Comparison Overview
Thales

Thales
6, Rue de la Verrerie, Meudon, 92190, FR
Last Update: 12/09/2026
Thales (Euronext Paris: HO) is a global leader in advanced technologies for the Defence, Aerospace, and Cyber & Digital sectors. Its portfolio of innovative products and services addresses several major challenges: sovereignty, security, sustainability and inclusion. T...

MBDA
Le Plessis Robinson, 92358, FR
Last Update: 15/09/2026
A world leader in missiles and missile systems. Our multi-national organisation is made up of around 13,000 employees working across the UK, France, Italy, Germany, Spain and the US, and is the first truly integrated European defence company. As the European champion...
Compliance Ranges Comparison

Thales







MBDA






Benchmark & Cyber Underwriting Signals
Incidents vs Defense and Space Manufacturing Industry Avg (This Year)
Thales has 55.16% fewer incidents than the average of same-industry companies with at least one recorded incident.
Incidents vs Defense and Space Manufacturing Industry Avg (This Year)
No incidents recorded for MBDA in 2026.
Incident History - Thales (X = Date, Y = Severity)
Thales cyber incidents detection timeline including parent company and subsidiaries.
Incident History - MBDA (X = Date, Y = Severity)
MBDA cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Thales

MBDA
FAQ
Latest Global CVEs
Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory.
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.
Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, has an out-of-bounds write.
Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user running Vibe.
- https://github.com/mistralai/mistral-vibe
- https://github.com/mistralai/mistral-vibe/blob/19b5b74faa78d0816b8d4d4c7d7543fc3520678c/vibe/core/git/repo.py#L411-L431
- https://github.com/mistralai/mistral-vibe/commit/c069ffa1e12fb5f2487b489217c40ab97721d553
- https://github.com/mistralai/mistral-vibe/issues/996
- https://github.com/mistralai/mistral-vibe/releases/tag/v2.25.5
- https://www.vulncheck.com/advisories/mistral-vibe-before-2.25.5-remote-code-execution-via-git-post-checkout