What is the official website of Vi Customer Care ?

The official website of Vi Customer Care is https://www.myvi.in/.

What is Vi Customer Care's cybersecurity risk score?

Vi Customer Care has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Vi Customer Care experienced?

According to Rankiteo, Vi Customer Care currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Vi Customer Care been affected by any supply chain cyber incidents ?

According to Rankiteo, Vi Customer Care has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Vi Customer Care have SOC 2 Type 1 certification ?

According to Rankiteo, Vi Customer Care is not certified under SOC 2 Type 1.

Does Vi Customer Care have SOC 2 Type 2 certification ?

According to Rankiteo, Vi Customer Care does not hold a SOC 2 Type 2 certification.

Does Vi Customer Care comply with GDPR ?

According to Rankiteo, Vi Customer Care is not listed as GDPR compliant.

Does Vi Customer Care have PCI DSS certification ?

According to Rankiteo, Vi Customer Care does not currently maintain PCI DSS compliance.

Does Vi Customer Care comply with HIPAA ?

According to Rankiteo, Vi Customer Care is not compliant with HIPAA regulations.

Does Vi Customer Care have ISO 27001 certification ?

According to Rankiteo,Vi Customer Care is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Vi Customer Care operate in ?

Vi Customer Care operates primarily in the Telecommunications industry.

How many employees does Vi Customer Care have ?

Vi Customer Care employs approximately 37 people worldwide.

Does Vi Customer Care own any subsidiaries ?

Vi Customer Care presently has no subsidiaries across any sectors.

How many LinkedIn followers does Vi Customer Care have ?

Vi Customer Care's official LinkedIn profile has approximately 3,102 followers.

What is the NAICS classification code for Vi Customer Care ?

Vi Customer Care is classified under the NAICS code 517, which corresponds to Telecommunications.

Does Vi Customer Care have a Crunchbase profile ?

No, Vi Customer Care does not have a profile on Crunchbase.

Does Vi Customer Care have a LinkedIn profile ?

Yes, Vi Customer Care maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/vi-customer-care.

How many cybersecurity incidents has Vi Customer Care experienced ?

As of September 16, 2026, Rankiteo reports that Vi Customer Care has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Vi Customer Care have ?

Vi Customer Care has an estimated 10,345 peer or competitor companies worldwide.

What types of cybersecurity incidents has Vi Customer Care faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

VCC

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Vi Customer Care Vendor Cyber Rating & Cyber Score

myvi.in

Add Your Compliance Badge

Vodafone Idea Limited is an Aditya Birla Group and Vodafone Group partnership. It is India’s leading telecom service provider. The Company provides pan India Voice and Data services across 2G, 3G and 4G platform. With the large spectrum portfolio to support the growing demand for data and voice, the company is committed to deliver delightful customer experiences and contribute towards creating a truly ‘Digital India’ by enabling millions of citizens to connect and build a better tomorrow. The Company is developing infrastructure to introduce newer and smarter technologies, making both retail and enterprise customers future ready with innovative offerings, conveniently accessible through an ecosystem of digital channels as well as extensive

VCC

Vi Customer Care CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Vi Customer Care

Cyber Attack

100

10/2025

VOD287552810282...

Loading…

A.I.

VCC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for VCC

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for Vi Customer Care in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Vi Customer Care in 2026.

Incident Types VCC vs Telecommunications Industry Avg (This Year)

No incidents recorded for Vi Customer Care in 2026.

Incident History - VCC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Vi Customer Care Subsidiaries

VCC

Telecommunications

Website: https://www.myvi.in/

Company Size: 37

Vodafone Idea LimitedTelecommunications

Idea Cellular LtdTelecommunications

Vi Business IndiaTelecommunications

Vi AdsTelecommunications

Loading…

Vi Customer Care Similar Companies

Optus

optus.com.au

Optus is an Australian telecommunications company, delivering more than 11 million services to our customers every day across mobile, broadband and digital solutions. Message our dedicated Social Media Care team at help.optus.com.au/contactus for 24/7 assistance with your account. You can also visit our Contact Us page for other ways to get in touch: optus.com.au/contactus. We monitor public social media mentions of Optus to support customers. Any information you share is handled under our Privacy Policy: optus.com.au/privacy.

e& Egypt

eand.com.eg

Building on 17 years of technology excellence in the Egyptian market, and in our relentless quest to bring you more and better services, etisalat by e& in Egypt has now evolved into the digital telco of the future. Covering and serving 99% of the inhabited areas in Egypt, our mission as etisalat by e& in Egypt is to continuously grow and transform to empower our customers by enhancing their digital experience and ensuring operation agility. etisalat by e& in Egypt offers digital experiences that cater to your ever-changing lifestyle and ever-expanding demands – covering not only telecom, but a wide collection of services that suit your various needs. We will continue to be your trusted companion and consultant, enabling connectivity and everything beyond, accelerating the digital world and pioneering future-forward spaces. Together, as we embark on this new era of etisalat by e& in Egypt, we make possible countless connections across continents and create the limitless possibilities of tomorrow, today. etisalat by e& in Egypt #MakePossible بعد ١٥ سنة من تفوقنا التكنولوجي في مصر، ولإننا حابين نقدم خدمات كتيرة عالية الجودة لكل عملائنا، جه الوقت إللي نطور في “اتصالات من &e في مصر” وندخل المستقبل الرقمي من أوسع الأبواب! شبكتنا النهاردة بتغطي ۹۹% من مناطق مصر، وبنطور يوم ورا يوم عشان نوصل رسالتنا بالنمو والتحول والتفوق، كل دا عشان نوفر لعملائنا أفضل تجربة رقمية، ونسرع العملية التشغيلية. النهاردة في “اتصالات من &e في مصر” إحنا جاهزين نقدملكم خدمات رقمية جديدة تسهلكو حياتكم اليومية، ومع خدمة المكالمات التقليدية، حنوفرلكم خدمات تانية كتير! لإننا بجد شريكم الموثوق، إللي بيخليكم على تواصل، وبياخدكم للمستقبل عبر تسريع الاقتصاد الرقمي والريادة. مع “اتصالات من &e في مصر” حنبدأ مع بعض عصر جديد، ونقربكم من بعض عبر القارات، ومع بعض حنكتشف إمكانيات بكرة اللامحدودة من النهاردة. “اتصالات من &e في مصر” ... معانا #makepossible

Bouygues Telecom

cb bouyguestelecom.fr

🤝Ce qui fait notre singularité ? Chez Bouygues Telecom, nous croyons que les relations humaines sont un besoin vital. La qualité de nos relations avec notre famille, nos amis, ceux qui nous entourent est déterminante pour notre bien-être, notre santé et même notre espérance de vie. Ce sont ces relations qui nous épanouissent, nous font aller de l’avant et nous permettent de vivre plus heureux, plus longtemps. C’est pourquoi depuis notre création en 1996, les équipes Bouygues Telecom mettent toute leur énergie pour que la technologie soit avant tout au service de vos relations. Nous souhaitons agir pour faire grandir les relations humaines. En permettant à tous sans exception de garder le contact avec ses proches et la société. En devenant une source d’inspiration qui donne à chacun l’envie d’enrichir et d’améliorer la qualité de ses relations. Nos 10 500 collaborateurs relèvent tous ensemble au quotidien ce même défi : être engagés pour un numérique qui nous réunit. 💼 Nos métiers ? Quelles que soient vos aspirations il y aura forcément un métier pour vous chez Bouygues Telecom ! Plus de 150 métiers interagissent tous les jours : Télécom / Réseau, IT, Big Data, Innovation, Marketing, Commerce, Finance, Achats, Juridique… Nous avons besoin de tous les talents pour accomplir notre mission; car c’est cette richesse de profils et de compétences qui fait la qualité de nos services et contribue à la satisfaction de nos clients. 👉Alors si... Vous avez envie de mettre votre talent au service du développement numérique pour tous et de faire grandir les relations humaines : vous frappez à la bonne porte. Vous rêvez d’une entreprise qui donne le meilleur d’elle-même pour que vous puissiez donner le meilleur à votre tour : alors bienvenue ! #OnEstFaitPourEtreEnsemble

Millicom (Tigo)

cb millicom.com

Millicom (NASDAQ U.S.: TIGO, Nasdaq) is a leading provider of fixed and mobile telecommunications services in Latin America. Through our TIGO® and Tigo Business® brands, we provide a wide range of digital services and products, including TIGO Money for mobile financial services, TIGO Sports for local entertainment, TIGO ONEtv for pay TV, high-speed data, voice, and business-to-business solutions such as cloud and security. Millicom (NASDAQ U.S.: TIGO) is a leading provider of fixed and mobile telecommunications services in Latin America. Through our TIGO® and Tigo Business® brands, we provide a wide range of digital services and products, including TIGO Money for mobile financial services, TIGO Sports for local entertainment, TIGO ONEtv for pay TV, high-speed data, voice, and business-to-business solutions such as cloud and security. As of March 31, 2025, Millicom, including its Honduras Joint Venture, employed approximately 14,000 people, and provided mobile and fiber-cable services through its digital highways to more than 46 million customers, with a fiber-cable footprint over 14 million homes passed. Founded in 1990, Millicom International Cellular S.A. is headquartered in Luxembourg. Join us: www.millicom.com Twitter: @Millicom. Instagram: @millicom. Facebook: @millicom. YouTube: Millicom International. 148-150, Boulevard de la Pétrusse L-2330, Luxembourg

