What is the official website of Ursus Breweries ?

The official website of Ursus Breweries is http://ursus-breweries.ro/.

What is Ursus Breweries's cybersecurity risk score?

Ursus Breweries has an AI-generated cybersecurity risk score of 765 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Ursus Breweries experienced?

According to Rankiteo, Ursus Breweries currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ursus Breweries been affected by any supply chain cyber incidents ?

According to Rankiteo, Ursus Breweries has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Oracle (Incident ID: CONDAVORASANASA1770645741) Oracle (Incident ID: ADIHEAHARMARTHEJAG1767017696)

Does Ursus Breweries have SOC 2 Type 1 certification ?

According to Rankiteo, Ursus Breweries is not certified under SOC 2 Type 1.

Does Ursus Breweries have SOC 2 Type 2 certification ?

According to Rankiteo, Ursus Breweries does not hold a SOC 2 Type 2 certification.

Does Ursus Breweries comply with GDPR ?

According to Rankiteo, Ursus Breweries is not listed as GDPR compliant.

Does Ursus Breweries have PCI DSS certification ?

According to Rankiteo, Ursus Breweries does not currently maintain PCI DSS compliance.

Does Ursus Breweries comply with HIPAA ?

According to Rankiteo, Ursus Breweries is not compliant with HIPAA regulations.

Does Ursus Breweries have ISO 27001 certification ?

According to Rankiteo,Ursus Breweries is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ursus Breweries operate in ?

Ursus Breweries operates primarily in the Food and Beverage Services industry.

How many employees does Ursus Breweries have ?

Ursus Breweries employs approximately 538 people worldwide.

Does Ursus Breweries own any subsidiaries ?

Ursus Breweries presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ursus Breweries have ?

Ursus Breweries's official LinkedIn profile has approximately 24,177 followers.

What is the NAICS classification code for Ursus Breweries ?

Ursus Breweries is classified under the NAICS code 722, which corresponds to Food Services and Drinking Places.

Does Ursus Breweries have a Crunchbase profile ?

No, Ursus Breweries does not have a profile on Crunchbase.

Does Ursus Breweries have a LinkedIn profile ?

Yes, Ursus Breweries maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ursus-breweries.

How many cybersecurity incidents has Ursus Breweries experienced ?

As of October 20, 2026, Rankiteo reports that Ursus Breweries has experienced 21 cybersecurity incidents.

How many peer or competitor companies does Ursus Breweries have ?

Ursus Breweries has an estimated 8,861 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Ursus Breweries

Boost Score +25 with badge (5 left)

765

/1000

Fair

790

/1000

Fair

Ursus Breweries Vendor Cyber Rating & Cyber Score

ursus-breweries.ro

Add Your Compliance Badge

Ursus Breweries este liderul industriei berii din România, cu un portofoliu emblematic ce include mărci apreciate de milioane de români: URSUS, Timișoreana, Ciucaș, Ursus Cooler, Peroni Nastro Azzurro, Kozel, Azuga, Pilsner Urquell și Asahi Super Dry. Cu peste 1.600 de colegi dedicați, din fabricile noastre din Brașov, Buzău, Timișoara și micro-berăria din Cluj-Napoca, din depozite, din teren și din sediul central, construim zilnic povestea Ursus Breweries, o companie solidă, dinamică și pasionată de ceea ce face. Prietenia, pasiunea și creșterea definesc cultura noastră – și ne dorim să le împărtășim cu oameni care vor să contribuie cu adevărat. Ne-am bucura să scrii și tu, alături de noi, povestea Ursus Breweries. Conținutul acestei

Ursus Breweries

Ursus Breweries CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Asahi Group Holding...

Ransomware

100

1/2026

Oracle

CONDAVORASANASA...

Asahi Group Holding...

Ransomware

100

1/2026

ASACITCGR176838...

Asahi Group Holding...

Cyber Attack

12/2025

Oracle

ADIHEAHARMARTHE...

Ursus Breweries

Ransomware

100

11/2025

ASA393243911122...

Ursus Breweries

Ransomware

100

10/2025

ASA373243710132...

Ursus Breweries

Ransomware

100

10/2025

ASA216202110112...

Ursus Breweries

Ransomware

100

9/2025

ASA1765382073

Ursus Breweries

Ransomware

100

9/2025

ASA319203110082...

Asahi Group Holding...

Ransomware

100

9/2025

ASA1779287351

Ursus Breweries

Ransomware

100

8/2025

ASA259202510072...

Ursus Breweries

Cyber Attack

100

6/2025

ASA039310309302...

Ursus Breweries

Ransomware

100

5/2025

ASA483244811272...

Asahi Group Holding...

Ransomware

100

1/2025

ASAアスク177108624...

Asahi Group Holding...

Ransomware

100

1/2025

MARASAJAG177133...

Ursus Breweries

Ransomware

10/2024

ASA239212310152...

Ursus Breweries

Ransomware

100

9/2024

ASA566245611272...

Ursus Breweries

Ransomware

100

6/2024

ASA249242410082...

Ursus Breweries

Ransomware

100

9/2023

ASA403264011272...

Asahi Group Holding...

Ransomware

100

4/2023

ASATHE179146277...

Ursus Breweries

Ransomware

100

6/2022

ASA136201310082...

Asahi Group Holding...

Ransomware

100

12/2016

SANASA177754498...

Loading…

A.I.

Ursus Breweries Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Ursus Breweries

Incidents vs Food and Beverage Services Industry Avg (This Year)

No incidents recorded for Ursus Breweries in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Ursus Breweries in 2026.

Incident Types Ursus Breweries vs Food and Beverage Services Industry Avg (This Year)

No incidents recorded for Ursus Breweries in 2026.

Incident History - Ursus Breweries (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ursus Breweries Subsidiaries

Ursus Breweries

Food and Beverage Services

Website: http://ursus-breweries.ro/

Company Size: 538

Asahi Europe & InternationalFood and Beverage Services

Asahi Group HoldingsFood and Beverage Services

Asahi BeveragesFood and Beverage Services

Carlton & United BreweriesManufacturing

Asahi Holdings Southeast Asia Sdn BhdFood and Beverage Services

Birra PeroniFood & Beverages

Asahi UKFood & Beverages

Koninklijke GrolschFood and Beverage Services

De Klok DrankenFood and Beverage Services

Plzeňský PrazdrojFood and Beverage Services

Kompania PiwowarskaFood and Beverage Services

Asahi Beer Asia LimitedFood & Beverages

Asahi CanadaFood and Beverage Services

Fuller's BreweryFood and Beverage Services

Meantime Brewing CompanyFood and Beverage Services

Asahi Brands FranceManufacturing

Plzeňský Prazdroj Slovensko, a.s.Food & Beverages

Dark Star Brewing Co LtdFood and Beverage Services

Asahi Brands GermanyFood and Beverage Services

Asahi Beer USA IncFood and Beverage Services

CORNISH ORCHARDSFood & Beverages

Dreher SörgyárakFood and Beverage Services

Loading…

Ursus Breweries Similar Companies

Kerry

kerry.com

Every day, millions of people throughout the world consume foods and beverages containing Kerry’s taste and nutrition solutions. We are committed to making the world of food and beverage better for everyone, and dedicated to our Purpose, Inspiring Food, Nourishing Life. At Kerry, we are proud to provide our customers – some of the world’s best-known food, beverage and pharma brands – with the expertise, insights and know-how they need to deliver products that people enjoy and feel better about consuming. Kerry is a company rich in heritage and resources. Over the past five decades, our focus on changing lifestyles, the globalisation of food tastes and ever-evolving consumer needs has brought us to a market-leading global position. Today, we are firmly established as a world leader in the food, beverage and pharma industries, with 22,000+ staff and 150+ innovation and manufacturing centres across 30+ countries. Learn more about Kerry: www.kerry.com

GoTo Foods

gotofoods.com

Atlanta-based platform company GoTo Foods (formerly known as Focus Brands) is a leading developer of global multi-channel foodservice brands. As of December 28 , 2025, GoTo Foods, through its affiliate brands, is the franchisor and operator of over 7,300 restaurants, cafes, ice cream shoppes and bakeries in all 50 states and in 71 countries and territories under the Auntie Anne’s®, Carvel®, Cinnabon®, Jamba®, Moe’s Southwest Grill®, McAlister’s Deli® and Schlotzsky’s® brand names, as well as the Seattle’s Best Coffee® brand on certain military bases and in certain international markets. The iconic GoTo Foods brands benefit from strong enterprise growth engines, including marketing, digital, technology and franchise sales & development to propel growth and brand performance. Please visit www.gotofoods.com to learn more.   GoTo Foods is proud to be Certified™ by Great Place To Work®, the most definitive “employer-of-choice” recognition, and the only recognition based entirely on what employees report about their workplace experience for the second consecutive year.

Greggs

greggs.co.uk

Greggs is a leading food-on-the-go retailer with over 2,400 shops nationwide and serving over six million customers a week. We stand for great tasting, freshly prepared food that our customers can trust, at affordable prices and aim to become the customers’ favourite for food-on-the-go. With ambitions to grow to over 3,0000 shops nationwide and ownership of our supply chain, we are in a unique position to make quality, freshly prepared food accessible to anyone, anywhere. Our supply network... is being reshaped to support growth and compete more effectively in the food-on-the-go market. We're investing in a major programme to support shop expansion substantially beyond 3,000 outlets in the UK. Our shops... are being refurbished and relocated in locations away from high streets such as retail and industrial parks, motorway service stations and travel hubs, to meet the demands of busy food-on-the-go customers. Our franchise model continues to offer opportunities for further growth in non-high street locations. Our product offer... is differentiated by the way we freshly prepare food in our shops each day and offer customers outstanding value for good quality, great tasting food-on-the-go, at any time of day. For more on how to join us at Greggs please visit careers.greggs.co.uk

Frito-Lay

cb fritolay.com

We believe every consumer should have access to their favorite snack, everywhere. We own the manufacturing process from seed to shelf and actively invest in technology to automate key steps of the process. This helps us be more agile in what we need to make, who we need to make it for, and how we can best deliver it to snack lovers from coast to coast.

Gordon Food Service

cb gfs.com

We’ve grown to become the largest family-operated broadline food service distributor in North America by upholding the same business approach since 1897—being passionately committed to the people we serve. We believe in the power of good food—to bring people together and make moments special. Every product, every order, and every decision we make is inspired by the people on the other side of the plate. We distribute to foodservice operators throughout the Midwest, Northeast, Southeast and Southwest regions of the U.S. and coast to coast in Canada. Our company also operates more than 170 Gordon Food Service Stores, which are open to the public and provide the benefits of restaurant-quality products and friendly, knowledgeable service. Gordon Food Service Stores do not charge a membership fee. Gordon Food Service Stores are the primary supplier for many small foodservice operators, including: restaurants, churches, daycare providers, caterers, event planners, and other small businesses. We offer a broad range of employment opportunities throughout our corporate offices, distribution centers, and retail stores. We have a strong commitment to our employees and foster an environment that promotes internal growth, training, and career development opportunities. Gordon Food Service is an Equal Opportunity Employer and does not discriminate against any person on the basis of age, sex, race, religion, national origin, disability, or veteran status.

Perfetti Van Melle

perfettivanmelle.com

Perfetti Van Melle is a privately owned company, producing and distributing candies and chewing gums in more than 150 countries worldwide. Employing over 17.000 people and operating 37 companies throughout the world, Perfetti Van Melle has a true global reach: it is present in the Asia Pacific Region, Europe, Middle East, Africa and the Americas The industrial adventure of Perfetti Van Melle began many years ago, but it was in March 2001 that the current Group was set up through the merger of Perfetti Spa and Van Melle N.V. In July 2006 the Group acquired the Spanish company Chupa Chups S.A., famous all over the world for its lollypops. Our brands convey the passion we have for our products. We continuously explore new ways of doing things and innovative ideas that will inspire and delight our consumers worldwide. Our global brands Mentos, Chupa Chups, Alpenliebe gratify, refresh, inspire consumers of all ages around the globe. Other brands are extremely popular in regional markets with innovative tastes that match local preferences.

Suntory Holdings Limited

suntory.com

As a global leader in the beverage industry, Suntory Group aims to inspire the brilliance of life, by creating rich experiences for people, in harmony with nature. Sustained by the gifts of nature and water, the Group offers a uniquely diverse portfolio of products, from award-winning Japanese whiskies Yamazaki and Hibiki, iconic American whiskies Jim Beam and Maker's Mark, canned ready-to-drink -196 (minus one-nine-six), The Premium Malt’s beer, Japanese wine Tomi, and the world-famous Château Lagrange. Its brand collection also includes non-alcoholic favorites Orangina, Lucozade, Oasis, BOSS coffee, Suntory Tennensui water, TEA+ Oolong Tea, and V energy drink, as well as popular health and wellness product Sesamin EX. Founded as a family-owned business in 1899 in Osaka, Japan, Suntory Group has grown into a global company operating throughout the Americas, Europe, Africa, Asia and Oceania, with an annual revenue (excluding excise taxes) of $20.5 billion in 2025. Its 41,628 employees worldwide draw upon the unique blend of Japanese artisanship and global tastes to explore new product categories and markets.

Nestlé

nestle.com

As the world’s largest food and beverage company we are driven by a simple aim: unlocking the power of food to enhance quality of life for everyone, today and for generations to come. To deliver on this, we serve with passion, with a spirit of excellence, offering products and services for all stages of life, every moment of the day, helping people care for themselves and their families. Our culture is based on our values rooted in respect: respect for ourselves, respect for others, respect for diversity and respect for the future. We can trace our origin back to 1866, when the first European condensed milk factory was opened in Cham, Switzerland, by the Anglo-Swiss Condensed Milk Company. One year later, Henri Nestlé, a trained pharmacist, launched one of the world’s first prepared infant cereals ‘Farine lactée’ in Vevey, Switzerland. Today, we employ around 273,000 people and have factories or operations in almost every country in the world. With our headquarters still based in the Swiss town of Vevey, we had sales of CHF 84.3 billion in 2020. Our portfolio covers almost every food and beverage category – offering products and services for all stages of life, every moment of the day, helping people care for themselves and their families. House rules: https://nes.tl/HouseRules

The HEINEKEN Company

theHEINEKENcompany.com

HEINEKEN - the world's most international brewer. It is the leading developer and marketer of premium beer and cider brands. Led by the Heineken® brand, the Group has a portfolio of more than 500 international, regional, local, and speciality beers and ciders. We are committed to innovation, long-term brand investment, disciplined sales execution and focused cost management. Through our "Brew a Better World" strategy, sustainability is embedded in the business and delivers value for all stakeholders. HEINEKEN has a well-balanced geographic footprint with leadership positions in both developed and developing markets. We employ over 85,000 employees and operate breweries, malteries, cider plants and other production facilities in more than 70 countries. Stay informed: https://www.theheinekencompany.com/newsroom Please enjoy our brands responsibly and only share our posts with those who are of legal drinking age.

Loading…

NEWS

Ursus Breweries CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 17, 2025 07:00 AM

Ursus Breweries documents the history of beer in Romania through a podcast created by Damian Anfile and Gojira

Ursus Breweries, the market leader in Romania's beer industry, is opening a new chapter in its relationship with beer lovers: a special...

Read Article

November 09, 2022 08:00 AM

Michal Mrowiec is named Ursus Breweries President

Michal Mrowiec, the current Sales Vicepresident of Kompania Piwowarska, will take over the role of Ursus Breweries President starting with January 1, 2023.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Ursus Breweries Vendor Cyber Rating & Cyber Score

Ursus Breweries A.I CyberSecurity Scoring

Ursus Breweries CyberSecurity News & History

Ursus Breweries Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Ursus Breweries

Incidents vs Food and Beverage Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Ursus Breweries vs Food and Beverage Services Industry Avg (This Year)

Incident History - Ursus Breweries (X = Date, Y = Severity)

Ursus Breweries Subsidiaries

Ursus Breweries

Ursus Breweries Similar Companies

Kerry

GoTo Foods

Greggs

Frito-Lay

Gordon Food Service

Perfetti Van Melle

Suntory Holdings Limited

Nestlé

The HEINEKEN Company

Ursus Breweries CyberSecurity News

Ursus Breweries documents the history of beer in Romania through a podcast created by Damian Anfile and Gojira

Michal Mrowiec is named Ursus Breweries President

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Ursus Breweries CyberSecurity News & History

Ursus Breweries Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Ursus Breweries

Incidents vs Food and Beverage Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Ursus Breweries vs Food and Beverage Services Industry Avg (This Year)

Incident History - Ursus Breweries (X = Date, Y = Severity)

Ursus Breweries Subsidiaries

Ursus Breweries

Ursus Breweries Similar Companies

Kerry

GoTo Foods

Greggs

Frito-Lay

Gordon Food Service

Perfetti Van Melle

Suntory Holdings Limited

Nestlé

The HEINEKEN Company

Ursus Breweries CyberSecurity News

Ursus Breweries documents the history of beer in Romania through a podcast created by Damian Anfile and Gojira

Michal Mrowiec is named Ursus Breweries President

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo