What is the official website of T-Mobile Czech Republic a.s. ?

The official website of T-Mobile Czech Republic a.s. is http://www.t-mobile.cz.

What is T-Mobile Czech Republic a.s.'s cybersecurity risk score?

T-Mobile Czech Republic a.s. has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has T-Mobile Czech Republic a.s. experienced?

According to Rankiteo, T-Mobile Czech Republic a.s. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has T-Mobile Czech Republic a.s. been affected by any supply chain cyber incidents ?

According to Rankiteo, T-Mobile Czech Republic a.s. has been affected by a supply chain cyber incident involving Lovable, with the incident ID LOV1776717678.

Does T-Mobile Czech Republic a.s. have SOC 2 Type 1 certification ?

According to Rankiteo, T-Mobile Czech Republic a.s. is not certified under SOC 2 Type 1.

Does T-Mobile Czech Republic a.s. have SOC 2 Type 2 certification ?

According to Rankiteo, T-Mobile Czech Republic a.s. does not hold a SOC 2 Type 2 certification.

Does T-Mobile Czech Republic a.s. comply with GDPR ?

According to Rankiteo, T-Mobile Czech Republic a.s. is not listed as GDPR compliant.

Does T-Mobile Czech Republic a.s. have PCI DSS certification ?

According to Rankiteo, T-Mobile Czech Republic a.s. does not currently maintain PCI DSS compliance.

Does T-Mobile Czech Republic a.s. comply with HIPAA ?

According to Rankiteo, T-Mobile Czech Republic a.s. is not compliant with HIPAA regulations.

Does T-Mobile Czech Republic a.s. have ISO 27001 certification ?

According to Rankiteo,T-Mobile Czech Republic a.s. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does T-Mobile Czech Republic a.s. operate in ?

T-Mobile Czech Republic a.s. operates primarily in the Telecommunications industry.

How many employees does T-Mobile Czech Republic a.s. have ?

T-Mobile Czech Republic a.s. employs approximately 2,010 people worldwide.

Does T-Mobile Czech Republic a.s. own any subsidiaries ?

T-Mobile Czech Republic a.s. presently has no subsidiaries across any sectors.

How many LinkedIn followers does T-Mobile Czech Republic a.s. have ?

T-Mobile Czech Republic a.s.'s official LinkedIn profile has approximately 22,793 followers.

What is the NAICS classification code for T-Mobile Czech Republic a.s. ?

T-Mobile Czech Republic a.s. is classified under the NAICS code 517, which corresponds to Telecommunications.

Does T-Mobile Czech Republic a.s. have a Crunchbase profile ?

No, T-Mobile Czech Republic a.s. does not have a profile on Crunchbase.

Does T-Mobile Czech Republic a.s. have a LinkedIn profile ?

Yes, T-Mobile Czech Republic a.s. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/t-mobile-czech-republic.

How many cybersecurity incidents has T-Mobile Czech Republic a.s. experienced ?

As of June 3, 2026, Rankiteo reports that T-Mobile Czech Republic a.s. has experienced 1 cybersecurity incidents.

How many peer or competitor companies does T-Mobile Czech Republic a.s. have ?

T-Mobile Czech Republic a.s. has an estimated 10,174 peer or competitor companies worldwide.

What types of cybersecurity incidents has T-Mobile Czech Republic a.s. faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

TCRA

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

T-Mobile Czech Republic a.s. Vendor Cyber Rating & Cyber Score

t-mobile.cz

Add Your Compliance Badge

T-Mobile Czech Republic, člen mezinárodní telekomunikační skupiny Deutsche Telekom, je téměř se 6,5 milionu mobilních zákazníků jedničkou na českém trhu. Jsme dokonale integrovaným mobilním operátorem a kromě telekomunikačních služeb nabízíme také komplexní ICT řešení pro firmy, organizace a jednotlivce. Poskytujeme špičkové služby ve vysokorychlostní síti a nejmodernější technologické inovace. Náš úspěch je řízen vynikajícím týmem lidí, kteří dokážou maximálně podporovat naše zákazníky. Slogan „Pro společné zážitky“ tedy není pouhou reklamní frází, ale realitou. Práce u nás je stejně pestrá a zajímavá jako naše nabídka. Za to vám ručíme. Pracovní příležitosti – Připojte se k nám! Začněte svou kariéru u jednoho z nejatraktivnějších

TCRA A.I CyberSecurity Scoring

Scoring History

TCRA

T-Mobile Czech Republic a.s. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Deutsche Telekom

Breach

4/2026

Lovable

LOV1776717678

Loading…

A.I.

TCRA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for TCRA

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for T-Mobile Czech Republic a.s. in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for T-Mobile Czech Republic a.s. in 2026.

Incident Types TCRA vs Telecommunications Industry Avg (This Year)

No incidents recorded for T-Mobile Czech Republic a.s. in 2026.

Incident History - TCRA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

T-Mobile Czech Republic a.s. Subsidiaries

TCRA

Telecommunications

Website: http://www.t-mobile.cz

Company Size: 1,001-5,000 employees

Deutsche TelekomTelecommunications

T-Systems InternationalIT Services and IT Consulting

T-Systems MéxicoIT Services and IT Consulting

T-Systems Nederland B.V.IT Services and IT Consulting

T-Systems CloudIT-Dienstleistungen und IT-Beratung

T-Systems do BrasilIT Services and IT Consulting

T-Security ConnectAtividades de monitoramento de sistemas de segurança

T-Systems ICT India Pvt. Ltd.IT Services and IT Consulting

T-Systems IberiaIT Services and IT Consulting

Agile Hub T-Systems IberiaServicios y consultoría de TI

DigiCloudServicios y consultoría de TI

GIMM SolutionsIT Services and IT Consulting

J-EDI Digital SolutionsInformation Technology & Services

Deutsche Telekom Digital LabsTelecommunications

Deutsche Telekom IoTIT Services and IT Consulting

Hrvatski TelekomTelecommunications

Telekom HUTelecommunications

T BusinessTelekommunikation

T-Systems SingaporeIT Services and IT Consulting

DeteconBusiness Consulting and Services

T-Mobile PolskaTelecommunications

Deutsche Telekom Services Europe Romania (DTSE Romania)Outsourcing and Offshoring Consulting

T-Mobile Czech RepublicTelekomunikace

Makedonski Telekom ADTelecommunications

Slovak TelekomTelecommunications

Deutsche Telekom Cloud ServicesTelecommunications

Deutsche Telekom IT Solutions SlovakiaIT Services and IT Consulting

Deutsche Telekom Global CarrierTelekommunikation

Telekom Business EuropeTelecommunications

T-Mobile Biznes PolskaTelecommunications

T-Systems Hungary Ltd.IT Services and IT Consulting

Telekom TechBoostTelekommunikation

Deutsche Telekom Global BusinessTelecommunications

Telekom MMSIT Services and IT Consulting

T-Systems MMSIT Services and IT Consulting

T-Systems SwitzerlandIT Services and IT Consulting

Telekom Strategy ConsultingTelekommunikation

T-Systems UKIT Services and IT Consulting

Cyber Security at T-SystemsIT Services and IT Consulting

T-Systems VamosaIT Services and IT Consulting

congstarTelecommunications

T-Systems AustriaInformation Technology & Services

Digitales GesundheitswesenWellness und Fitness

Deutsche Telekom StiftungNon-profit Organizations

Deutsche Telekom Services Europe - Czech RepublicOutsourcing and Offshoring Consulting

T-Systems RomaniaIT Services and IT Consulting

Inflight Services of Deutsche TelekomTelekommunikation

T-Systems NordicIT Services and IT Consulting

Deutsche Telekom Investor RelationsTelekommunikation

T SportTelecommunications

T-Mobile Polska Business Solutions IT Services and IT Consulting

MagentaZuhauseTelekommunikation

Deutsche Telekom HealthcareHospitals and Health Care

LIFECARE Laboratorium InformatiesysteemZiekenhuizen en gezondheidszorg

Deutsche Telekom UK LimitedTelecommunications

Deutsche Telekom Global Business Solutions FranceInformation Technology & Services

T-Systems FranceIT Services and IT Consulting

Deutsche Telekom - Digital, Experience & DeliveryTelecommunications

Deutsche Telekom Services Europe - SlovakiaOutsourcing and Offshoring Consulting

Deutsche Telekom Design & Customer ExperienceTelecommunications

Deutsche Telekom Clinical Solutions India Pvt. Ltd.IT Services and IT Consulting

Deutsche Telekom EU PolicyTelecommunications

Telekom Open SpacesTelekommunikation

DeTeAssekuranz Vermittlungsgesellschaft mbHInsurance

Loading…

T-Mobile Czech Republic a.s. Similar Companies

MTS Group

mts.ru

Mobile TeleSystems OJSC ("MTS") is the leading telecommunications group in Russia, Eastern Europe and Central Asia, offering mobile and fixed voice, broadband, pay TV as well as content and entertainment services in one of the world's fastest growing regions. Including its subsidiaries, as of December 31, 2010, the Group serviced over 108.1 million mobile subscribers in Russia, Ukraine, Uzbekistan, Turkmenistan, Armenia and Belarus, a region that boasts a total population of more than 230 million. The Group’s fixed business, as of December 31, 2010, had a total of 9.9 million households passed, 1.8 million broadband Internet and 2.6 million pay-TV subscribers. MTS has been listed on the New York Stock Exchange since July 2000 and trades under the ticker MBT. The Company’s shares have been listed locally on Moscow Interbank Currency Exchange (MICEX) since November 2003 under the symbol MTSI. The free float of the Company’s shares is approximately 49.2%. MTS is 50.8% majority-owned by Sistema, the largest public diversified financial corporation in Russia and the CIS. In 2010, MTS' revenues reached $11.3 billion. According to GSM Association Wireless Intelligence Information Service, MTS ranks as the 2nd largest operator in Europe by proportionate subscriptions at the end of 2010..

Idea Cellular Ltd

cb ideacellular.com

Idea Cellular is an Aditya Birla Group Company, India's first truly multinational corporation. Idea is a pan-India integrated GSM operator offering 2G and 3G services, and has its own NLD and ILD operations, and ISP license. With revenue in excess of $4 billion; revenue market share of 18%; and subscriber base of over 150 million, Idea is India’s 3rd largest mobile operator. Idea ranks among the Top 10 country operators in the world with a traffic of over 1.5 billion minutes a day. Idea’s robust pan-India coverage is built on a network of over 100,000 2G and 3G cell sites, spread across over 55,000 towns in India. Using the latest in technology, Idea provides world-class service delivery through the most extensive network of customer touch points, comprising of nearly 4,500 exclusive Idea outlets, and over 7,000 call centre seats. Idea’s customer service delivery platform is ISO 9001:2008 certified, making it the only operator in the country to have this standard certification for all 22 service areas and the corporate office Idea won the ‘Best Brand Campaign’ at the esteemed World Communication Awards 2011. It also recently won 3 Awards at the ET Telecom Awards 2012, in the following categories Customer Experience Enhancement, Excellence in Marketing and Innovative products, respectively.

PT. Indosat Tbk

ioh.co.id

Indosat Ooredoo Hutchison (IDX: ISAT) ("IOH"), are here with our vision to become the most preferred digital telecommunications company of Indonesia. The IOH merger combines two highly complementary businesses between PT Indosat Tbk (“Indosat Ooredoo”) and PT Hutchison 3 Indonesia to create a new world-class digital telecoms and internet company for Indonesia that can better compete and create additional value for all stakeholders, including employees, customers, and shareholders. Indosat Ooredoo Hutchison is now the second-largest mobile telecoms business in Indonesia. Indosat Ooredoo Hutchison will be guided by its corporate vision “To Become the Most Preferred Digital Telco of Indonesia” to capture the tremendous market opportunities presented by Indonesia’s digital and economic growth. The Company’s enhanced scale, financial strength, and expertise, combined with its preeminent networks, talent, and strategic partnerships, will enable Indosat Ooredoo Hutchison to become a key telco player driving Indonesia’s digital transformation agenda. The Company will focus on its core mission of delivering world-class digital experiences while connecting and empowering every Indonesian.

Telcel

telcel.com

Telcel (Radiomóvil Dipsa) es subsidiaria de América Móvil, uno de los mayores proveedores de comunicaciones celulares de Latinoamérica, grupo líder con inversiones en telecomunicaciones en varios países del continente americano. Telcel es la empresa de telefonía celular líder en México. Nuestra solidez y estructura nos consolidan gracias a la especialización y actualización permanente de todas las personas que trabajamos en ella. Todos nosotros estamos comprometidos a satisfacer de manera eficaz y constante todas las necesidades de comunicación inalámbrica de nuestros clientes.