Tata Communications

cb tatacommunications.com

Tata Communications is a digital ecosystem enabler that powers today’s fast-growing digital economy. We enable the digital transformation of enterprises globally, including 300 of the Fortune 500. We carry around 30% of the world’s internet routes and connects businesses to 60% of the world’s cloud giants. We have been a part of the rich heritage of the internet in India. Over the last 25 years, enterprise-enabled services have been essential to the adoption of digital services in the country. Connectivity is an essential fabric of sustenance for the economy. We are committed to enabling Industry leaders in this New World of Communications™, with our unique promise of delivering secure connected digital experiences. In 2020, we announced the launch of ‘Secure Connected Digital Experience’ (SCDx), a proposition intended to meet this growing, worldwide demand for new ways of operating, which includes far higher levels of working from home, rising security risks, a shift to digital commerce, and more contactless experiences. It will help companies currently relying on short-term fixes by providing holistic, secure, enterprise-level digital solutions that address current challenges and are fit for the long term. To know more, visit TataCommunications.com Tata Communications Limited is listed on the Bombay Stock Exchange and the National Stock Exchange of India and is present in over 200 countries and territories around the world. We are committed to being an equal opportunity workplace and to providing an inclusive environment to all employees. All qualified applicants will receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, or any other status protected by law. Tata Communications and its Recruitment Partners do not charge any fee or security deposit from the candidate for offering employment.

yes

yes.co.il

תכירו את השחקנים הראשיים שלנו: העובדות והעובדים. אנחנו לא עובדים עם תסריט קבוע, חושבים מחוץ לקופסא, ומייצרים ז'אנר משלנו. כש-יס קמה, בשנת 1998, הבאנו את בשורת הלווין אל עולם שידורי הטלוויזיה והיינו הראשונים להציע שידורים דיגיטליים ושירותי טלוויזיה אינטראקטיביים - כשבחירת התכנים היא בידיים של הלקוח, מה שהגדיר מחדש את ענף שידורי הטלוויזיה בישראל. את החדשנות הזאת רואים ברזולוציית HD בכל הצוותים והמחלקות שלנו - מהתוכן שבוחר את התכנים, דרך הטכנאים שמתקינים את התשתית ועד חטיבת השירות שזמינה ללקוחות שלנו עם כל צורך שיצוץ. בשיתוף פעולה שחוצה צוותים ומחלקות, השתמשנו מהרגע הראשון בטכנולוגיות החדשניות ביותר ועליהן הלבשנו את מיטב התכנים. חתמנו על חוזי רכישה עם אולפני הסרטים והמפיצים המובילים בעולם כדי לדאוג למבחר הגדול ביותר של סרטים חדשים באיכות הצפייה החדה ביותר שנראתה עד היום. ואנחנו משתפים פעולה עם ענקיות הסטרימינג הבינלאומיות: דיסני פלוס, דיסקברי פלוס ונטפליקס וכל זה מתאפשר בזכות גיוס הטובים ביותר בעולמות הבידור, הטכנולוגיה והתמיכה תוך מתן דגש על שירות לקוחות שדוגל בהקשבה ובשקיפות. אפילו מכרנו לאחרונה כמה הפקות מקור מובילות בחו"ל. ביניהן "פאודה", עליה נכתב בניו יורק טיימס שהיא אחת הסדרות הבינלאומיות הטובות ביותר לשנת 2017, כמו גם "כבודו" ו-"שטיסל", שנמכרו ל-CBS. ו"מלכת היופי של ירושלים" שנמכרה ל-נטפליקס. לא פלא שכ- 580 אלף משפחות בישראל וכ- 1000 עובדים כבר אמרו לנו כן

Telkomsel

telkomsel.com

Connecting Nation. Accelerating Indonesia's Future. As Indonesia's leading digital telecommunications company, Telkomsel is committed to building a connected, competitive, and future-ready society. For over 29 years, we've empowered individuals, homes, and businesses with innovative connectivity and digital solutions. With a nationwide network of over 271,000 BTS, we serve 159.4 million mobile users and 9.6 million fixed broadband (IndiHome B2C) customers. We continually expand our 4G coverage, advance 5G innovation, and deploy the latest fixed broadband technologies to enhance our customers' experiences. Beyond connectivity, Telkomsel plays a key role in driving Indonesia's digital transformation through services such as Digital Lifestyle, Advertising, Enterprise Solutions, and the Internet of Things (IoT). Guided by Environmental, Social, and Governance (ESG) principles, we are committed to creating a sustainable and inclusive digital ecosystem that benefits both people and the planet. Discover more at telkomsel.com or connect via the MyTelkomsel App, Facebook (Telkomsel), X (@telkomsel), and Instagram (@telkomsel).

Totalplay

cb totalplay.com

Somos una empresa orgullosamente mexicana, líder en tecnología, telecomunicaciones y entretenimiento. Estamos siempre a la vanguardia con el objetivo de llevar a nuestros clientes lo mejor en conectividad, ya sea para que estén cerca de los que más quieren ó puedan alcanzar el éxito profesional gracias a la velocidad que brinda la tecnología de fibra óptica. Nuestro impulso es el equipo que hemos formado, personas con talento, iniciativa, entusiastas y apasionados, que buscan siempre caminar unidos para llevar a más de 20 ciudades de la República Mexicana un servicio de excelencia. Queremos que nuestros clientes sean parte del camino al futuro y vivan al máximo la experiencia de la plataforma de conectividad y entretenimiento total.

MTS Group

mts.ru

Mobile TeleSystems OJSC ("MTS") is the leading telecommunications group in Russia, Eastern Europe and Central Asia, offering mobile and fixed voice, broadband, pay TV as well as content and entertainment services in one of the world's fastest growing regions. Including its subsidiaries, as of December 31, 2010, the Group serviced over 108.1 million mobile subscribers in Russia, Ukraine, Uzbekistan, Turkmenistan, Armenia and Belarus, a region that boasts a total population of more than 230 million. The Group’s fixed business, as of December 31, 2010, had a total of 9.9 million households passed, 1.8 million broadband Internet and 2.6 million pay-TV subscribers. MTS has been listed on the New York Stock Exchange since July 2000 and trades under the ticker MBT. The Company’s shares have been listed locally on Moscow Interbank Currency Exchange (MICEX) since November 2003 under the symbol MTSI. The free float of the Company’s shares is approximately 49.2%. MTS is 50.8% majority-owned by Sistema, the largest public diversified financial corporation in Russia and the CIS. In 2010, MTS' revenues reached $11.3 billion. According to GSM Association Wireless Intelligence Information Service, MTS ranks as the 2nd largest operator in Europe by proportionate subscriptions at the end of 2010..

Loading…

NEWS

Vi Customer Care CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 19, 2025 10:19 PM

6th Annual TribalHub Cybersecurity Summit

The 6th Annual TribalHub Cybersecurity Summit has expanded to include a non-technical Executive Responsibility track, designed for leaders across tribal…

Read Article

November 20, 2025 08:00 AM

Kyndryl Extends Partnership with Vodafone Idea Limited to Deliver Automated IT Operations and Delivery Transformation

PRNewswire/ -- Kyndryl (NYSE: KD), a leading provider of mission-critical enterprise technology services, today announced a three-year...

Read Article

November 06, 2025 10:00 PM

Grand Theft Auto VI Delayed Again to November 2026 to Add More 'Polish'

First, the much-anticipated game was set to debut in the fall of 2025. Then it got moved to May 2026, and now it's not coming for another year.

Read Article

October 09, 2025 07:00 AM

Sixth Straight Year: Akamai Named a Customers' Choice in 2025 Gartner® Peer Insights™ "Voice of the Customer" for Cloud WAAP

PRNewswire/ -- Akamai Technologies (NASDAQ: AKAM), the cybersecurity and cloud computing company that powers and protects business online,...

Read Article

June 18, 2025 07:00 AM

FIG Paper (No. 46 – Series 3): Contracting Considerations for Financial Institutions

Introduction: Technology has fundamentally transformed the financial services industry, with many contemporary financial institutions (“FI”)...

Read Article

June 02, 2025 07:00 AM

Vi Q4 loss narrows 6.62%, ARPU ₹164; board approves ₹20,000cr fundraise

Vodafone Idea reported a net loss of Rs 7,166 crore, narrowing 6.62 per cent in the fourth quarter (January–March) of FY25 from Rs 7,674...

Read Article

April 28, 2025 07:00 AM

JFL Hospital Becomes Latest Government Entity Hit by Cyberattack Following V.I. Lottery Ransomware Incident

Juan F. Luis Hospital reports cybersecurity breach, launches immediate investigation and mitigation measures; confirms clinical and outpatient services remain...

Read Article

February 28, 2025 08:00 AM

Vi’s 5G live in Mumbai, offers unlimited data during trial phase

Reports indicated positive developments for Vi users, as the company has initiated 5G trials in Mumbai, providing unlimited data to select customers.

Read Article

February 26, 2025 08:00 AM

STMicroelectronics releases innovative satellite navigation receiver to democratize precise positioning for automotive and industrial applications

STMicroelectronics (NYSE: STM), a global semiconductor leader serving customers across the spectrum of electronics applications,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-91201

SUMMARY

DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to disconnect victims' cloud storage connectors.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.8

REFERENCES

CVE-2026-91200

SUMMARY

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the developer workstation, enabling code execution.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-91199

SUMMARY

Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied URLs without validating the scheme, host, or resolved address. Authenticated attackers can make the backend issue requests to loopback, private, and link-local addresses including cloud metadata services to read page titles and descriptions of internal resources.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5)

cvss3

Base Score: 5.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.1

REFERENCES

CVE-2026-91198

SUMMARY

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text, schema, table names, filter values and datasource identifiers.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-91197

SUMMARY

Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml() that fails to disable external entity resolution when parsing deployed BPMN resources. Attackers with process deployment privileges can embed DOCTYPE declarations with external entities in BPMN files to read arbitrary local files or trigger requests to internal network endpoints when diagram layout is computed.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Vi Customer Care Vendor Cyber Rating & Cyber Score

VCC A.I CyberSecurity Scoring

Vi Customer Care CyberSecurity News & History

VCC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for VCC

Incidents vs Telecommunications Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types VCC vs Telecommunications Industry Avg (This Year)

Incident History - VCC (X = Date, Y = Severity)

Vi Customer Care Subsidiaries

VCC

Vi Customer Care Similar Companies

Optus

e& Egypt

Bouygues Telecom

Millicom (Tigo)

Tata Communications

yes

Telkomsel

Totalplay

MTS Group

Vi Customer Care CyberSecurity News

6th Annual TribalHub Cybersecurity Summit

Kyndryl Extends Partnership with Vodafone Idea Limited to Deliver Automated IT Operations and Delivery Transformation

Grand Theft Auto VI Delayed Again to November 2026 to Add More 'Polish'

Sixth Straight Year: Akamai Named a Customers' Choice in 2025 Gartner® Peer Insights™ "Voice of the Customer" for Cloud WAAP

FIG Paper (No. 46 – Series 3): Contracting Considerations for Financial Institutions

Vi Q4 loss narrows 6.62%, ARPU ₹164; board approves ₹20,000cr fundraise

JFL Hospital Becomes Latest Government Entity Hit by Cyberattack Following V.I. Lottery Ransomware Incident

Vi’s 5G live in Mumbai, offers unlimited data during trial phase

STMicroelectronics releases innovative satellite navigation receiver to democratize precise positioning for automotive and industrial applications

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Vi Customer Care CyberSecurity News & History

VCC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for VCC

Incidents vs Telecommunications Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types VCC vs Telecommunications Industry Avg (This Year)

Incident History - VCC (X = Date, Y = Severity)

Vi Customer Care Subsidiaries

VCC

Vi Customer Care Similar Companies

Optus

e& Egypt

Bouygues Telecom

Millicom (Tigo)

Tata Communications

yes

Telkomsel

Totalplay

MTS Group

Vi Customer Care CyberSecurity News

6th Annual TribalHub Cybersecurity Summit

Kyndryl Extends Partnership with Vodafone Idea Limited to Deliver Automated IT Operations and Delivery Transformation

Grand Theft Auto VI Delayed Again to November 2026 to Add More 'Polish'

Sixth Straight Year: Akamai Named a Customers' Choice in 2025 Gartner® Peer Insights™ "Voice of the Customer" for Cloud WAAP

FIG Paper (No. 46 – Series 3): Contracting Considerations for Financial Institutions

Vi Q4 loss narrows 6.62%, ARPU ₹164; board approves ₹20,000cr fundraise

JFL Hospital Becomes Latest Government Entity Hit by Cyberattack Following V.I. Lottery Ransomware Incident

Vi’s 5G live in Mumbai, offers unlimited data during trial phase

STMicroelectronics releases innovative satellite navigation receiver to democratize precise positioning for automotive and industrial applications

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo