What is the official website of T-Systems do Brasil ?

The official website of T-Systems do Brasil is https://www.t-systems.com/br/pt/.

What is T-Systems do Brasil's cybersecurity risk score?

T-Systems do Brasil has an AI-generated cybersecurity risk score of 763 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has T-Systems do Brasil experienced?

According to Rankiteo, T-Systems do Brasil currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has T-Systems do Brasil been affected by any supply chain cyber incidents ?

According to Rankiteo, T-Systems do Brasil has been affected by a supply chain cyber incident involving Lovable, with the incident ID LOV1776717678.

Does T-Systems do Brasil have SOC 2 Type 1 certification ?

According to Rankiteo, T-Systems do Brasil is not certified under SOC 2 Type 1.

Does T-Systems do Brasil have SOC 2 Type 2 certification ?

According to Rankiteo, T-Systems do Brasil does not hold a SOC 2 Type 2 certification.

Does T-Systems do Brasil comply with GDPR ?

According to Rankiteo, T-Systems do Brasil is not listed as GDPR compliant.

Does T-Systems do Brasil have PCI DSS certification ?

According to Rankiteo, T-Systems do Brasil does not currently maintain PCI DSS compliance.

Does T-Systems do Brasil comply with HIPAA ?

According to Rankiteo, T-Systems do Brasil is not compliant with HIPAA regulations.

Does T-Systems do Brasil have ISO 27001 certification ?

According to Rankiteo,T-Systems do Brasil is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does T-Systems do Brasil operate in ?

T-Systems do Brasil operates primarily in the IT Services and IT Consulting industry.

How many employees does T-Systems do Brasil have ?

T-Systems do Brasil employs approximately 1,503 people worldwide.

Does T-Systems do Brasil own any subsidiaries ?

T-Systems do Brasil presently has no subsidiaries across any sectors.

How many LinkedIn followers does T-Systems do Brasil have ?

T-Systems do Brasil's official LinkedIn profile has approximately 203,455 followers.

What is the NAICS classification code for T-Systems do Brasil ?

T-Systems do Brasil is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does T-Systems do Brasil have a Crunchbase profile ?

No, T-Systems do Brasil does not have a profile on Crunchbase.

Does T-Systems do Brasil have a LinkedIn profile ?

Yes, T-Systems do Brasil maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/tsystems-brasil.

How many cybersecurity incidents has T-Systems do Brasil experienced ?

As of September 14, 2026, Rankiteo reports that T-Systems do Brasil has experienced 1 cybersecurity incidents.

How many peer or competitor companies does T-Systems do Brasil have ?

T-Systems do Brasil has an estimated 41,636 peer or competitor companies worldwide.

What types of cybersecurity incidents has T-Systems do Brasil faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

763

/1000

Fair

788

/1000

Fair

T-Systems do Brasil Vendor Cyber Rating & Cyber Score

t-systems.com

Add Your Compliance Badge

Parte do Grupo Deutsche Telekom, a T-Systems possui cerca de 26 mil funcionários no mundo e receita de € 3,9 bilhões. Está presente em mais de 20 países e é uma das líderes globais no mercado de Tecnologia da Informação e Comunicação (TIC). Atuando no Brasil desde 2001, a empresa possui hoje 9 escritórios em 4 estados e um SOC em Blumenau. Seus 2 mil colaboradores atendem a mais de 800 clientes, dos mais diversos segmentos, seguindo sólidos princípios de negócios: pessoas que fazem acontecer, trabalho em equipe, inovação, excelência operacional e, acima de tudo, foco no cliente. Atualmente, a T-Systems oferece um portfólio integrado com foco em quatro áreas: Digital, SAP, Cloud & Infraestrutura e Segurança. Entre as suas especialidades

T-Systems do Brasil CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Deutsche Telekom

Breach

4/2026

Lovable

LOV1776717678

Loading…

A.I.

TB Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for TB

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for T-Systems do Brasil in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for T-Systems do Brasil in 2026.

Incident Types TB vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for T-Systems do Brasil in 2026.

Incident History - TB (X = Date, Y = Severity)

Loading…

SUBSIDIARY

T-Systems do Brasil Subsidiaries

TB

IT Services and IT Consulting

Website: https://www.t-systems.com/br/pt/

Company Size: 1,001-5,000 employees

Deutsche TelekomTelecommunications

T-Systems ICT India Pvt. Ltd.IT Services and IT Consulting

T-Systems InternationalIT Services and IT Consulting

T-Systems MéxicoIT Services and IT Consulting

T-Systems Nederland B.V.IT Services and IT Consulting

T-Systems CloudIT-Dienstleistungen und IT-Beratung

Deutsche Telekom Digital LabsTelecommunications

Telekom HUTelecommunications

Deutsche Telekom IoTIT Services and IT Consulting

Hrvatski TelekomTelecommunications

T BusinessTelekommunikation

T-Systems IberiaIT Services and IT Consulting

Agile Hub T-Systems IberiaServicios y consultoría de TI

DigiCloudServicios y consultoría de TI

GIMM SolutionsIT Services and IT Consulting

J-EDI Digital SolutionsInformation Technology & Services

T-Mobile PolskaTelecommunications

DeteconBusiness Consulting and Services

T-Systems SingaporeIT Services and IT Consulting

Makedonski Telekom ADTelecommunications

T-Mobile Czech RepublicTelekomunikace

Deutsche Telekom Services Europe Romania (DTSE Romania)Outsourcing and Offshoring Consulting

Slovak TelekomTelecommunications

Telekom MMSIT Services and IT Consulting

T-Systems MMSIT Services and IT Consulting

Telekom Business EuropeTelecommunications

Telekom Strategy ConsultingTelekommunikation

Deutsche Telekom IT Solutions SlovakiaIT Services and IT Consulting

Deutsche Telekom Global BusinessTelecommunications

T-Mobile Biznes PolskaTelecommunications

Deutsche Telekom Global CarrierTelekommunikation

Telekom TechBoostTelekommunikation

T-Mobile Czech Republic a.s.Telecommunications

T-Systems Hungary Ltd.IT Services and IT Consulting

Deutsche Telekom Cloud ServicesTelecommunications

T-Systems SwitzerlandIT Services and IT Consulting

T-Systems UKIT Services and IT Consulting

Cyber Security at T-SystemsIT Services and IT Consulting

T-Systems VamosaIT Services and IT Consulting

congstarTelecommunications

T-Systems AustriaInformation Technology & Services

Digitales GesundheitswesenWellness und Fitness

T-Systems FranceIT Services and IT Consulting

Deutsche Telekom Services Europe - SlovakiaOutsourcing and Offshoring Consulting

Deutsche Telekom Services Europe - Czech RepublicOutsourcing and Offshoring Consulting

Deutsche Telekom StiftungNon-profit Organizations

Inflight Services of Deutsche TelekomTelekommunikation

T-Mobile Polska Business Solutions IT Services and IT Consulting

Deutsche Telekom HealthcareHospitals and Health Care

LIFECARE Laboratorium InformatiesysteemZiekenhuizen en gezondheidszorg

MagentaZuhauseTelekommunikation

Deutsche Telekom Investor RelationsTelekommunikation

T SportTelecommunications

T-Systems NordicIT Services and IT Consulting

Deutsche Telekom Clinical Solutions India Pvt. Ltd.IT Services and IT Consulting

Deutsche Telekom - Digital, Experience & DeliveryTelecommunications

T-Systems RomaniaIT Services and IT Consulting

DeTeAssekuranz Vermittlungsgesellschaft mbHInsurance

Deutsche Telekom EU PolicyTelecommunications

Deutsche Telekom UK LimitedTelecommunications

Deutsche Telekom Design & Customer ExperienceTelecommunications

Deutsche Telekom Global Business Solutions FranceInformation Technology & Services

Telekom Open SpacesTelekommunikation

T-Security ConnectAtividades de monitoramento de sistemas de segurança

Loading…

T-Systems do Brasil Similar Companies

Globant

cb globant.link

At Globant, we create the digitally-native products that people love. We bridge the gap between businesses and consumers through technology and creativity, leveraging our experience as an AI powerhouse. We dare to digitally transform organizations and strive to delight their customers. - We have more than 30,000 employees and are present in 33 countries across 5 continents, working for companies like Google, Electronic Arts, and Santander, among others. - We were named a Worldwide Leader in AI Services (2023) and a Worldwide Leader in CX Improvement Services (2020) by IDC MarketScape report. - We are the fastest-growing IT brand and the 5th strongest IT brand globally (2024), according to Brand Finance. - We were featured as a business case study at Harvard, MIT, and Stanford. - We are active members of The Green Software Foundation (GSF) and the Cybersecurity Tech Accord. For more information, visit https://bit.ly/globant_com Follow us: http://www.twitter.com/globant http://www.youtube.com/Globant http://www.facebook.com/Globant https://instagram.com/Globant https://www.tiktok.com/@globant

FPT Software

cb fptsoftware.com

FPT Software, a subsidiary of FPT Corporation, is a global technology and IT services provider headquartered in Vietnam, with USD 1.22 billion in revenue (2024) and over 33,000 employees in 30 countries. Embracing an AI-first approach, FPT Software enables breakthrough speed, scalability and quality through AI-powered services and solutions and an AI-augmented workforce. It has partnered with over 1,100 clients worldwide, more than 130 of which are Fortune Global 500 companies in Aviation, Automotive, Banking, Financial Services and Insurance, Healthcare, Logistics, Manufacturing, Utilities, and more. For more information, please visit https://fptsoftware.com/.

SoftServe

softserveinc.com

SoftServe is a premier IT consulting and digital services provider. We expand the horizon of new technologies to solve today's complex business challenges and achieve meaningful outcomes for our clients. Our boundless curiosity drives us to explore and reimagine the art of the possible. Clients confidently rely on SoftServe to architect and execute mature and innovative capabilities, such as digital engineering, data and analytics, cloud, and AI/ML. Our global reputation is gained from more than 30 years of experience delivering superior digital solutions at exceptional speed by top-tier engineering talent to enterprise industries, including high tech, financial services, healthcare, life sciences, retail, energy, and manufacturing. At SoftServe, we live by our values. Trust, teamwork, growth, innovation, willingness to help, and exceeding expectations are engrained in everything we do. We partner with major technology players, such as Google Cloud Platform, Amazon Web Services, Microsoft Azure, Salesforce, NVIDIA, MuleSoft, VMware, and Odoo, to give clients a competitive advantage in the market. Founded in 1993, our global firm is headquartered in Austin, Texas, USA, and Lviv, Ukraine. Visit our website, blog, media, and news pages for more information. Blog: softserveinc.com/blog Media: softserveinc.com/media News: softserveinc.com/news

Capita

capita.com

Capita is an outsourcer, helping clients across the public and private sectors run complex business processes more efficiently, creating better consumer experiences. Operating across eight countries, Capita’s 34,000 colleagues support primarily UK and European clients with people-based services underpinned by market-leading technology. We’re a vital support service for our clients, enabling the everyday interactions that we expect to run seamlessly, to run seamlessly. A publicly listed business with adjusted revenue of £2.4bn, Capita’s areas of focus are Central Government, Local Public Service, Defence, Learning, Fire & Security, Contact Centres and Pensions Solutions. We’re embracing change to respond to the ever-changing needs of society, creating better outcomes for all our stakeholders.

Iron Mountain

cb ironmountain.com

In the era of AI, your data is your advantage. Yet too often it remains untapped: disconnected from systems, underutilized, untrained, and exposed to risk. Iron Mountain is the trusted partner for organizations of all sizes to unlock what’s possible, transforming information into intelligence and assets into advantage. How? By seamlessly managing digital and physical assets of all kinds across their lifecycle—making them visible, secure, accessible, and AI-ready. From payments to pathology, mortgages to media, fine art to IT, we’ve helped more than 240,000 customers around the world, including 95% of the Fortune 1000, unlock more value from what’s already within reach. All with unparalleled security, governance, and sustainability at every step. What can we unlock together?

T-Systems International

t-systems.com

Your digitalization partner with industry expertise With locations in more than 26 countries and over 26,000 employees (2024), T-Systems is one of the leading providers of digital services in Europe. The Deutsche Telekom subsidiary is headquartered in Germany and has a presence in Europe as well as in selected core markets and strategic production locations. T-Systems can provide a global production and supply chain to companies operating worldwide. T-Systems offers integrated end-to-end IT solutions, driving the digital transformation of companies in all industries and the public sector. T-Systems’ focus industries are automotive, the public sector, healthcare and transport. For these areas, T-Systems develops industryspecific solutions – so-called vertical applications. The comprehensive portfolio of services includes secure operation of traditional IT infrastructures, migration to private cloud and public cloud environments of hyperscalers, as well as management of hybrid and multi-cloud infrastructures. T-Systems integrates customized platforms, industry-specific applications and innovative technologies such as artificial intelligence (AI), big data and blockchain into these infrastructures. To achieve this, the Telekom subsidiary works closely with leading global technology partners. The end-to-end services also include state-of-the-art security solutions and data protection in accordance with DSGVO requirements. T-Systems pursues a holistic approach: consulting (advisory) and solutions from the areas of digital, cloud services and security are offered from a single source. Become one of us: https://www.t-systems.com/de/en/company/careers Imprint: https://www.t-systems.com/de/en/imprint

TD SYNNEX North America

tdsynnex.com

We’re TD SYNNEX (NYSE: SNX), a leading distributor and solutions aggregator for the IT ecosystem. We’re 22,000 of the IT industry’s best and brightest, who share an unwavering passion for bringing compelling technology products, services and solutions to the world. We’re an innovative partner that helps our customers maximize the value of IT investments, demonstrate business outcomes and unlock growth opportunities. At our core, we’re a company that cares. We care about our partners, our co-workers, our investors and the world around us. And we’re committed to being a diverse, inclusive employer of choice and a good corporate citizen.

Amadeus

amadeus.com

We make the experience of travel better for everyone, everywhere by inspiring innovation, partnerships and responsibility to people, places and planet. Our technology powers the travel and tourism industry. We inspire more connected ways of thinking, centered around the traveler. Our platform connects the travel and hospitality ecosystem. We are making travel a force for social and environmental good. We are passionate about travel. With a unique perspective, at the heart of our industry, we are redesigning the travel of tomorrow.

Carelon Global Solutions India

carelonglobal.in

Carelon Global Solutions makes healthcare operations more practical, effective, and efficient. Our global team of more than 25K innovators drives growth, delivers exceptional support, and develops digital tools specifically for health plans, providers, and systems. Each day, our partners and experts from across the globe implement new ways to save time and money — so doctors can focus on care. Formerly known as Legato Health Technologies, Carelon Global Solutions is part of the Carelon family of brands and is a fully owned subsidiary of Elevance Health. Headquartered in the United States, Carelon Global Solutions has talented teams in India, Ireland, the Philippines, and Puerto Rico. Want to be part of something meaningful? Join our growing team. We believe that when bold talent meets limitless thinking, the possibilities are endless. As part of our India team, you’ll work alongside some of the best minds in the business to solve healthcare’s most complex challenges. You’ll be part of an exciting, fast-paced, and supportive company culture, where all associates receive: • Competitive pay. • Generous benefits. • Training, mentorship, and growth. • Hybrid workplace flexibility. • The opportunity to help others and make a difference. Follow our Carelon Global Solutions India LinkedIn page for the latest job postings and timely company news.

Loading…

NEWS

T-Systems do Brasil CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 16, 2026 08:09 PM

Inside Olympic Cybersecurity: Lessons From Paris 2024 to Milan Cortina 2026

Discover how Franz Regul, former CISO for the Paris 2024 Olympics, tackled unique cybersecurity challenges to protect the Olympics from...

Read Article

March 12, 2026 05:31 PM

Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays

Cybersecurity researchers have disclosed details of a new banking malware targeting Brazilian users that's written in Rust, marking a...

Read Article

February 17, 2026 08:00 AM

Why Ransomware Remains One of Cybersecurity’s Most Persistent and Costly Threats

Ransomware is a cybersecurity issue that refuses to disappear. If anything, attacks are becoming more disruptive, difficult to fix and...

Read Article

February 05, 2026 08:00 AM

Senate hearing examines growing cybersecurity risks to U.S. water systems

The U.S. Senate Environment and Public Works Committee has held a hearing to examine escalating cybersecurity threats facing U.S. drinking...

Read Article

January 25, 2026 08:00 AM

What is a Cyber Security Job?

Also known as ethical hackers, these professionals are experts in looking for vulnerabilities in a system to gain access.

Read Article

January 07, 2026 08:00 AM

8 things CISOs can’t afford to get wrong in 2026

AI, cloud, and the increasingly interconnected nature of business and technology present CISOs with a range of risks and threats that will...

Read Article

December 10, 2025 08:00 AM

The AI dilemma: Securing and leveraging AI for cyber defense

How can organizations navigate the cybersecurity paradox—getting ahead of the threats introduced by AI while also harnessing its powerful...

Read Article

November 19, 2025 08:00 AM

Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices

Eternidade Stealer spreads via WhatsApp hijacking, using Python scripts and IMAP-driven C2 updates to target Brazilian users.

Read Article

November 18, 2025 08:00 AM

Can a Global, Decentralized System Save CVE Data?

As vulnerabilities in the Common Vulnerabilities and Exposures ecosystem pile up, one Black Hat presenter hopes for a global,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90603

SUMMARY

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90602

SUMMARY

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-90601

SUMMARY

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90600

SUMMARY

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15892

SUMMARY

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_name buffer (and, for read, a data buffer) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled, relying on the end: label to k_free() them. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning status MGMT_CB_ERROR_RC, the handler executed return ret_rc; directly, bypassing end: and leaking the heap allocation on every rejected request. The settings handlers are reachable over the unauthenticated SMP transport (Bluetooth LE, UART, or UDP, depending on product configuration). The access hook is the mechanism applications use to deny unauthorized settings access, and MGMT_CB_ERROR_RC is a common rejection style, so an attacker who can send settings read/write/delete commands that the hook rejects triggers a heap leak on each attempt. Because the leaked memory is never reclaimed until reboot, a sustained stream of rejected requests monotonically exhausts the kernel heap until k_malloc() fails, denying mcumgr service and impacting any other heap consumer on the device — a denial of service. The impact is availability-only; there is no memory corruption or information disclosure. Only configurations that select the heap buffer type, enable the access hook, and register a hook that returns MGMT_CB_ERROR_RC are affected (the default stack buffer type cannot leak).

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

T-Systems do Brasil Vendor Cyber Rating & Cyber Score

TB A.I CyberSecurity Scoring

T-Systems do Brasil CyberSecurity News & History

TB Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for TB

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types TB vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - TB (X = Date, Y = Severity)

T-Systems do Brasil Subsidiaries

TB

T-Systems do Brasil Similar Companies

Globant

FPT Software

SoftServe

Capita

Iron Mountain

T-Systems International

TD SYNNEX North America

Amadeus

Carelon Global Solutions India

T-Systems do Brasil CyberSecurity News

Inside Olympic Cybersecurity: Lessons From Paris 2024 to Milan Cortina 2026

Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays

Why Ransomware Remains One of Cybersecurity’s Most Persistent and Costly Threats

Senate hearing examines growing cybersecurity risks to U.S. water systems

What is a Cyber Security Job?

8 things CISOs can’t afford to get wrong in 2026

The AI dilemma: Securing and leveraging AI for cyber defense

Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices

Can a Global, Decentralized System Save CVE Data?

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

T-Systems do Brasil CyberSecurity News & History

TB Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for TB

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types TB vs IT Services and IT Consulting Industry Avg (This Year)

Incident History - TB (X = Date, Y = Severity)

T-Systems do Brasil Subsidiaries

TB

T-Systems do Brasil Similar Companies

Globant

FPT Software

SoftServe

Capita

Iron Mountain

T-Systems International

TD SYNNEX North America

Amadeus

Carelon Global Solutions India

T-Systems do Brasil CyberSecurity News

Inside Olympic Cybersecurity: Lessons From Paris 2024 to Milan Cortina 2026

Rust-Based VENON Malware Targets 33 Brazilian Banks with Credential-Stealing Overlays

Why Ransomware Remains One of Cybersecurity’s Most Persistent and Costly Threats

Senate hearing examines growing cybersecurity risks to U.S. water systems

What is a Cyber Security Job?

8 things CISOs can’t afford to get wrong in 2026

The AI dilemma: Securing and leveraging AI for cyber defense

Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices

Can a Global, Decentralized System Save CVE Data?

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo