What is the official website of Storm Reply DE ?

The official website of Storm Reply DE is https://www.reply.com/storm-reply/de/.

What is Storm Reply DE's cybersecurity risk score?

Storm Reply DE has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Storm Reply DE experienced?

According to Rankiteo, Storm Reply DE currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Storm Reply DE been affected by any supply chain cyber incidents ?

According to Rankiteo, Storm Reply DE has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Storm Reply DE have SOC 2 Type 1 certification ?

According to Rankiteo, Storm Reply DE is not certified under SOC 2 Type 1.

Does Storm Reply DE have SOC 2 Type 2 certification ?

According to Rankiteo, Storm Reply DE does not hold a SOC 2 Type 2 certification.

Does Storm Reply DE comply with GDPR ?

According to Rankiteo, Storm Reply DE is not listed as GDPR compliant.

Does Storm Reply DE have PCI DSS certification ?

According to Rankiteo, Storm Reply DE does not currently maintain PCI DSS compliance.

Does Storm Reply DE comply with HIPAA ?

According to Rankiteo, Storm Reply DE is not compliant with HIPAA regulations.

Does Storm Reply DE have ISO 27001 certification ?

According to Rankiteo,Storm Reply DE is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Storm Reply DE operate in ?

Storm Reply DE operates primarily in the IT Services and IT Consulting industry.

How many employees does Storm Reply DE have ?

Storm Reply DE employs approximately 19 people worldwide.

Does Storm Reply DE own any subsidiaries ?

Storm Reply DE presently has no subsidiaries across any sectors.

How many LinkedIn followers does Storm Reply DE have ?

Storm Reply DE's official LinkedIn profile has approximately 900 followers.

What is the NAICS classification code for Storm Reply DE ?

Storm Reply DE is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Storm Reply DE have a Crunchbase profile ?

No, Storm Reply DE does not have a profile on Crunchbase.

Does Storm Reply DE have a LinkedIn profile ?

Yes, Storm Reply DE maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/storm-reply-de.

How many cybersecurity incidents has Storm Reply DE experienced ?

As of October 20, 2026, Rankiteo reports that Storm Reply DE has not experienced any cybersecurity incidents.

How many peer or competitor companies does Storm Reply DE have ?

Storm Reply DE has an estimated 41,945 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SRD

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

Storm Reply DE Vendor Cyber Rating & Cyber Score

reply.com

Add Your Compliance Badge

STORM REPLY is the company in the Reply group specialized in the design and implementation of innovative Cloud-based solutions and services. Through consolidated expertise and many years of experience in the creation and management of Infrastructure as a Service (IaaS), Software as a Service (SaaS), and Platform as a Service (PaaS) Cloud solutions, Storm Reply supports important companies in Europe and all over the world in the implementation of Cloud-based systems and applications. STORM REPLY is Amazon Web Services Premier Consulting Partner since 2014, one of the best Amazon Partners in the world, and one of the few companies to have so many different competencies attested by AWS: Financial Services, Security, Machine Learning, SaaS,

SRD

Storm Reply DE CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

SRD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SRD

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Storm Reply DE in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Storm Reply DE in 2026.

Incident Types SRD vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Storm Reply DE in 2026.

Incident History - SRD (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Storm Reply DE Subsidiaries

SRD

IT Services and IT Consulting

Website: https://www.reply.com/storm-reply/de/

Company Size: 19

119

ReplyIT Services and IT Consulting

Open Reply ITIT Services and IT Consulting

Blue Reply ITIT Services and IT Consulting

Airwalk ReplyIT Services and IT Consulting

Concept Reply GmbHInformation Technology & Services

Spike ReplyIT Services and IT Consulting

Machine Learning ReplyIT Services and IT Consulting

Spur ReplyBusiness Consulting and Services

Communication Valley ReplyComputer and Network Security

Concept Quality ReplyIT Services and IT Consulting

Glue ReplyIT Services and IT Consulting

Wemanity Learning CenterDéveloppement professionnel et coaching

Fincon Reply GmbHInformation Services

Like ReplyAdvertising Services

Data Reply UKIT Services and IT Consulting

e*finance consulting ReplyFinancial Services

Target Reply RomeIT Services and IT Consulting

ARLANIS REPLYIT Services and IT Consulting

Sense ReplyIT Services and IT Consulting

Sprint Reply ITInformation Technology & Services

Solidsoft ReplyIT Services and IT Consulting

Concept Reply USInformation Technology & Services

Business Elements ReplyIT Services and IT Consulting

Logistics Reply UKSoftware Development

Roboverse Reply DEIT Services and IT Consulting

AIM ReplyIT Services and IT Consulting

Liquid ReplyIT Services and IT Consulting

Life At ReplyIT Services and IT Consulting

BitmamaAdvertising Services

Avantage ReplyFinancial Services

Valorem ReplyIT Services and IT Consulting

Nexi DigitalFinancial Services

Wemanity MarocIT Services and IT Consulting

Lynx RecruitmentStaffing and Recruiting

Syskoplan Reply USIT Services and IT Consulting

Threepipe ReplyAdvertising Services

Xister ReplyAdvertising Services

WM ReplyIT Services and IT Consulting

Machine Learning Reply GmbHIT Services and IT Consulting

Technology ReplySoftware Development

Concept Engineering ReplyIT Services and IT Consulting

Cloud9 ReplyIT Services and IT Consulting

Storm ReplyIT Services and IT Consulting

ATLAS REPLYIT Services and IT Consulting

Wemanity BelgiumInformation Technology & Services

Cluster Reply DEIT Services and IT Consulting

Mansion House ConsultingBusiness Consulting and Services

Net ReplyIT Services and IT Consulting

Pay ReplyInformation Technology & Services

Connect ReplyIT Services and IT Consulting

TD ReplyBusiness Consulting and Services

Sytel ReplyIT Services and IT Consulting

Data Reply FRInformation Technology & Services

Comsysto Reply GmbHIT Services and IT Consulting

Laife ReplyInformation Technology & Services

Whitehall ReplyIT Services and IT Consulting

Syskoplan Reply DACHInformation Technology & Services

Business ReplySoftware Development

ARLANIS REPLY ITIT Services and IT Consulting

Canvas ReplyIT Services and IT Consulting

Spike Reply DEIT Services and IT Consulting

Wakanda Technologies - We bring African IT Power to EuropeIT-Dienstleistungen und IT-Beratung

