What is the official website of Storm Reply ?

The official website of Storm Reply is http://www.reply.com/storm-reply/.

What is Storm Reply's cybersecurity risk score?

Storm Reply has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Storm Reply experienced?

According to Rankiteo, Storm Reply currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Storm Reply been affected by any supply chain cyber incidents ?

According to Rankiteo, Storm Reply has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Storm Reply have SOC 2 Type 1 certification ?

According to Rankiteo, Storm Reply is not certified under SOC 2 Type 1.

Does Storm Reply have SOC 2 Type 2 certification ?

According to Rankiteo, Storm Reply does not hold a SOC 2 Type 2 certification.

Does Storm Reply comply with GDPR ?

According to Rankiteo, Storm Reply is not listed as GDPR compliant.

Does Storm Reply have PCI DSS certification ?

According to Rankiteo, Storm Reply does not currently maintain PCI DSS compliance.

Does Storm Reply comply with HIPAA ?

According to Rankiteo, Storm Reply is not compliant with HIPAA regulations.

Does Storm Reply have ISO 27001 certification ?

According to Rankiteo,Storm Reply is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Storm Reply operate in ?

Storm Reply operates primarily in the IT Services and IT Consulting industry.

How many employees does Storm Reply have ?

Storm Reply employs approximately 434 people worldwide.

Does Storm Reply own any subsidiaries ?

Storm Reply presently has no subsidiaries across any sectors.

How many LinkedIn followers does Storm Reply have ?

Storm Reply's official LinkedIn profile has approximately 305,543 followers.

What is the NAICS classification code for Storm Reply ?

Storm Reply is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Storm Reply have a Crunchbase profile ?

No, Storm Reply does not have a profile on Crunchbase.

Does Storm Reply have a LinkedIn profile ?

Yes, Storm Reply maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/storm-reply.

How many cybersecurity incidents has Storm Reply experienced ?

As of August 14, 2026, Rankiteo reports that Storm Reply has not experienced any cybersecurity incidents.

How many peer or competitor companies does Storm Reply have ?

Storm Reply has an estimated 41,346 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Storm Reply

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

Storm Reply Vendor Cyber Rating & Cyber Score

reply.com

Add Your Compliance Badge

Storm Reply is a global AWS Premier Consulting Partner and a specialist for professional cloud computing services in the Reply network. Storm Reply holds comprehensive technical expertise on the most relevant enablers of digital transformation including Cloud, Big Data, IoT, and Cybersecurity - addressed by a clear understanding of the business factors. Having consolidated experience and certifications in Cloud IaaS, SaaS, and PaaS architectures, Storm Reply provides end-to-end services for Cloud adoption: - Cloud Strategy, Advisory and Migration - Public, Private & Hybrid Cloud Architectures Design & Deployment - Cloud Native Software Development - Cloud Security Fully Managed Operations 24x7 - ROI & TCO

Storm Reply A.I CyberSecurity Scoring

Scoring History

Storm Reply

Storm Reply CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Storm Reply Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Storm Reply

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Storm Reply in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Storm Reply in 2026.

Incident Types Storm Reply vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Storm Reply in 2026.

Incident History - Storm Reply (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Storm Reply Subsidiaries

Storm Reply

IT Services and IT Consulting

Website: http://www.reply.com/storm-reply/

Company Size: 434

124

ReplyIT Services and IT Consulting

Open Reply ITIT Services and IT Consulting

Concept Reply GmbHInformation Technology & Services

AIM ReplyIT Services and IT Consulting

Sense ReplyIT Services and IT Consulting

Airwalk ReplyIT Services and IT Consulting

Sprint Reply ITInformation Technology & Services

Blue Reply ITIT Services and IT Consulting

Concept Reply USInformation Technology & Services

Solidsoft ReplyIT Services and IT Consulting

Logistics Reply UKSoftware Development

Roboverse Reply DEIT Services and IT Consulting

Business Elements ReplyIT Services and IT Consulting

Life At ReplyIT Services and IT Consulting

Avantage ReplyFinancial Services

IFRS 9Financial Services

Compliance and Conduct RiskFinancial Services

CLUSTER REPLYIT Services and IT Consulting

BitmamaAdvertising Services

Xister ReplyAdvertising Services

Nexi DigitalFinancial Services

Valorem ReplyIT Services and IT Consulting

Valorem Reply - Technology Industry SolutionsIT Services and IT Consulting

Lynx RecruitmentStaffing and Recruiting

Wemanity MarocIT Services and IT Consulting

Syskoplan Reply USIT Services and IT Consulting

Threepipe ReplyAdvertising Services

Cloud9 ReplyIT Services and IT Consulting

WM ReplyIT Services and IT Consulting

Technology ReplySoftware Development

Mansion House ConsultingBusiness Consulting and Services

Wemanity BelgiumInformation Technology & Services

Net ReplyIT Services and IT Consulting

Go ReplyIT Services and IT Consulting

Concept Engineering ReplyIT Services and IT Consulting

Machine Learning Reply GmbHIT Services and IT Consulting

ATLAS REPLYIT Services and IT Consulting

Cluster Reply DEIT Services and IT Consulting

TD ReplyBusiness Consulting and Services

Sytel ReplyIT Services and IT Consulting

Whitehall ReplyIT Services and IT Consulting

Data Reply FRInformation Technology & Services

Connect ReplyIT Services and IT Consulting

Laife ReplyInformation Technology & Services

Business ReplySoftware Development

Comsysto Reply GmbHIT Services and IT Consulting

Aktive ReplyInformation Technology & Services

ARLANIS REPLY ITIT Services and IT Consulting

Canvas ReplyIT Services and IT Consulting

Graymatter ReplyAdvertising Services

Graymatter REPLY DigitalAdvertising Services

Light ReplyIT Services and IT Consulting

Triplesense ReplyTechnology, Information and Internet

Syskoplan Reply DACHInformation Technology & Services

Logistics Reply DESoftware Development

4brands ReplyInformation Technology & Services

Pay ReplyInformation Technology & Services

Technology Reply RomaniaIT Services and IT Consulting

Blue Reply DEIT Services and IT Consulting

Shield ReplyIT Services and IT Consulting

Autonomous Reply FRIT Services and IT Consulting

Accelerator 365 by ReplySoftware Development

Cortex Reply DEIT Services and IT Consulting

Cortex Reply UKTechnology, Information and Internet

Spike Reply LuxembourgIT Services and IT Consulting

Liquid ReplyIT Services and IT Consulting

Fincon Reply GmbHInformation Services

Sprint Reply DEIT Services and IT Consulting

Spike ReplyIT Services and IT Consulting

Communication Valley ReplyComputer and Network Security

Spur ReplyBusiness Consulting and Services

KI ReplyInformation Technology & Services

Sprint Reply BEIT Services and IT Consulting

Concept Quality ReplyIT Services and IT Consulting

Core ReplyInformation Technology & Services

Starbytes.itInformation Technology & Services

Comwrap Reply DACHTechnology, Information and Internet

Reply ChallengesFornitori di e-learning

Target ReplyData Infrastructure and Analytics

Data Reply ITIT Services and IT Consulting

Wemanity NetherlandsProfessional Training and Coaching

Blockchain ReplyIT Services and IT Consulting

Data Reply DEInformation Technology & Services

Leadvise ReplyBusiness Consulting and Services

Digital Transformation der Regulatory AffairsUnternehmensberatung

Data Reply UKIT Services and IT Consulting

Logistics Reply USSoftware Development

Infinity Reply ITIT Services and IT Consulting

Storm Reply DEIT Services and IT Consulting

Like ReplyAdvertising Services

Target Reply RomeIT Services and IT Consulting

Wemanity Learning CenterDéveloppement professionnel et coaching

HERMES REPLYInformation Technology & Services

Open Reply UKInformation Technology & Services

Sytel Reply NorthInformation Technology & Services

Machine Learning ReplyIT Services and IT Consulting

Open ReplyInformation Technology & Services

ARLANIS REPLYIT Services and IT Consulting

Up ReplyIT Services and IT Consulting

Glue ReplyIT Services and IT Consulting

Red Reply DEIT Services and IT Consulting

Live Reply ItalyIT Services and IT Consulting

Neo ReplyIT Services and IT Consulting

Net Reply UKIT Services and IT Consulting

Live Reply DEIT Services and IT Consulting

Brick Reply | IT Solutions and Services for ManufacturingSoftware Development

Storm Reply, Inc.Professional Services

e*finance consulting ReplyFinancial Services

Air ReplyIT Services and IT Consulting

Eos ReplyIT Services and IT Consulting

Spike Reply UKTechnology, Information and Internet

Infinity Reply DEIT Services and IT Consulting

Open Reply Benelux - FranceBusiness Consulting and Services

Zest ReplyIT Services and IT Consulting

Arlanis Reply UKIT Services and IT Consulting

Sprint Reply UKIT Services and IT Consulting

Macros Reply GmbHIT Services and IT Consulting

Cluster Reply PLIT Services and IT Consulting

Atomic ReplyBusiness Consulting and Services

Industrie Reply USMotor Vehicle Manufacturing

Alpha ReplyIT Services and IT Consulting

Nimbus ReplyIT Services and IT Consulting

Affinity ReplyIT Services and IT Consulting

Ki Reply UKIT Services and IT Consulting

Loading…

Storm Reply Similar Companies

eClerx

eclerx.com

eClerx is a productized services company, bringing together people, technology and domain expertise to amplify business results. Our mission is to set the benchmark for client service and success in our industry. Our vision is to be the innovation partner of choice for technology, data analytics and process management services.

Infosys

infosys.com

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over three decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem. Visit www.infosys.com to see how Infosys (NYSE: INFY) can help your enterprise navigate your next.

Samsung SDS

samsungsds.com

Samsung SDS provides cloud computing and digital logistics services. We build an optimized cloud environment with Samsung Cloud Platform specialized for businesses, provide all-in-one management service based on 38 years of expertise in each industry, and boost work efficiency and customer service with our SaaS solution, which proved successful in many use cases. Your only partner to present a reasonable answer to the complex challenge of digital transformation is Samsung SDS. Samsung SDS prides itself in leading IT innovation in Korea for over years while spending every year evolving to meet the needs of our clients and changing times. Our constant effort put us 21st in 2021 Gartner Global IT Service Business, and 1st in Manufacturing IT. We have also been named the 12th Most Valuable Global IT Services Brand by Brand Finance UK in 2023, showing how we have grown into a global top-tier company. Samsung SDS offers cloud-based digital transformation services with distinguished cloud technology and rich industry experience. We are recognized by global consultants such as Gartner, IDC, and Frost & Sullivan in their lists of Managed Cloud Services, Cloud Security, and AI Industry as a specialized cloud service company supporting clients' digital innovation.

HGS

hgs.cx

A global leader in optimizing the customer experience lifecycle, digital transformation, and business process management, HGS is helping its clients become more competitive every day. HGS combines automation, analytics, and artificial intelligence with deep domain expertise focusing on digital customer experiences, back-office processing, contact centers, and HRO solutions. Part of the multi-billion-dollar conglomerate Hinduja Group, HGS takes a “globally local” approach with over 18,000+ employees across 38 delivery centers in 9 countries.

Avanade

bit.ly

Avanade is the world’s leading expert on Microsoft. Trusted by over 7,000 clients worldwide, we deliver AI-driven solutions that unlock the full potential of people and technology, optimize operations, foster innovation and drive growth. As Microsoft’s Global SI Partner we combine global scale with local expertise in AI, cloud, data analytics, cybersecurity, and ERP to design solutions that prioritize people and drive meaningful impact. We champion diversity, inclusion, and sustainability, ensuring our work benefits society and business.

EPAM Systems

epam.com

Since 1993, EPAM Systems, Inc. (NYSE: EPAM) has used its software engineering expertise to become a leading global provider of digital engineering, cloud and AI-enabled transformation services, and a leading business and experience consulting partner for global enterprises and ambitious startups. We address our clients’ transformation challenges by fusing EPAM Continuum’s integrated strategy, experience and technology consulting with our 30+ years of engineering execution to speed our clients’ time to market and drive greater value from their innovations and digital investments. We leverage AI and GenAI to deliver transformative solutions that accelerate our clients’ digital innovation and enhance their competitive edge. Through platforms like EPAM AI/RUN™ and initiatives like DIALX Lab, we integrate advanced AI technologies into tailored business strategies, driving significant industry impact and fostering continuous innovation. We deliver globally, but engage locally with our expert teams of consultants, architects, designers and engineers, making the future real for our clients, our partners and our people around the world. We believe the right solutions are the ones that improve people’s lives and fuel competitive advantage for our clients across diverse industries. Our thinking comes to life in the experiences, products and platforms we design and bring to market. Added to the S&P 500 and the Forbes Global 2000 in 2021 and recognized by Glassdoor and Newsweek as Most Loved Workplace, our multidisciplinary teams serve customers across six continents. We are proud to be among the top 15 companies in Information Technology Services in the Fortune 1000 and to be recognized as a leader in the IDC MarketScapes for Worldwide Experience Build Services, Worldwide Experience Design Services and Worldwide Software Engineering Services. Learn more at www.epam.com.

General Dynamics Information Technology

gdit.com

GDIT is a global technology and professional services company that delivers solutions, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. GDIT is part of General Dynamics, a global aerospace and defense company. We have shared our clients’ sense of purpose for over half a century and have a unique understanding of their missions, complex environments, and a rapidly changing world. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.

TIVIT

tivit.com

TIVIT is a Brazil-based multinational company that offers enterprise-level digital solutions, and operates in ten countries in Latin America. We help our clients develop their businesses by offering industry-leading digital solutions divided into four main categories: Digital Business, Cloud Solutions, Digital Payments, and Technology Platforms. For over 19 years, we have been developing cutting-edge technology, digital solutions and hybrid-cloud-based services to help companies overcome their most demanding challenges. With proven expertise in several areas, such as payments, financial services, utilities, retail and infrastructure, TIVIT is a technologically independent company that integrates different platforms, bringing forth innovative solutions that improve our clients’ competitiveness. Eight out of Brazil’s ten biggest companies, and 100 out of the biggest 500 in Latin America rely on TIVIT’s technological expertise to bring efficiency and innovation to their businesses.

Zensar Technologies

zensar.com

Zensar stands out as a premier technology consulting and services company, embracing an ‘experience-led everything’ philosophy. We are creators, thinkers, and problem solvers passionate about designing digital experiences that are engineered into scale-ready products, services, and solutions to deliver superior engagement to high-growth companies. This full lifecycle capability – from experience to engineering to engagement – is what makes us unique. This integrated approach also means that we harness the power of technology, creativity, and insight to deliver impact — ensuring our work focuses not just on technology but also on the people who use it. Part of the $4.4 billion RPG Group, Zensar is headquartered in Pune, India. Our 10,000+ employees work across 30+ locations worldwide, including Seattle, Princeton, Cape Town, London, Singapore, and Mexico City. As an organization, we are diverse and multi-dimensional and unite across geographies and skill sets to deliver products and services that are value-driven, environmentally conscious, and human-centered. To know more, visit us at www.zensar.com.

Loading…

NEWS

Storm Reply CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 09, 2025 10:04 AM

Reply Achieves the AWS Agentic AI Specialization and Is Named an Implementation Partner for Amazon Bedrock AgentCore

TURIN, Italy–(BUSINESS WIRE)–Reply [EXM, STAR: REY] announced that it has achieved the Amazon Web Services (AWS) Agentic AI Specialization,...

Read Article

October 30, 2025 02:46 PM

Frank Reply at the Service & Sales Summit 2025

Meet Frank Reply at the Service Summit 2025 in Hamburg at Booth SE09, showcasing how conversational AI, voice, and chatbot solutions can optimize customer...

Read Article

October 17, 2025 09:44 PM

Storm Reply at the ecoCompute Conference 2025

At the ecoCompute Conference 2025 at bUm Berlin, Storm Reply will show how AI can be made more efficient and sustainable in its workshop “How to start with...

Read Article

October 01, 2025 03:52 PM

Breakfast Briefing: Ransomware, Resilience and Reality

Ransomware is evolving. Are your recovery plans keeping up? Join industry leaders for a strategic breakfast on attacks and resilience.

Read Article

September 30, 2025 07:00 AM

Smart Country Convention (SCCON) 2025

The Smart Country Convention 2025 will take place in Berlin from September 30 to October 2. Go Reply, Arlanis Reply, and Frank Reply will...

Read Article

September 16, 2025 07:00 AM

Reply Achieves the AWS Advertising and Marketing Technology Competency Thanks to the Contribution of the Data Reply and Storm Reply Teams

TURIN, Italy, September 16, 2025--Reply [EXM, STAR: REY] has achieved the AWS Advertising and Marketing Technology Competency, the official...

Read Article

June 03, 2025 08:02 AM

Devbot: Audi’s intelligent multi-agent system for smarter and safer cloud use

Developed by Audi and Storm Reply, devbot is an advanced Agentic AI solution that intelligently optimizes Audi's cloud infrastructure – quickly, securely,...

Read Article

April 16, 2025 03:10 AM

AWS Deep Dive Days – Generative AI 2025

Storm Reply and Data Reply will be present at the AWS Deep Dive Days - Generative AI in Munich on April 29, 2025. Visit us on site and discover practical...

Read Article

March 21, 2025 07:00 AM

NASA email storm strikes space agencies worldwide

An insecure email distribution list accidentally spamming space agencies across the planet is undoubtedly one for the record books.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19756

SUMMARY

A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-19753

SUMMARY

A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. Affected is the function explore_url of the file src/mcp-rdf-explorer/server.py of the component MCP Server. Performing a manipulation of the argument url results in server-side request forgery. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-73843

SUMMARY

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.2 and 1.1.2, internal/cluster-gateway/server.go served caller-facing management APIs on the externally reachable agent listener without authentication, allowing network-reachable attackers to invoke /api/proxy/ and /api/exec/ operations, proxy the data-plane Kubernetes API, and execute commands in workload pods in multi-cluster deployments. This issue is fixed in versions 1.0.2 and 1.1.2.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 9.6)

cvss3

Base Score: 9.6

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Impact Score

Exploitability

2.8

REFERENCES

CVE-2026-73842

SUMMARY

OpenChoreo is a complete, open-source developer platform for Kubernetes. Prior to 1.0.3, 1.1.3, and 1.2.0-rc.2, internal/cluster-gateway/server.go exposed /api/proxy/, /api/exec/, and /api/wirelogs/ on an internal listener without requiring a client certificate or token, allowing any network-reachable caller to read tenant Kubernetes Secrets, mutate workloads, and execute commands across connected data planes. This issue is fixed in versions 1.0.3, 1.1.3, and 1.2.0-rc.2.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 9)

cvss3

Base Score: 9.0

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-73841

SUMMARY

OpenChoreo is a complete, open-source developer platform for Kubernetes. From 1.2.0-rc.1 until 1.2.0, internal/openchoreo-api/api/handlers/exec.go and internal/openchoreo-api/api/handlers/wirelogs.go authorize component:exec and wirelogs:view using the caller-supplied project query parameter instead of comp.Spec.Owner.ProjectName, allowing a user with a project-scoped grant to execute commands in and read wirelogs from components owned by other projects in the same namespace. This vulnerability is fixed in 1.2.0.

Published

Date2026-08-13

Updated

Date2026-08-13

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

https://github.com/openchoreo/openchoreo/security/advisories/GHSA-52gf-6rpq-fgmx

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…