Telecom Egypt

cb te.eg

Since its establishment in 1854, Telecom Egypt has played a pivotal role in driving growth within the local ICT market capitalizing on its vast infrastructure, which is one of the largest in the region. Its vast domestic and international infrastructure has helped it serve various customer groups including consumers, enterprises, domestic and international carriers. Through its five business units Telecom Egypt boasts a consolidated top-line of EGP 22.8bn. In September 2017, Telecom Egypt introduced its new retail brand “WE” with the launch of its mobile services. In a year from launch, “WE” offered the market’s first fully integrated bundle combining all of its consumer services fixed and mobile, voice and data in one bill taking its first step towards full convergence and demonstrating its agility as a key player in the telecommunications industry. By end of 2018, Telecom Egypt fixed voice customers grew to 7.9mn of which 5.2mn enjoyed fixed broadband connectivity, while mobile customers reached 3.9mn. Telecom Egypt’s wholesale unit provides infrastructure, transmission and international voice services to local mobile operators and internet service providers. In addition, it provides international carries capacities on one of the largest submarine cable networks in the world.

Globe Telecom

globe.com.ph

Globe is a leading full-service telecommunications company in the Philippines and publicly listed in the PSE with the stock symbol GLO. The company serves the telecommunications and technology needs of consumers and businesses across an entire suite of products and services including mobile, fixed, broadband, data connectivity, internet and managed services. It has major interests in financial technology, digital marketing solutions, venture capital funding for startups, and virtual healthcare. In 2019, Globe became a signatory to the United Nations Global Compact, committing to implement universal sustainability principles. Its principals are Ayala Corporation and Singtel, acknowledged industry leaders in the country and in the region. VISION We see a Philippines where Families' dreams come true, Businesses flourish, and the Nation is admired. MISSION To do our part, we create Wonderful Experiences for people to have choices, Overcome Challenges, and discover new ways to Enjoy Life. OUR VALUES We put our customers first. We value People & together we make the difference. We act with integrity. We care like an owner. We keep things simple. We move Fast, We are Better Everyday.

Millicom (Tigo)

cb millicom.com

Millicom (NASDAQ U.S.: TIGO, Nasdaq) is a leading provider of fixed and mobile telecommunications services in Latin America. Through our TIGO® and Tigo Business® brands, we provide a wide range of digital services and products, including TIGO Money for mobile financial services, TIGO Sports for local entertainment, TIGO ONEtv for pay TV, high-speed data, voice, and business-to-business solutions such as cloud and security. Millicom (NASDAQ U.S.: TIGO) is a leading provider of fixed and mobile telecommunications services in Latin America. Through our TIGO® and Tigo Business® brands, we provide a wide range of digital services and products, including TIGO Money for mobile financial services, TIGO Sports for local entertainment, TIGO ONEtv for pay TV, high-speed data, voice, and business-to-business solutions such as cloud and security. As of March 31, 2025, Millicom, including its Honduras Joint Venture, employed approximately 14,000 people, and provided mobile and fiber-cable services through its digital highways to more than 46 million customers, with a fiber-cable footprint over 14 million homes passed. Founded in 1990, Millicom International Cellular S.A. is headquartered in Luxembourg. Join us: www.millicom.com Twitter: @Millicom. Instagram: @millicom. Facebook: @millicom. YouTube: Millicom International. 148-150, Boulevard de la Pétrusse L-2330, Luxembourg

A1 Telekom Austria Group

a1.group

WE ARE EMPOWERING DIGITAL LIFE We don't know what the world will look like in 2050, but we know that A1 Telekom Austria Group is geared up for current and future demands. We are a leading provider of digital services and communications solutions in Central and Eastern Europe, offering a state-of-the art network infrastructure as well as empowering digitalization. 19.000 of our employees and modern broadband infrastructure make digital business and lifestyle possible as well as enable more than 24 mio users to connect everywhere anytime. Our purpose is to Empower Digital Life in areas of communications, payment, entertainment services and integrated business solutions. We do this together with our operating companies in 7 European countries: Austria, Bulgaria, Croatia, Slovenia, Belarus, Republic of Serbia and Republic of North Macedonia. Headquartered in Vienna and listed on the Vienna Stock Exchange, the A1 Telekom Austria Group is an European unit of América Móvil, one of the world´s largest wireless services providers. You can also follow us here: https://twitter.com/TA_Group Find out more about us as an employer on https://jobs.a1.com/

SFR

sfr.com

SFR is the number one alternative telecoms operator in France. SFR is also an operator providing a comprehensive range of services meeting the expectations of private and business customers alike, offering them the best of the digital world. At year-end 2011, the total number of mobile customers was 21.5 million, and the active broadband residential customer base represented 5 million customers, which represent respectively a 31.3% and 22% market share.

Loading…

NEWS

T-Mobile Czech Republic a.s. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 19, 2026 08:00 AM

Europe steps up sovereignty with AI ramping and rumored vendor axing

Huawei and ZTE under threat as EU emboldens security, as European AI gigafactories take a step closer to reality.

Read Article

November 05, 2025 08:00 AM

Brno venue ‘ring in’ as T-Mobile Arena

The new multipurpose arena in Brno, Czech Republic, will bear the name T-Mobile ARENA and open in Autumn 2026.

Read Article

November 03, 2025 08:00 AM

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

Hello from the TelcoTitans Deutsche Telekomwatch team and welcome to the latest edition of our Briefing. While T-Mobile US hogged the...

Read Article

October 13, 2025 07:00 AM

Deutsche Telekom brings in hackers to find 5G bugs

Deutsche Telekom challenged ethical hackers to attack 5G infrastructure in a bug bounty contest hosted together with T-Mobile.

Read Article

October 06, 2025 07:00 AM

Deutsche Telekomwatch Analyst Briefing: DT cuts loose on Europe regs, goes B2B shopping

Deutsche Telekom strengthens its Europe division by finally jettisoning poorly performing and positioned outlier Telekom Romania Mobile.

Read Article

October 02, 2025 07:00 AM

T-Mobile Forced to Adopt Better Security Practises by FCC

T-Mobile has agreed to make changes to its cybersecurity practises following consecutive data breaches. After breaches were experienced in...

Read Article

May 28, 2025 07:00 AM

Deutsche Telekom centres on RAN challenges with new R&D boss

Key RAN development exec Petr Ledl is to take over as Head of DT's T-Labs unit, with a brief to grapple with “complex technology concepts in...

Read Article

May 07, 2025 07:00 AM

T-Mobile Czech Republic Completes Billing & Charging System Upgrade with Amdocs

Completion of this upgrade ensures seamless service continuity and operational efficiency, enhancing customer experience by enabling faster,...

Read Article

February 04, 2025 08:00 AM

ZICTA partners with Zambia Defence Force to strengthen cyber security

Zambia Information and Communications Technology Authority (ZICTA) has expanded its collaboration with the Zambia Defence Force (ZDF) in an...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-44654

SUMMARY

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the owner has reused across multiple agents. The deletion removes the file globally — not just from the shared agent — breaking the owner's other private agents that reference the same `file_id`. The private agent retains a stale `file_id` reference that no longer resolves. A shared-agent editor can destroy files that the owner uses across multiple agents. The owner's private agents — which the attacker has no access to — break silently with stale `file_id` references. This is a cross-agent integrity violation: editing access to one agent should not affect another. Version 0.8.4 contains a patch.

Published

Date2026-06-02

Updated

Date2026-06-02

RISK INFORMATION (Score: )

cvss4

Base Score: 5.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-f8jg-v856-mf6q

CVE-2026-44653

SUMMARY

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, users with only `VIEW` access to an MCP server can retrieve the server's decrypted admin-managed secrets through `GET /api/mcp/servers` and `GET /api/mcp/servers/:serverName`. The returned config includes plaintext values for `apiKey.key` and `oauth.client_secret`. This allows viewers of a shared MCP server to exfiltrate the underlying provider credentials. Version 0.8..4 contains a patch. Other remediations include: never returning decrypted admin-managed secrets to non-owners; redacting apiKey.key and oauth.client_secret from all API responses consider returning only boolean presence indicators for secrets, similar to the auth-values route pattern; and, if owners need to edit configs without re-entering secrets, preserving secrets server-side and returning placeholders instead of plaintext.

Published

Date2026-06-02

Updated

Date2026-06-02

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-6vqg-rgpm-qvf9

CVE-2026-42507

SUMMARY

When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.

Published

Date2026-06-02

Updated

Date2026-06-02

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-42504

SUMMARY

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Published

Date2026-06-02

Updated

Date2026-06-02

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-41412

SUMMARY

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, the alf.io extension sandbox injects a fully-functional HTTP client (`simpleHttpClient`) into every extension script's scope. The `postFileAndSaveResponse()` method accepts an arbitrary filesystem path as its `file` parameter and reads the file contents using `new FileInputStream(file)` with no path validation, directory restriction, or allowlist. A malicious extension script can read any file accessible to the JVM process user and exfiltrate it to an attacker-controlled server via HTTP POST. Version 2.0-M5-2606 patches the issue.

Published

Date2026-06-02

Updated

Date2026-06-02

RISK INFORMATION (Score: 4.9)

cvss3

Base Score: 4.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

1.2

REFERENCES

https://github.com/alfio-event/alf.io/security/advisories/GHSA-6m62-53cw-4373

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…