Aktive ReplyInformation Technology & Services

Graymatter ReplyAdvertising Services

Graymatter REPLY DigitalAdvertising Services

Light ReplyIT Services and IT Consulting

Triplesense ReplyTechnology, Information and Internet

Technology Reply RomaniaIT Services and IT Consulting

4brands ReplyInformation Technology & Services

Everlo Reply GmbHIT Services and IT Consulting

Blue Reply DEIT Services and IT Consulting

Shield ReplyIT Services and IT Consulting

Accelerator 365 by ReplySoftware Development

Autonomous Reply FRIT Services and IT Consulting

Cortex Reply UKTechnology, Information and Internet

Go ReplyIT Services and IT Consulting

Sprint Reply DEIT Services and IT Consulting

KI ReplyInformation Technology & Services

Open Reply UKInformation Technology & Services

Reply ChallengesFornitori di e-learning

Data Reply ITIT Services and IT Consulting

Blockchain ReplyIT Services and IT Consulting

Wemanity NetherlandsProfessional Training and Coaching

Target ReplyData Infrastructure and Analytics

Data Reply DEInformation Technology & Services

Leadvise ReplyBusiness Consulting and Services

Digital Transformation der Regulatory AffairsUnternehmensberatung

Sprint Reply BEIT Services and IT Consulting

Logistics Reply USSoftware Development

Starbytes.itInformation Technology & Services

Comwrap Reply DACHTechnology, Information and Internet

Open ReplyInformation Technology & Services

Infinity Reply ITIT Services and IT Consulting

Live Reply DEIT Services and IT Consulting

Up ReplyIT Services and IT Consulting

Brick Reply | IT Solutions and Services for ManufacturingSoftware Development

Sytel Reply NorthInformation Technology & Services

Net Reply UKIT Services and IT Consulting

Red Reply DEIT Services and IT Consulting

Neo ReplyIT Services and IT Consulting

Live Reply ItalyIT Services and IT Consulting

Sprint Reply UKIT Services and IT Consulting

Arlanis Reply UKIT Services and IT Consulting

Air ReplyIT Services and IT Consulting

Infinity Reply DEIT Services and IT Consulting

Macros Reply GmbHIT Services and IT Consulting

Spike Reply UKTechnology, Information and Internet

Storm Reply, Inc.Professional Services

Eos ReplyIT Services and IT Consulting

Open Reply Benelux - FranceBusiness Consulting and Services

Alpha ReplyIT Services and IT Consulting

Ki Reply UKIT Services and IT Consulting

Affinity ReplyIT Services and IT Consulting

Zest ReplyIT Services and IT Consulting

Nimbus ReplyIT Services and IT Consulting

Cluster Reply PLIT Services and IT Consulting

Industrie Reply USMotor Vehicle Manufacturing

Atomic ReplyBusiness Consulting and Services

HERMES REPLYInformation Technology & Services

Loading…

Storm Reply DE Similar Companies

Zoom

zoom.com

Bring teams together, reimagine workspaces, engage new audiences, and delight your customers –– all on the Zoom AI-first work platform you know and love. 💙 Zoomies help people stay connected so they can get more done together. We set out on a mission to make video communications frictionless and secure by building the world’s best video product for the enterprise, but we didn’t stop there. With products like AI Companion, Team Chat, Contact Center, Phone, Events, Rooms, Webinar, Contact Center and more, we bring innovation to a wide variety of customers, from the conference room to the classroom, from doctor’s offices to financial institutions to government agencies, from global brands to small businesses. We do what we do because of our core value of Care: care for our community, our customers, our company, our teammates, and ourselves. Our global employees help our customers meet happier, communicate better, and create meaningful connections the world over. Zoomies are problem-solvers and self-starters, working hard to get results and moving quickly to design solutions with our customers and users in mind. Here, you'll find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment. Learn more about careers at Zoom by visiting our careers site: https://careers.zoom.us/home

Persistent Systems

persistent.com

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem. Our disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 22 sequential quarters of growth with $406.2M in Q2 FY26 revenue, up 4.2% Q-o-Q and 17.6% Y-o-Y growth. Our 26,000+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries. We received ‘Growth Honor of the Year’ at Everest Group Elevate 2025 and were cited as a Leader in the Everest Group Talent Readiness for Next-generation Cloud Services PEAK Matrix® Assessment 2025. Our company fosters a values-driven and people-centric work environment that enables our employees to: - Accelerate growth, both professionally and personally - Impact the world in powerful, positive ways, using the latest technologies - Enjoy collaborative innovation, with diversity and work-life wellbeing at the core - Unlock global opportunities to work and learn with the industry’s best Let’s unleash your full potential at Persistent - persistent.com/careers

Canon EMEA

canon-europe.com

We are Canon Europe. We are the world's best imaging company. This page represents our offices in Europe, the Middle East and Africa. Founded in 1937, the desire to continuously innovate has kept Canon at the forefront of imaging excellence throughout its 85-year history and has commitments to invest in the right areas and capture growth opportunities. From cameras to commercial printers, and business consultancy to healthcare technologies, Canon enriches lives and businesses through imaging innovation. Canon’s corporate philosophy is Kyosei – ‘living and working together for the common good’. In EMEA, Canon Europe pursues sustainable business growth, focusing on reducing its own environmental impact and supporting customers to reduce theirs using Canon’s products, solutions and services. Canon Europe has operations in roughly 120 countries, with approximately 13,500 employees and contributes to around a quarter of Canon’s global revenues annually.

SoftServe

softserveinc.com

SoftServe is a premier IT consulting and digital services provider. We expand the horizon of new technologies to solve today's complex business challenges and achieve meaningful outcomes for our clients. Our boundless curiosity drives us to explore and reimagine the art of the possible. Clients confidently rely on SoftServe to architect and execute mature and innovative capabilities, such as digital engineering, data and analytics, cloud, and AI/ML. Our global reputation is gained from more than 30 years of experience delivering superior digital solutions at exceptional speed by top-tier engineering talent to enterprise industries, including high tech, financial services, healthcare, life sciences, retail, energy, and manufacturing. At SoftServe, we live by our values. Trust, teamwork, growth, innovation, willingness to help, and exceeding expectations are engrained in everything we do. We partner with major technology players, such as Google Cloud Platform, Amazon Web Services, Microsoft Azure, Salesforce, NVIDIA, MuleSoft, VMware, and Odoo, to give clients a competitive advantage in the market. Founded in 1993, our global firm is headquartered in Austin, Texas, USA, and Lviv, Ukraine. Visit our website, blog, media, and news pages for more information. Blog: softserveinc.com/blog Media: softserveinc.com/media News: softserveinc.com/news

Amazon Web Services (AWS)

cb amazon.com

Launched in 2006, Amazon Web Services (AWS) began exposing key infrastructure services to businesses in the form of web services -- now widely known as cloud computing. The ultimate benefit of cloud computing, and AWS, is the ability to leverage a new business model and turn capital infrastructure expenses into variable costs. Businesses no longer need to plan and procure servers and other IT resources weeks or months in advance. Using AWS, businesses can take advantage of Amazon's expertise and economies of scale to access resources when their business needs them, delivering results faster and at a lower cost. Today, Amazon Web Services provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands of businesses in 190 countries around the world. With data center locations in the U.S., Europe, Singapore, and Japan, customers across all industries are taking advantage of our low cost, elastic, open and flexible, secure platform.

IBM

ibm.com

At IBM, we do more than work. We create. We create as technologists, developers, and engineers. We create with our partners. We create with our competitors. If you're searching for ways to make the world work better through technology and infrastructure, software and consulting, then we want to work with you. We're here to help every creator turn their "what if" into what is. Let's create something that will change everything.

Oracle

cb oracle.com

Oracle is a global leader in AI, delivering the cloud infrastructure, data, and applications that organizations across the world trust to successfully achieve business outcomes at scale. Oracle Cloud Infrastructure (OCI) provides fast, flexible, scalable AI infrastructure. With superior compute performance and network design, a comprehensive choice of AI services for developing and orchestrating agentic AI workflows at scale, and unrivaled data control, security, privacy, and governance, OCI is designed for AI workloads. It also gives customers the flexibility to run their workloads wherever they need by supporting public cloud, multicloud, hybrid cloud, sovereign, and on-premises deployments. The Oracle AI Database is the only database with AI natively built in everywhere. By bringing AI to where data lives, the Oracle AI Database delivers enterprise-grade AI securely, cost-effectively, and at scale. In-database machine learning and vector search enable AI models to run where data resides. Support for multi-modal data (structured, unstructured, graph, vector) enables richer AI use cases. The Oracle AI Data Platform enables organizations to build, deploy, and govern AI agents and applications on top of private, secure, and distributed enterprise data. This enables organizations to operationalize AI without compromising data security or control. Oracle Applications embed AI directly into business workflows and industry processes to ensure AI is delivered in context, where work happens. They include the only applications suite that brings AI to every aspect of a business, with AI-powered ERP, HCM, and CX applications, and the Oracle Health Suite which provides applications for managing the entire healthcare ecosystem. Oracle also provides industry-specific cloud application suites for more than two dozen industries and NetSuite, the world’s first cloud computing company. This LinkedIn page serves as Oracle’s official global company page.

