What is the official website of T-Mobile Czech Republic a.s. ?

The official website of T-Mobile Czech Republic a.s. is http://www.t-mobile.cz.

What is T-Mobile Czech Republic a.s.'s cybersecurity risk score?

T-Mobile Czech Republic a.s. has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has T-Mobile Czech Republic a.s. experienced?

According to Rankiteo, T-Mobile Czech Republic a.s. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has T-Mobile Czech Republic a.s. been affected by any supply chain cyber incidents ?

According to Rankiteo, T-Mobile Czech Republic a.s. has been affected by a supply chain cyber incident involving Lovable, with the incident ID LOV1776717678.

Does T-Mobile Czech Republic a.s. have SOC 2 Type 1 certification ?

According to Rankiteo, T-Mobile Czech Republic a.s. is not certified under SOC 2 Type 1.

Does T-Mobile Czech Republic a.s. have SOC 2 Type 2 certification ?

According to Rankiteo, T-Mobile Czech Republic a.s. does not hold a SOC 2 Type 2 certification.

Does T-Mobile Czech Republic a.s. comply with GDPR ?

According to Rankiteo, T-Mobile Czech Republic a.s. is not listed as GDPR compliant.

Does T-Mobile Czech Republic a.s. have PCI DSS certification ?

According to Rankiteo, T-Mobile Czech Republic a.s. does not currently maintain PCI DSS compliance.

Does T-Mobile Czech Republic a.s. comply with HIPAA ?

According to Rankiteo, T-Mobile Czech Republic a.s. is not compliant with HIPAA regulations.

Does T-Mobile Czech Republic a.s. have ISO 27001 certification ?

According to Rankiteo,T-Mobile Czech Republic a.s. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does T-Mobile Czech Republic a.s. operate in ?

T-Mobile Czech Republic a.s. operates primarily in the Telecommunications industry.

How many employees does T-Mobile Czech Republic a.s. have ?

T-Mobile Czech Republic a.s. employs approximately 2,010 people worldwide.

Does T-Mobile Czech Republic a.s. own any subsidiaries ?

T-Mobile Czech Republic a.s. presently has no subsidiaries across any sectors.

How many LinkedIn followers does T-Mobile Czech Republic a.s. have ?

T-Mobile Czech Republic a.s.'s official LinkedIn profile has approximately 22,793 followers.

What is the NAICS classification code for T-Mobile Czech Republic a.s. ?

T-Mobile Czech Republic a.s. is classified under the NAICS code 517, which corresponds to Telecommunications.

Does T-Mobile Czech Republic a.s. have a Crunchbase profile ?

No, T-Mobile Czech Republic a.s. does not have a profile on Crunchbase.

Does T-Mobile Czech Republic a.s. have a LinkedIn profile ?

Yes, T-Mobile Czech Republic a.s. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/t-mobile-czech-republic.

How many cybersecurity incidents has T-Mobile Czech Republic a.s. experienced ?

As of September 9, 2026, Rankiteo reports that T-Mobile Czech Republic a.s. has experienced 1 cybersecurity incidents.

How many peer or competitor companies does T-Mobile Czech Republic a.s. have ?

T-Mobile Czech Republic a.s. has an estimated 10,332 peer or competitor companies worldwide.

What types of cybersecurity incidents has T-Mobile Czech Republic a.s. faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

TCRA

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

T-Mobile Czech Republic a.s. Vendor Cyber Rating & Cyber Score

t-mobile.cz

Add Your Compliance Badge

T-Mobile Czech Republic, člen mezinárodní telekomunikační skupiny Deutsche Telekom, je téměř se 6,5 milionu mobilních zákazníků jedničkou na českém trhu. Jsme dokonale integrovaným mobilním operátorem a kromě telekomunikačních služeb nabízíme také komplexní ICT řešení pro firmy, organizace a jednotlivce. Poskytujeme špičkové služby ve vysokorychlostní síti a nejmodernější technologické inovace. Náš úspěch je řízen vynikajícím týmem lidí, kteří dokážou maximálně podporovat naše zákazníky. Slogan „Pro společné zážitky“ tedy není pouhou reklamní frází, ale realitou. Práce u nás je stejně pestrá a zajímavá jako naše nabídka. Za to vám ručíme. Pracovní příležitosti – Připojte se k nám! Začněte svou kariéru u jednoho z nejatraktivnějších

TCRA

T-Mobile Czech Republic a.s. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Deutsche Telekom

Breach

4/2026

Lovable

LOV1776717678

Loading…

A.I.

TCRA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for TCRA

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for T-Mobile Czech Republic a.s. in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for T-Mobile Czech Republic a.s. in 2026.

Incident Types TCRA vs Telecommunications Industry Avg (This Year)

No incidents recorded for T-Mobile Czech Republic a.s. in 2026.

Incident History - TCRA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

T-Mobile Czech Republic a.s. Subsidiaries

TCRA

Telecommunications

Website: http://www.t-mobile.cz

Company Size: 1,001-5,000 employees

Deutsche TelekomTelecommunications

T-Systems InternationalIT Services and IT Consulting

T-Systems MéxicoIT Services and IT Consulting

T-Systems Nederland B.V.IT Services and IT Consulting

T-Systems CloudIT-Dienstleistungen und IT-Beratung

T-Systems do BrasilIT Services and IT Consulting

T-Security ConnectAtividades de monitoramento de sistemas de segurança

T-Systems ICT India Pvt. Ltd.IT Services and IT Consulting

T-Systems IberiaIT Services and IT Consulting

Agile Hub T-Systems IberiaServicios y consultoría de TI

DigiCloudServicios y consultoría de TI

GIMM SolutionsIT Services and IT Consulting

J-EDI Digital SolutionsInformation Technology & Services

Deutsche Telekom Digital LabsTelecommunications

Deutsche Telekom IoTIT Services and IT Consulting

Hrvatski TelekomTelecommunications

Telekom HUTelecommunications

T BusinessTelekommunikation

T-Systems SingaporeIT Services and IT Consulting

DeteconBusiness Consulting and Services

T-Mobile PolskaTelecommunications

Deutsche Telekom Services Europe Romania (DTSE Romania)Outsourcing and Offshoring Consulting

T-Mobile Czech RepublicTelekomunikace

Makedonski Telekom ADTelecommunications

Slovak TelekomTelecommunications

Deutsche Telekom Cloud ServicesTelecommunications

Deutsche Telekom IT Solutions SlovakiaIT Services and IT Consulting

Deutsche Telekom Global CarrierTelekommunikation

Telekom Business EuropeTelecommunications

T-Mobile Biznes PolskaTelecommunications

T-Systems Hungary Ltd.IT Services and IT Consulting

Telekom TechBoostTelekommunikation

Deutsche Telekom Global BusinessTelecommunications

Telekom MMSIT Services and IT Consulting

T-Systems MMSIT Services and IT Consulting

T-Systems SwitzerlandIT Services and IT Consulting

Telekom Strategy ConsultingTelekommunikation

T-Systems UKIT Services and IT Consulting

Cyber Security at T-SystemsIT Services and IT Consulting

T-Systems VamosaIT Services and IT Consulting

congstarTelecommunications

T-Systems AustriaInformation Technology & Services

Digitales GesundheitswesenWellness und Fitness

Deutsche Telekom StiftungNon-profit Organizations

Deutsche Telekom Services Europe - Czech RepublicOutsourcing and Offshoring Consulting

T-Systems RomaniaIT Services and IT Consulting

Inflight Services of Deutsche TelekomTelekommunikation

T-Systems NordicIT Services and IT Consulting

Deutsche Telekom Investor RelationsTelekommunikation

T SportTelecommunications

T-Mobile Polska Business Solutions IT Services and IT Consulting

MagentaZuhauseTelekommunikation

Deutsche Telekom HealthcareHospitals and Health Care

LIFECARE Laboratorium InformatiesysteemZiekenhuizen en gezondheidszorg

Deutsche Telekom UK LimitedTelecommunications

Deutsche Telekom Global Business Solutions FranceInformation Technology & Services

T-Systems FranceIT Services and IT Consulting

Deutsche Telekom - Digital, Experience & DeliveryTelecommunications

Deutsche Telekom Services Europe - SlovakiaOutsourcing and Offshoring Consulting

Deutsche Telekom Design & Customer ExperienceTelecommunications

Deutsche Telekom Clinical Solutions India Pvt. Ltd.IT Services and IT Consulting

Deutsche Telekom EU PolicyTelecommunications

Telekom Open SpacesTelekommunikation

DeTeAssekuranz Vermittlungsgesellschaft mbHInsurance

Loading…

T-Mobile Czech Republic a.s. Similar Companies

OPPO

oppo.com

Founded in 2004, OPPO is one of the world's leading innovators of smart devices. With operations in over 70 countries and regions, OPPO's more than 290,000 points of sales and 1,900 official service centers share the beauty of technology with users all over the world. To forward our vision of a better future, OPPO has established ten smart manufacturing facilities around the world, as well as a global design center in London. Every day, our 40,000 employees put their heart and soul into exploring the possibilities of humanistic technology. OPPO is not just a device maker. We are a technology company that combines hardware with software and services. Our software range, built around the ColorOS operating system, makes devices more user-friendly and intelligent for our 740 million users worldwide. The OPPO App Market, OPPO Cloud also deliver smarter, more convenient, and better-connected services. Moving forward, OPPO will remain committed to our mission of "Technology for Mankind, Kindness for the World." We will continue to pursue innovation in the smart themes of learning, productivity, entertainment, and healthcare to meet the needs of people around the world. Constantly seeking technological breakthroughs. Make your moment with OPPO.

Motorola Solutions

motorolasolutions.com

About Motorola Solutions | Solving for safer Safety and security are at the heart of everything we do at Motorola Solutions. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Learn more about our commitment to innovating for a safer future for us all at www.motorolasolutions.com.

SFR

sfr.com

SFR is the number one alternative telecoms operator in France. SFR is also an operator providing a comprehensive range of services meeting the expectations of private and business customers alike, offering them the best of the digital world. At year-end 2011, the total number of mobile customers was 21.5 million, and the active broadband residential customer base represented 5 million customers, which represent respectively a 31.3% and 22% market share.

vivo

vivo.com

vivo is a technology company that creates great products based on a design-driven value, with smart devices and intelligent services as its core. The company aims to build a bridge between humans and the digital world. Through unique creativity, vivo provides users with an increasingly convenient mobile and digital life. vivo has over 18,000 employees across the globe. While bringing together and developing the best local talents to deliver excellence, vivo is supported by a network of 10 R&D centers in Shenzhen, Dongguan, Nanjing, Beijing, Hangzhou, Shanghai, Xi'an, Taipei, Tokyo and San Diego, focusing on the development of state-of-the-art consumer technologies, including 5G, artificial intelligence, industrial design, imaging system and other up-and-coming technologies. vivo has also set up 7 production bases (including brand-authorized manufacturing centers), across China, South- and Southeast Asia, and more regions, with an annual production capacity of nearly 200 million smartphones. As of now, vivo has branched out its sales network across more than 60 countries and regions, and is winning more than 400 million users worldwide with its superior products and services. Following the company's core values, which include Benfen, design-driven value, user-orientation, continuous learning and team spirit. vivo has implemented a sustainable development strategy, with the vision of developing into a healthier, more sustainable world-class corporation. Official Site: www.vivo.com/en Facebook: @vivoGlobal Instagram: @vivo_global

Optus

optus.com.au

Optus is an Australian telecommunications company, delivering more than 11 million services to our customers every day across mobile, broadband and digital solutions. Message our dedicated Social Media Care team at help.optus.com.au/contactus for 24/7 assistance with your account. You can also visit our Contact Us page for other ways to get in touch: optus.com.au/contactus. We monitor public social media mentions of Optus to support customers. Any information you share is handled under our Privacy Policy: optus.com.au/privacy.

Zain Group

zain.com

Zain Group is a leading provider of innovative ICT technologies & digital lifestyle communications operating in 8 markets across the Middle East & Africa, serving 51.3 million active customers as of 30 September 2025. Zain provides mobile voice, data and B2B services in: Kuwait, Bahrain, Iraq, Jordan, Saudi Arabia, Sudan and South Sudan. Headquartered in the UAE, ZainTECH, the Group’s one-stop digital and ICT solutions provider, is playing a key role in the digital transformation of enterprise and government clientele across the MENA region. Also UAE based, Zain Omantel International (ZOI) is revolutionizing the international telecommunications wholesale landscape as the premier wholesale powerhouse serving regional operators, international carriers, and global hyperscalers. In Morocco, Zain has a 15.5% stake in ‘INWI’, through a joint venture. Zain is listed on the Boursa Kuwait (stock ticker: ZAIN). We recommend the Investor Community to download the “Zain Group Investor Relations” Mobile App. For more, please email [email protected]

Idea Cellular Ltd

cb ideacellular.com

Idea Cellular is an Aditya Birla Group Company, India's first truly multinational corporation. Idea is a pan-India integrated GSM operator offering 2G and 3G services, and has its own NLD and ILD operations, and ISP license. With revenue in excess of $4 billion; revenue market share of 18%; and subscriber base of over 150 million, Idea is India’s 3rd largest mobile operator. Idea ranks among the Top 10 country operators in the world with a traffic of over 1.5 billion minutes a day. Idea’s robust pan-India coverage is built on a network of over 100,000 2G and 3G cell sites, spread across over 55,000 towns in India. Using the latest in technology, Idea provides world-class service delivery through the most extensive network of customer touch points, comprising of nearly 4,500 exclusive Idea outlets, and over 7,000 call centre seats. Idea’s customer service delivery platform is ISO 9001:2008 certified, making it the only operator in the country to have this standard certification for all 22 service areas and the corporate office Idea won the ‘Best Brand Campaign’ at the esteemed World Communication Awards 2011. It also recently won 3 Awards at the ET Telecom Awards 2012, in the following categories Customer Experience Enhancement, Excellence in Marketing and Innovative products, respectively.

Telcel

telcel.com

Telcel (Radiomóvil Dipsa) es subsidiaria de América Móvil, uno de los mayores proveedores de comunicaciones celulares de Latinoamérica, grupo líder con inversiones en telecomunicaciones en varios países del continente americano. Telcel es la empresa de telefonía celular líder en México. Nuestra solidez y estructura nos consolidan gracias a la especialización y actualización permanente de todas las personas que trabajamos en ella. Todos nosotros estamos comprometidos a satisfacer de manera eficaz y constante todas las necesidades de comunicación inalámbrica de nuestros clientes.

BT Group

bt.com

We’re one of the world’s leading communications services companies. At BT Group, the solutions we sell are integral to modern life. Our purpose is as simple as it is ambitious: we connect for good. There are no limits to what people can do when they connect. And as technology changes our world, connections are becoming even more important to everyday life. Today, that’s truer than ever. The connections we make are helping solve the world’s biggest challenges such as the global pandemic, climate change and cyber security. Through the power of technology, we’re supporting customers to live, work and play together better.

Loading…

NEWS

T-Mobile Czech Republic a.s. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 19, 2026 08:00 AM

Europe steps up sovereignty with AI ramping and rumored vendor axing

Huawei and ZTE under threat as EU emboldens security, as European AI gigafactories take a step closer to reality.

Read Article

November 05, 2025 08:00 AM

Brno venue ‘ring in’ as T-Mobile Arena

The new multipurpose arena in Brno, Czech Republic, will bear the name T-Mobile ARENA and open in Autumn 2026.

Read Article

November 03, 2025 08:00 AM

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

Hello from the TelcoTitans Deutsche Telekomwatch team and welcome to the latest edition of our Briefing. While T-Mobile US hogged the...

Read Article

October 13, 2025 07:00 AM

Deutsche Telekom brings in hackers to find 5G bugs

Deutsche Telekom challenged ethical hackers to attack 5G infrastructure in a bug bounty contest hosted together with T-Mobile.

Read Article

October 06, 2025 07:00 AM

Deutsche Telekomwatch Analyst Briefing: DT cuts loose on Europe regs, goes B2B shopping

Deutsche Telekom strengthens its Europe division by finally jettisoning poorly performing and positioned outlier Telekom Romania Mobile.

Read Article

October 02, 2025 07:00 AM

T-Mobile Forced to Adopt Better Security Practises by FCC

T-Mobile has agreed to make changes to its cybersecurity practises following consecutive data breaches. After breaches were experienced in...

Read Article

May 28, 2025 07:00 AM

Deutsche Telekom centres on RAN challenges with new R&D boss

Key RAN development exec Petr Ledl is to take over as Head of DT's T-Labs unit, with a brief to grapple with “complex technology concepts in...

Read Article

May 07, 2025 07:00 AM

T-Mobile Czech Republic Completes Billing & Charging System Upgrade with Amdocs

Completion of this upgrade ensures seamless service continuity and operational efficiency, enhancing customer experience by enabling faster,...

Read Article

February 04, 2025 08:00 AM

ZICTA partners with Zambia Defence Force to strengthen cyber security

Zambia Information and Communications Technology Authority (ZICTA) has expanded its collaboration with the Zambia Defence Force (ZDF) in an...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-86564

SUMMARY

A flaw was found in DPDK lib/vhost. Missing length validation before reading command_data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 3.3)

cvss3

Base Score: 3.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

1.8

REFERENCES

CVE-2026-55250

SUMMARY

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low cache memory that causes premature eviction to free up memory and applications running macropay-solutions/maravel-framework that utilize tymon/jwt-auth for API token authentication and blacklist management or any other package that does the same may be affected. This architectural risk might also impact native Laravel applications utilizing cache tags under specific volatile or eviction-capped environments. tymon/jwt-auth automatically probes for cache tag support. If found, it forcefully wraps 14-day token blacklist entries (jti) inside a relational tymon.jwt tag. In environments where the O(1) Atomic Lazy Eviction model is active — either natively inside Maravel-Framework v20.x or manually backported into v10.x via the explicit DI container singletons provided in PR #104 (App\Cache\TaggedCache and App\Cache\TagSet) — a strict global tracking ceiling (Container::TAGGED_CACHE_TTL_CAP_SECONDS) of 7,200 seconds (2 hours) is enforced to secure the system against memory index bloat. This ceiling forcefully truncates the 14-day blacklist lifespan down to a maximum of 2 hours, after which individual tracking keys naturally expire and disappear from the active cache window. Furthermore, because the optimized engine implements a generational version matrix to achieve O(1) flush speeds, any programmatic or manual invocation of a tag flush or reset (e.g., Cache::tags([...])->flush()) instantly bumps the internal atomic master version pointer. This shifts the computed cryptographic composite hash (sha1($this->tags->getNamespace())) for all overlapping components, rendering the entire existing index immediately unreachable. Consequently, through either natural 2-hour expiration or an intervening tag flush execution (like the cache naturally cleaning old values to free up memory), the invalidation state records are entirely wiped out. Because the tokens' physical cryptographic signatures remain structurally valid for up to 14 days, stolen, hijacked, or legitimately logged-out tokens are instantly and silently resurrected across the entire API gateway, leaving the application critically vulnerable to widespread Token Replay Attacks. Because this issue is caused by an upstream architectural assumption within the tymon/jwt-auth package rather than a core defect inside the framework, there is no direct framework version upgrade that can safely bypass this lifecycle collision without breaking business cache recycling bounds. Maravel version 10.74.0 introduced a way to backport the new fixed tagged cache from 20.x into 10.x by resolving TagSet and TaggedCache from DI, which is how this latent architectural lifecycle vulnerability was discovered. Users must apply the decoupled configuration workaround outlined below. As a workaround, make sure that cache memory size does not generate early natural evictions from cache to free up space, deleting blacklisted jwt ids before they expire. Applications must decouple flat authentication vectors from the relational tagging subsystem. This forces token identifiers to write directly to the primary cache keyspace as flat, un-tagged key-value pairs where they securely retain their unclipped 14-day lifecycle.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-53639

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the `GET /api/v2/shop/payment-requests/{hash}` and `PUT /api/v2/shop/payment-requests/{hash}` endpoints look up the payment request solely by the hash from the URL. No ownership check is performed against the authenticated customer or the underlying order. An attacker who obtains a payment request hash can read the payment request and, through the `payment` IRI in the response, recover the underlying order's `tokenValue` (which itself grants access to the full order, items, addresses, customer email, totals); and/or update the payment request payload (e.g. `target_path`, `after_path`). These fields are used by the front-end controller to redirect the user after the payment, so an attacker can flip them to an attacker-controlled URL and intercept the buyer. The hash is a UUID, so it has to be obtained out-of-band (logs, shared links, referrer headers, a co-located client), but once it is known no other credential is required, neither authentication nor knowledge of the order token. The creation endpoint `POST /api/v2/shop/orders/{tokenValue}/payment-requests` shares the same flaw: it resolves the target order solely from the `tokenValue` in the URL without verifying that the caller owns the order. The issue is fixed in versions 2.0.18, 2.1.15, and 2.2.6. As a workaround, add a query extension that filters the `GET` operation; decorate the `PUT` state provider, guard the `POST` creation endpoint with a command-bus middleware, and wire the services.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-mr9r-h354-966r

CVE-2026-53638

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The `PATCH /api/v2/shop/account/orders/{tokenValue}/payments/{paymentId}` endpoint, used by an authenticated shop customer to change the payment method of an order that has been placed but not yet paid (state `STATE_NEW`), does not validate that the chosen payment method is enabled for the order's channel. The equivalent checkout endpoint (`PATCH /api/v2/shop/orders/{tokenValue}/payments/{paymentId}`) correctly rejects out-of-channel payment methods with `HTTP 422`; the account endpoint silently accepts them and returns `HTTP 200`. An authenticated customer can therefore assign any globally enabled payment method to their own placed order, including methods that the store operator has explicitly excluded from that channel. The issue is fixed in versions: 2.0.18, 2.1.15, 2.2.6 and above. As a workaround, decorate the `Sylius\Bundle\ApiBundle\Changer\PaymentMethodChangerInterface` service in the application.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-6955-hrm5-c4qp

CVE-2026-53637

SUMMARY

Sylius is an Open Source eCommerce Framework on Symfony. Versions 2.0.0 through 2.0.17, 2.1.0 through 2.1.14, and 2.2.0 through 2.2.5 contain an improper workflow enforcement vulnerability in the cart `FormComponent`. When an order is completed while its cart page remains open, the stale LiveComponent does not detect the order’s changed state and continues to permit cart actions, allowing an authenticated customer to modify or permanently delete an already completed order. Versions 2.0.18, 2.1.15, and 2.2.6 contain a patch. As a workaround, deployments can copy the patched `FormComponent` into the application's `src/` directory and override the `sylius_shop.twig.component.cart.form` service definition to use that class.

Published

Date2026-09-08

Updated

Date2026-09-08

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/Sylius/Sylius/security/advisories/GHSA-5597-7rmh-97q5

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

T-Mobile Czech Republic a.s. Vendor Cyber Rating & Cyber Score

TCRA A.I CyberSecurity Scoring

T-Mobile Czech Republic a.s. CyberSecurity News & History

TCRA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for TCRA

Incidents vs Telecommunications Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types TCRA vs Telecommunications Industry Avg (This Year)

Incident History - TCRA (X = Date, Y = Severity)

T-Mobile Czech Republic a.s. Subsidiaries

TCRA

T-Mobile Czech Republic a.s. Similar Companies

OPPO

Motorola Solutions

SFR

vivo

Optus

Zain Group

Idea Cellular Ltd

Telcel

BT Group

T-Mobile Czech Republic a.s. CyberSecurity News

Europe steps up sovereignty with AI ramping and rumored vendor axing

Brno venue ‘ring in’ as T-Mobile Arena

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

Deutsche Telekom brings in hackers to find 5G bugs

Deutsche Telekomwatch Analyst Briefing: DT cuts loose on Europe regs, goes B2B shopping

T-Mobile Forced to Adopt Better Security Practises by FCC

Deutsche Telekom centres on RAN challenges with new R&D boss

T-Mobile Czech Republic Completes Billing & Charging System Upgrade with Amdocs

ZICTA partners with Zambia Defence Force to strengthen cyber security

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

T-Mobile Czech Republic a.s. CyberSecurity News & History

TCRA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for TCRA

Incidents vs Telecommunications Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types TCRA vs Telecommunications Industry Avg (This Year)

Incident History - TCRA (X = Date, Y = Severity)

T-Mobile Czech Republic a.s. Subsidiaries

TCRA

T-Mobile Czech Republic a.s. Similar Companies

OPPO

Motorola Solutions

SFR

vivo

Optus

Zain Group

Idea Cellular Ltd

Telcel

BT Group

T-Mobile Czech Republic a.s. CyberSecurity News

Europe steps up sovereignty with AI ramping and rumored vendor axing

Brno venue ‘ring in’ as T-Mobile Arena

Deutsche Telekomwatch: New network chief; FWA and Wi-Fi boosts; Poland innovates on B2B

Deutsche Telekom brings in hackers to find 5G bugs

Deutsche Telekomwatch Analyst Briefing: DT cuts loose on Europe regs, goes B2B shopping

T-Mobile Forced to Adopt Better Security Practises by FCC

Deutsche Telekom centres on RAN challenges with new R&D boss

T-Mobile Czech Republic Completes Billing & Charging System Upgrade with Amdocs

ZICTA partners with Zambia Defence Force to strengthen cyber security

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo