports that Sterling Bank & Trust, a division of EverBank, N.A. has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Sterling Bank & Trust, a division of EverBank, N.A. have ?

Sterling Bank & Trust, a division of EverBank, N.A. has an estimated 7,419 peer or competitor companies worldwide.

What types of cybersecurity incidents has Sterling Bank & Trust, a division of EverBank, N.A. faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SBTDEN

Boost Score +25 with badge (5 left)

722

/1000

Moderate

747

/1000

Moderate

Sterling Bank & Trust, a division of EverBank, N.A. Vendor Cyber Rating & Cyber Score

sterlingbank.com

Add Your Compliance Badge

Sterling Bank & Trust, a division of EverBank, N.A. (“Sterling”) provides a comprehensive choice of banking solutions, and outstanding personal service to individuals, professionals, businesses and commercial customers. On April 1, 2025, Sterling merged into and became a division of EverBank, a bank committed to delivering reliability, security and deep expertise along with high-performing products and services to consumer and commercial clients across the nation online and in financial centers located in Florida and California. We believe we all have a significant role to play in helping our communities succeed, and we continue to serve our customers and our communities, creating an experience sensitive to the needs of every customer,

SBTDEN A.I CyberSecurity Scoring

Scoring History

SBTDEN

Sterling Bank & Trust, a division of EverBank, N.A. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Sterling Bank & Tru...

Breach

1/2023

STE030091825

Loading…

A.I.

SBTDEN Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SBTDEN

Incidents vs Banking Industry Avg (This Year)

No incidents recorded for Sterling Bank & Trust, a division of EverBank, N.A. in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Sterling Bank & Trust, a division of EverBank, N.A. in 2026.

Incident Types SBTDEN vs Banking Industry Avg (This Year)

No incidents recorded for Sterling Bank & Trust, a division of EverBank, N.A. in 2026.

Incident History - SBTDEN (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Sterling Bank & Trust, a division of EverBank, N.A. Subsidiaries

Parent Company

SBTDEN

Banking

Website: http://www.sterlingbank.com

Company Size: 201-500 employees

No subsidiary data available for this company.

Loading…

Sterling Bank & Trust, a division of EverBank, N.A. Similar Companies

Punjab National Bank

bank.in

“Fired by the spirit of nationalism and founded on the idea that Indians should have a national bank of their own, which would further the economic interest of the country, Punjab National Bank Ltd was the result of the efforts of far-sighted visionaries and patriots, among whom were persons like Lala Lajpat Rai, Mr. E C Jessawala, Babu Kali Prasono Roy, Lala Harkishan Lal and Sardar Dyal Singh Majithia. Incorporated under the Act VI of 1882, Indian Companies Act, the Bank commenced operations on April 12, 1895 from Lahore. Since inception, PNB has always been a "People's bank" serving millions of people throughout the country and also had the proud distinction of serving great national leaders like Sarvshri Jawahar Lal Nehru, Gobind Ballabh Pant, Lal Bahadur Shastri, Rafi Ahmed Kidwai, Smt. Indira Gandhi etc. amongst other who banked with us. Bank has spread its offerings and has grown as technology driven bank with products & services to meet the aspirations of every segment of customers. With more than 122 years of strong existence and a network of 6950 Domestic Branches, 10502 ATMs as on 31st March 2017, Punjab National Bank is serving more than 10 crore esteemed customers. PNB, being one of the largest Nationalised Bank, has continued to provide prudent and trustworthy banking services to its customers. The bank enjoys strong fundamentals, large franchise value and good brand image. With the mission of "Creating Value for all its customers, Investors and Employees for being the first choice for all stakeholders" its presence across India is a strong brand; “The name you can bank upon”. To download PNB One, click here: http://bit.ly/3WwQ4ig Share your feedback here: https://www.pnbindia.in/customers-survey.aspx

Comerica Bank

comerica.com

Comerica Bank, a division of Fifth Third Bank, N.A. Member FDIC. Comerica Incorporated (NYSE: CMA) is a financial services company headquartered in Dallas, Texas, strategically aligned by the Business Bank, the Retail Bank, and Wealth Management. The Business Bank provides companies of all sizes with an array of credit and non-credit financial products and services. The Retail Bank delivers personalized financial products and services to consumers. Wealth Management serves the needs of high net worth clients and institutions. Comerica’s approximately 8,000 colleagues focus on relationships, and helping people and businesses be successful. Comerica operates in seven of the 10 largest U.S. cities, with more than 430 banking centers in its primary markets of Texas, Arizona, California, Florida and Michigan. Select businesses operate in several other states, as well as in Canada and Mexico. Comerica is among the 25 largest U.S. banking companies. Visit Comerica's Facebook page at facebook.com/Comerica or on Twitter at @ComericaBank for more information on how Comerica is making a positive difference in the communities it serves. To learn more about Comerica’s products, services and career opportunities, visit Comerica.com.

Crédit Mutuel

creditmutuel.com

Un modèle mutualiste au service des clients et des salariés. Réseau bancaire mutualiste constitué de 2124 Caisses locales le Crédit Mutuel se compose de 18 fédérations régionales, couvrant tout le territoire français. Société de personnes et non de capitaux, le Crédit Mutuel n’est pas coté en Bourse. Sa stratégie est ainsi dégagée de la recherche de la seule rentabilité à court terme, au profit d’un développement pensé sur le long terme. Son objectif central : rendre un service de qualité au coût le plus juste à tous ses sociétaires. Son organisation décentralisée favorise ainsi la qualité de service aux clients et la réactivité, par des circuits de décision courts. Reconnu à la fois par ses clients et les professionnels de la finance, le Crédit Mutuel décroche régulièrement des titres qui confortent son modèle mutualiste et ses valeurs de solidarité, responsabilité, égalité, proximité et responsabilité sociale portées par les salariés et les clients- sociétaires. Au-delà de son réseau, le Crédit Mutuel constitue un Groupe qui comprend également plusieurs filiales dont certaines sont implantées à l’étranger. Les nouveaux collaborateurs du Crédit Mutuel apprécient tout particulièrement : - un circuit de recrutement court, axé sur des entretiens évaluant notamment la personnalité et la motivation ; - un parcours d’intégration précis, suivi par la fonction Ressources Humaines. Les salariés apprécient tout particulièrement : - le Système d’Information au service du développement commercial ; - un management au travers d’objectifs collectifs ; - des démarches et outils de gestion des carrières et des compétences facilitant la progression dans l’entreprise ; - la qualité des formations de préparation ou d’accompagnement des changements d’emploi ; - la diversité des opportunités d’évolution, principalement commerciale, sur tous les marchés, dans toutes les entités du Groupe.

Türkiye İş Bankası

cb isbank.com.tr

In the nearly 100 years since its founding by the Great Leader Mustafa Kemal Atatürk on August 26, 1924, İşbank has undertaken various roles and made significant contributions to the development of our country in many fields, especially in industry and trade. İşbank offers products and services to its customers in corporate, commercial, SME, retail and private banking areas with its around 22 thousand employees, nearly 1,200 domestic branches and approximately 6,400 ATMs by the end of 2021, together with its advanced digital banking channels. İşbank also operates abroad with its branches abroad located in the Turkish Republic of Northern Cyprus, England, Kosovo, Iraq and Bahrain; 100% owned subsidiaries in Germany, Russia and Georgia; and with its representative offices in China and Egypt. The Bank is the largest private bank in Turkey in terms of total assets, loans, deposits and shareholders’equity; number of branches and ATMs. The largest share of the Bank's capital is held by the İşbank Pension Fund, which was founded by its employees. İşbank, an organization synonymous with trust, consistency and dignity, works for an inclusive and environment-friendly economy with its sense of responsibility stemming from its history. For further deteails, you can visit https://www.isbank.com.tr/en/about-us page.

Caisse d’Epargne

caisse-epargne.fr

Banques coopératives, les Caisses d'Epargne conjuguent depuis 1818 confiance, solidarité et modernité. Deuxième réseau bancaire en France, les 16 Caisses d'Epargne régionales comptent parmi les premières banques de leur région. Elles accompagnent tous les acteurs économiques et sont leaders du financement du secteur public, du logement social et de l'économie sociale. Au total, les Caisses d'Epargne comptent aujourd'hui 4,8 millions de sociétaires et 20,6 millions de clients, gérés par les 4 182 agences bancaires et l’agence Mon banquier en ligne.

Bank of China

cb boc.cn

Bank of China, include BOC Hong Kong, BOC International, BOCG Insurance and other financial institutions, providing a comprehensive range of high-quality financial services to individual and corporate customers as well as financial institutions worldwide. Over the past century, Bank of China played an important role in China’s financial history. It was established in 1912 pursuant to the approval of DR. Sun Yat-sen. In the following 37 years the Bank served as the central bank, international exchange bank and specialized foreign trade bank successively. In 1949, Bank of China became the state-designated specialized foreign exchange bank. In 2003, it was named by the State Council as one of the pilot banks for joint-stock reform of wholly state-owned commercial banks. On August 26, 2004, Bank of China Limited was formally incorporated in Beijing as a state-controlled joint stock commercial bank. Bank of China is the most internationalized commercial bank in China. BOC London Branch, the first overseas branch of the Chinese banks, was established in 1929. Currently, it had over 10000 domestic operations and over 600 overseas operations. In 1994 and 1995, Bank of China became the note issuing bank in Hong Kong and Macao respectively. The Bank prepared a new strategic development plan which was approved by the Board of Directors in March 2009. Strategic Positioning: To be a large multinational banking group based on a diversified and integrated cross-border business platform, with a core business of commercial banking. Strategic Goals: To be a leading international bank delivering growth and excellence.

Groupe Crédit Agricole

credit-agricole.com

The Crédit Agricole group is the leading partner of the French economy and one of the largest banking groups in Europe. It is the leading retail bank in Europe as well as the first European asset manager, the first bancassurer in Europe and the third European player in project finance. Built on its strong cooperative and mutual roots, its 157,000 employees and the 27,423 directors of its Local and Regional Banks, the Crédit Agricole group is a responsible and responsive bank serving 54 million customers and 12,1 million mutual shareholders. Thanks to its universal customer-focused retail banking model – based on the cooperation between its retail banks and their r elated business lines –, the Crédit Agricole group supports its customers’ projects in France and around the world: day-to-day banking, home loans, consumer finance, savings, insurances, asset management, real estate, leasing and factoring, and corporate and investment banking. Crédit Agricole also stands out for its dynamic, innovative corporate social responsibility policy, for the benefit of the economy. This policy is based on a pragmatic approach which permeates across the Group and engages each employee.

Westpac

westpac.com.au

To turn doing into done, it takes a little Westpac. From rescue helicopters and signing the Equator Principles, to paying super during parental leave and initiatives like Westpac SaferPay and SafeCall that help protect customers from scams... we have a proud history of stepping up to be first for our customers, communities and people. We are Australia’s oldest bank and first company and have been supporting customers for over 200 years. Our purpose is creating better futures together – it’s what we do, who we are and why we come to work every day. With this purpose in mind, we’ve set ourselves a bold ambition - to be our customers’ #1 bank and partner through life. Westpac acknowledges the traditional owners as the custodians of this land, recognising their connection to land, waters and community. We pay our respects to Australia's First Peoples, and to their Elders, past, present and future. Westpac Banking Corporation ABN 33 007 457 141. AFSL and Australian credit licence 233714.

AIB

aib.ie

We're here to keep you updated on AIB Group news, financial services industry insights, expert business reports and all the latest AIB career opportunities. We are one of Ireland’s major retail banks serving personal, business and corporate customers. We offer a range of banking products and services such as mortgages, savings and business banking. We have a customer centric view, always putting the customer first and supporting our customers at every stage. We have over 2.3m million customers using our multifaceted service. We provide our customers with a diverse range of contact channels; through our branches, commercial centres and our direct channels, such as AIB internet and telephone banking, self-service banking and our award-winning mobile banking app. AIB has a presence in Northern Ireland through its community-based full service bank, AIB NI, and in Britain where AIB GB serves its target audience of SMEs, owner-managed businesses and professional firms. EBS is also now part of the AIB Group and offers mortgage and deposit products and services from its own branch network. This is a public channel so never post your personal or account details. AIB provides banking related services in Ireland and all AIB content is intended for use in Ireland. Information is correct at time of posting and may be subject to change. No comments made by any employee, agent or contractor of AIB or any user should be construed as financial, investment or other specialist advice or as recommendations. AIB is not liable for any comments/postings on this channel. AIB Social Media Terms of Use and Privacy Statement apply https://aib.ie/social/social-media-privacy AIB and AIB Group are registered business names of Allied Irish Banks, p.l.c. Registered Office

Loading…

NEWS

Sterling Bank & Trust, a division of EverBank, N.A. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 11, 2026 09:01 AM

Court Orders Final Forfeiture of ₦81.1 Million in Sterling Bank Glitch Fraud Case

A Federal High Court in Lagos has ordered the final forfeiture of ₦81.1 million linked to a Sterling Bank system glitch fraud following an...

Read Article

March 11, 2026 04:37 AM

Court Orders Forfeiture Of N81.1m From N2.5bn Stolen Funds At Sterling Bank

Justice Yelim Bogoro of the Federal High Court in Lagos has ordered the final forfeiture of N81,108143.8 from the N2.5 billion stolen from...

Read Article

March 11, 2026 02:04 AM

Sterling Bank, MREIF Float Mortgage Loans For Nigerians

Sterling Bank has partnered with the Ministry of Finance Incorporated Real Estate Investment Fund (MREIF) to expand access to affordable...

Read Article

March 10, 2026 11:15 PM

Court Orders Final Forfeiture of N81.1m Sterling Bank Fraud Funds

Federal High Court sitting in Ikoyi, Lagos, has ordered the final forfeiture of N81,108,143.8 stolen from Sterling Bank Plc following a...

Read Article

March 10, 2026 03:47 PM

Court orders final forfeiture of N81.1m to FG in favour of Sterling Bank

Justice Yelim Bogoro of the Federal High Court sitting in Ikoyi, Lagos, has ordered the final forfeiture of N81,108143.08 to the Federal.

Read Article

March 10, 2026 03:03 PM

Court orders final forfeiture of N81.1 million recovered from bank customers

EFCC explained to the court how the bank customers were able to steal the the forfeited funds from Sterling Bank.

Read Article

March 10, 2026 02:47 PM

Court Orders Final Forfeiture of N81m Stolen from Sterling Bank to FG

By Modupe Gbadeyanka A Federal High Court sitting in Ikoyi, Lagos, has ordered the final forfeiture of N81.1 million to the Federal...

Read Article

March 10, 2026 12:31 PM

Court orders final forfeiture of N81.1m stolen bank money to FG

The money was part of the over N2.5 billion stolen by some customers of Sterling Bank owing to a system glitch experienced by the bank.

Read Article

March 10, 2026 12:06 PM

Sterling Bank system glitch: Court orders final forfeiture of stolen N81.1 million

The Federal High Court sitting in Ikoyi, Lagos, has ordered the final forfeiture of N81,108,143.8 stolen from Sterling Bank Plc following a...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-58489

SUMMARY

HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1.11.0, the GitHub Gist export flow created an OAuth2 state value but only checked that it was present rather than validating it against the value expected for the user's session. Because the state was not properly validated, an attacker could forge a callback URL containing their own valid GitHub OAuth code. When processing the callback, HedgeDoc used the victim's logged-in session to select which note to export, but the attacker's authorization code to determine which GitHub account received it. As a result, a logged-in victim who clicked a crafted link could export their own private, protected, or limited note directly into a Gist controlled by the attacker. This issue has been fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 6.8

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58486

SUMMARY

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, which resolved YAML anchor aliases. A compact malicious payload could therefore expand into a huge object structure, consuming excessive CPU. This expansion ran on every request to the publish view (/s/<shortid>) and, when placed under the opengraph key, the editor view (/<noteId>). A ten-level alias bomb could block the single Node.js event loop for roughly 235 seconds per request, causing concurrent requests to hang or drop and rendering the instance unavailable (DoS). Because the note was stored in the database, the impact survived process restarts until the note was removed. toobusy-js did not reliably mitigate the worst cases, as the event loop was saturated before the middleware could respond. This issue was fixed in version 1.11.0.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-58102

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts. When building the extension hash (via extensions(), extensions_by_long_name(), extensions_by_oid(), or has_extension_oid()), the code passes OBJ_obj2txt()'s return value as the hash-key length; because that value is the OID's full text length rather than the bytes written to the fixed-size buffer (129 bytes), an OID whose text is longer than the 129-byte buffer causes a read past the allocation, exposing adjacent heap memory as the returned hash key. extensions_by_name() uses the static shortname path and is not affected.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-58101

SUMMARY

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5string, and auth_att dereference its result without a NULL check. keyid_data also dereferences akid->keyid, which is NULL for an empty AKI SEQUENCE (DER 30 00) even when the parse succeeds. A caller invoking an affected helper on an extension from an untrusted certificate triggers a SIGSEGV that crashes the Perl process.

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-57856

SUMMARY

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php sanitizes the bucket name with preg_replace('/[^a-zA-Z0-9-_\\.]/','', $bucket), which permits '..' and '../' sequences. The sanitized value is interpolated into a Flysystem path as uploads://buckets/{bucket}. Flysystem's WhitespacePathNormalizer resolves 'buckets/..' to the empty string (the uploads storage root) without raising PathTraversalDetected because the '..' has a preceding component to consume. An authenticated low-privileged user can send a crafted request with a '../' bucket name to list, upload, and delete files across all buckets, including those belonging to other users or roles

Published

Date2026-07-13

Updated

Date2026-07-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…