Engineering Group

eng.it

Engineering Group is the Digital Transformation Company, leader in Italy and expanding its global footprint, with around 14,000 associates and with over 80 offices spread across Europe, the United States, and South America and global delivery. The Engineering Group, consisting of over 70 companies in 21 countries, has been supporting the continuous evolution of companies and organizations for more than 40 years, thanks to a deep understanding of business processes in all market segments, fully leveraging the opportunities offered by advanced digital technologies and proprietary solutions. It integrates best-of-breed market solutions, managed services, and continues to expand its expertise through M&As and partnerships with leading technology players. The Group strongly invests both in innovation, through its R&I division, and in human capital, with the internal IT & Management Academy. Engineering is a key player in the creation of digital ecosystems that bridge the gap between different markets, while developing composable solutions that ultimately foster a continuous Business transformation. In 2026, Engineering achieved, for the second consecutive year, the Top Employers Italy certification, reaffirming the significant growth process for the company, which is constantly committed to enhancing HR policies to create a work environment centered on the well-being of people.

Ingram Micro

ingrammicro.com

Ingram Micro is a leading technology company for the global information technology ecosystem. With the ability to reach nearly 90% of the global population, we play a vital role in the worldwide IT sales channel, bringing products and services from technology manufacturers and cloud providers to a highly diversified base of business-to-business technology experts. Through Ingram Micro Xvantage™, our AI-powered digital platform, we offer what we believe to be the industry’s first comprehensive business-to-consumer-like experience, integrating hardware and cloud subscriptions, personalized recommendations, instant pricing, order tracking, and billing automation. We also provide a broad range of technology services, including financing, specialized marketing, and lifecycle management, as well as technical pre- and post-sales professional support. Learn more at www.ingrammicro.com.

Loading…

NEWS

Storm Reply DE CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 04, 2025 04:05 PM

Accelerate AI development for autonomous driving

Perception models serve as the intelligence behind autonomous vehicles. Our approach enables both the generation of training data via simulation and the...

Read Article

March 06, 2025 08:00 AM

Storm Reply and Audi set new standards for cloud management with Agentic AI

Storm Reply, the Reply Group company specialising in innovative cloud-based solutions and services, is supporting Audi's Cloud Foundation Services team.

Read Article

May 08, 2024 05:27 PM

Reply at the AWS GenAI Hands-on Hackathon

5. & 12. June. MUNICH/DORTMUND. One topic, two dates, two locations: At the AWS GenAI Hands-on Hackathon Reply, Anthropic and AWS provide insight into the...

Read Article

July 13, 2023 10:42 AM

Streaming revolution: how to manage live corporate events

Calzedonia Group chooses an AWS public cloud, created with the support of Storm Reply, as the platform capable of effectively conveying internal...

Read Article

March 26, 2020 07:00 AM

Microsoft staff giggle beneath the weight of a 52,000-person Reply-All email storm

Microsoft is right now groaning under the weight of a 52,000-person internal Reply-All email storm. The Register understands this one...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Storm Reply DE Vendor Cyber Rating & Cyber Score

SRD A.I CyberSecurity Scoring

Storm Reply DE CyberSecurity News & History

SRD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SRD

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SRD vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - SRD (X = Date, Y = Severity)

Storm Reply DE Subsidiaries

SRD

Storm Reply DE Similar Companies

Zoom

Persistent Systems

Canon EMEA

SoftServe

Amazon Web Services (AWS)

IBM

Oracle

Engineering Group

Ingram Micro

Storm Reply DE CyberSecurity News

Accelerate AI development for autonomous driving

Storm Reply and Audi set new standards for cloud management with Agentic AI

Reply at the AWS GenAI Hands-on Hackathon

Streaming revolution: how to manage live corporate events

Microsoft staff giggle beneath the weight of a 52,000-person Reply-All email storm

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Storm Reply DE CyberSecurity News & History

SRD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SRD

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SRD vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - SRD (X = Date, Y = Severity)

Storm Reply DE Subsidiaries

SRD

Storm Reply DE Similar Companies

Zoom

Persistent Systems

Canon EMEA

SoftServe

Amazon Web Services (AWS)

IBM

Oracle

Engineering Group

Ingram Micro

Storm Reply DE CyberSecurity News

Accelerate AI development for autonomous driving

Storm Reply and Audi set new standards for cloud management with Agentic AI

Reply at the AWS GenAI Hands-on Hackathon

Streaming revolution: how to manage live corporate events

Microsoft staff giggle beneath the weight of a 52,000-person Reply-All email storm

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo