What is the official website of VMware Telco Cloud ?

The official website of VMware Telco Cloud is https://telco.vmware.com/.

What is VMware Telco Cloud's cybersecurity risk score?

VMware Telco Cloud has an AI-generated cybersecurity risk score of 759 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has VMware Telco Cloud experienced?

According to Rankiteo, VMware Telco Cloud currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has VMware Telco Cloud been affected by any supply chain cyber incidents ?

According to Rankiteo, VMware Telco Cloud has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Vercel (Incident ID: VERVMWGOOMIC1781677737) PaperCut Software (Incident ID: VMWMICPAPIVA1775500095) Oracle (Incident ID: BROBECTHEORAABB1773750615) VMware (Incident ID: FEDVMW1772605503) Tecplix Technologies Private Limited (Incident ID: BAD1772389516) NA (Incident ID: VMWSON1768209752) Palo Alto Networks Unit 42 (Incident ID: UNIVMW1773865474) Citrix (Incident ID: CITVMW1776702564) Oracle (Incident ID: BRO3105131112625) VMware (Incident ID: VMW1770230091) VMware (Incident ID: VMWFED1769279335) VMware (Incident ID: BRO1769309760) Fortinet (Incident ID: CISSYMFBIFOR1768715192)

Does VMware Telco Cloud have SOC 2 Type 1 certification ?

According to Rankiteo, VMware Telco Cloud is not certified under SOC 2 Type 1.

Does VMware Telco Cloud have SOC 2 Type 2 certification ?

According to Rankiteo, VMware Telco Cloud does not hold a SOC 2 Type 2 certification.

Does VMware Telco Cloud comply with GDPR ?

According to Rankiteo, VMware Telco Cloud is not listed as GDPR compliant.

Does VMware Telco Cloud have PCI DSS certification ?

According to Rankiteo, VMware Telco Cloud does not currently maintain PCI DSS compliance.

Does VMware Telco Cloud comply with HIPAA ?

According to Rankiteo, VMware Telco Cloud is not compliant with HIPAA regulations.

Does VMware Telco Cloud have ISO 27001 certification ?

According to Rankiteo,VMware Telco Cloud is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does VMware Telco Cloud operate in ?

VMware Telco Cloud operates primarily in the Telecommunications industry.

How many employees does VMware Telco Cloud have ?

VMware Telco Cloud employs approximately None employees people worldwide.

Does VMware Telco Cloud own any subsidiaries ?

VMware Telco Cloud presently has no subsidiaries across any sectors.

How many LinkedIn followers does VMware Telco Cloud have ?

VMware Telco Cloud's official LinkedIn profile has approximately 21,282 followers.

What is the NAICS classification code for VMware Telco Cloud ?

VMware Telco Cloud is classified under the NAICS code 517, which corresponds to Telecommunications.

Does VMware Telco Cloud have a Crunchbase profile ?

No, VMware Telco Cloud does not have a profile on Crunchbase.

Does VMware Telco Cloud have a LinkedIn profile ?

Yes, VMware Telco Cloud maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/vmware-nfv.

How many cybersecurity incidents has VMware Telco Cloud experienced ?

As of June 21, 2026, Rankiteo reports that VMware Telco Cloud has experienced 32 cybersecurity incidents.

How many peer or competitor companies does VMware Telco Cloud have ?

VMware Telco Cloud has an estimated 10,202 peer or competitor companies worldwide.

What types of cybersecurity incidents has VMware Telco Cloud faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

VTC

Boost Score +25 with badge (5 left)

759

/1000

Fair

784

/1000

Fair

VMware Telco Cloud Vendor Cyber Rating & Cyber Score

vmware.com

Add Your Compliance Badge

Broadcom is continuously enhancing its telco cloud offerings across all areas of the telco network – including core, edge and RAN – to help customers achieve their long-term strategic 5G vision and immediate 4G business goals. The VMware Telco Cloud portfolio includes solutions from Infrastructure to Operations for Network Core, EDGE and RAN. Telco Cloud Operations, Telco Cloud Automation, Telco Cloud Infrastructure

VTC A.I CyberSecurity Scoring

Scoring History

VTC

VMware Telco Cloud CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

VMware

Vulnerability

100

6/2026

Vercel

VERVMWGOOMIC178...

VMware

Vulnerability

5/2026

VMW1778840944

VMware

Vulnerability

100

4/2026

PaperCut Softwa...

VMWMICPAPIVA177...

Broadcom

Vulnerability

3/2026

BRO1775111316

Broadcom

Cyber Attack

3/2026

Oracle

BROBECTHEORAABB...

VMware

Vulnerability

100

3/2026

VMware

FEDVMW177260550...

VMware

Cyber Attack

100

3/2026

Tecplix Technol...

BAD1772389516

VMware

Vulnerability

100

2/2026

VMW1770515769

VMware

Vulnerability

1/2026

VMWSON176820975...

Symantec

Ransomware

100

1/2026

SOPCROSYM177062...

VMware

Cyber Attack

100

12/2025

Palo Alto Netwo...

UNIVMW177386547...

VMware

Vulnerability

100

11/2025

Citrix

CITVMW177670256...

VMware Telco Cloud

Ransomware

100

7/2025

VMW410073025

Broadcom

Ransomware

100

6/2025

Oracle

BRO310513111262...

VMware Telco Cloud

Ransomware

100

5/2025

VMW222051225

VMware Telco Cloud

Ransomware

100

5/2025

BRO089300811212...

VMware Telco Cloud

Vulnerability

4/2025

VMW806040125

VMware Telco Cloud

Cyber Attack

100

3/2025

VMW113211109252...

VMware

Ransomware

100

3/2025

VMware

VMW1770230091

VMware

Breach

1/2025

CISVMWJUNCAN177...

VMware Telco Cloud

Vulnerability

10/2024

VMW300213010312...

VMware Telco Cloud

Ransomware

9/2024

BRO336253311172...

VMware Telco Cloud

Ransomware

100

7/2024

VMW000072224

VMware Telco Cloud

Vulnerability

6/2024

VMW289232810312...

VMware

Vulnerability

100

6/2024

VMware

VMWFED176927933...

Broadcom

Vulnerability

100

1/2024

VMware

BRO1769309760

VMware Telco Cloud

Vulnerability

6/2023

BRO459244509302...

Horizon

Ransomware

01/2022

VMW1659222

Symantec

Cyber Attack

6/2021

Fortinet

CISSYMFBIFOR176...

VMware Telco Cloud

Breach

2/2021

SYM1336271222

Broadcom

Vulnerability

100

1/2020

BROMIC7-ENGICIS...

VMware Telco Cloud

Vulnerability

06/2016

SYM44121823

Loading…

A.I.

VTC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for VTC

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for VMware Telco Cloud in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for VMware Telco Cloud in 2026.

Incident Types VTC vs Telecommunications Industry Avg (This Year)

No incidents recorded for VMware Telco Cloud in 2026.

Incident History - VTC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

VMware Telco Cloud Subsidiaries

VTC

Telecommunications

Website: https://telco.vmware.com/

Company Size: 10,001+ employees

VMwareSoftware Development

BroadcomSemiconductor Manufacturing

SymantecSoftware Development

Symantec Mobility SolutionsComputer and Network Security

OmnissaSoftware Development

Workspace ONESoftware Development

HorizonSoftware Development

Broadcom's ValueOps Value Stream ManagementSoftware Development

Broadcom SoftwareSoftware Development

Broadcom Mainframe SoftwareSoftware Development

Automation by BroadcomSoftware Development

Broadcom Wired ConnectivityComputer Networking

OmnissaSoftware Development

Broadcom Wi-FiWireless Services

Broadcom Software AcademySoftware Development

ArcotFinancial Services

Broadcom Software AIOpsSoftware Development

VMware CloudSoftware Development

VMware AriaSoftware Development

VCF LearningSoftware Development

Loading…

VMware Telco Cloud Similar Companies

Tata Communications

cb tatacommunications.com

Tata Communications is a digital ecosystem enabler that powers today’s fast-growing digital economy. We enable the digital transformation of enterprises globally, including 300 of the Fortune 500. We carry around 30% of the world’s internet routes and connects businesses to 60% of the world’s cloud giants. We have been a part of the rich heritage of the internet in India. Over the last 25 years, enterprise-enabled services have been essential to the adoption of digital services in the country. Connectivity is an essential fabric of sustenance for the economy. We are committed to enabling Industry leaders in this New World of Communications™, with our unique promise of delivering secure connected digital experiences. In 2020, we announced the launch of ‘Secure Connected Digital Experience’ (SCDx), a proposition intended to meet this growing, worldwide demand for new ways of operating, which includes far higher levels of working from home, rising security risks, a shift to digital commerce, and more contactless experiences. It will help companies currently relying on short-term fixes by providing holistic, secure, enterprise-level digital solutions that address current challenges and are fit for the long term. To know more, visit TataCommunications.com Tata Communications Limited is listed on the Bombay Stock Exchange and the National Stock Exchange of India and is present in over 200 countries and territories around the world. We are committed to being an equal opportunity workplace and to providing an inclusive environment to all employees. All qualified applicants will receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, or any other status protected by law. Tata Communications and its Recruitment Partners do not charge any fee or security deposit from the candidate for offering employment.

Telkomsel

telkomsel.com

Connecting Nation. Accelerating Indonesia's Future. As Indonesia's leading digital telecommunications company, Telkomsel is committed to building a connected, competitive, and future-ready society. For over 29 years, we've empowered individuals, homes, and businesses with innovative connectivity and digital solutions. With a nationwide network of over 271,000 BTS, we serve 159.4 million mobile users and 9.6 million fixed broadband (IndiHome B2C) customers. We continually expand our 4G coverage, advance 5G innovation, and deploy the latest fixed broadband technologies to enhance our customers' experiences. Beyond connectivity, Telkomsel plays a key role in driving Indonesia's digital transformation through services such as Digital Lifestyle, Advertising, Enterprise Solutions, and the Internet of Things (IoT). Guided by Environmental, Social, and Governance (ESG) principles, we are committed to creating a sustainable and inclusive digital ecosystem that benefits both people and the planet. Discover more at telkomsel.com or connect via the MyTelkomsel App, Facebook (Telkomsel), X (@telkomsel), and Instagram (@telkomsel).

vivo

vivo.com

vivo is a technology company that creates great products based on a design-driven value, with smart devices and intelligent services as its core. The company aims to build a bridge between humans and the digital world. Through unique creativity, vivo provides users with an increasingly convenient mobile and digital life. vivo has over 18,000 employees across the globe. While bringing together and developing the best local talents to deliver excellence, vivo is supported by a network of 10 R&D centers in Shenzhen, Dongguan, Nanjing, Beijing, Hangzhou, Shanghai, Xi'an, Taipei, Tokyo and San Diego, focusing on the development of state-of-the-art consumer technologies, including 5G, artificial intelligence, industrial design, imaging system and other up-and-coming technologies. vivo has also set up 7 production bases (including brand-authorized manufacturing centers), across China, South- and Southeast Asia, and more regions, with an annual production capacity of nearly 200 million smartphones. As of now, vivo has branched out its sales network across more than 60 countries and regions, and is winning more than 400 million users worldwide with its superior products and services. Following the company's core values, which include Benfen, design-driven value, user-orientation, continuous learning and team spirit. vivo has implemented a sustainable development strategy, with the vision of developing into a healthier, more sustainable world-class corporation. Official Site: www.vivo.com/en Facebook: @vivoGlobal Instagram: @vivo_global

EE

ee.co.uk

EE, part of BT Group, is the largest and most advanced mobile communications company in the UK, delivering mobile and fixed communications services to consumers. We run the UK's biggest and fastest mobile network, having pioneered the UK's first superfast 4G mobile service in October 2012 and was the first European operator to surpass 14 million 4G customers in December 2015. We have more than 550 shops across the UK and we’re dedicated to making EE an outstanding place to work for our 13,000 employees. Our 4G coverage reaches 80% of the UK geography and we have plans to extend 4G geographic coverage to 95% by 2020. We’ve received extensive independent recognition, including being ranked the UK's best overall network by RootMetrics®; Best Network at the 2015, 2016 and 2017 Mobile News Awards; Best Network at the Mobile Choice Consumer Awards 2016; Best Consumer Network at the 2015 & 2016 Mobile Industry Awards; as well as Fastest Network and Best Network Coverage at the 2017 uSwitch Mobile Awards.

Totalplay

cb totalplay.com

Somos una empresa orgullosamente mexicana, líder en tecnología, telecomunicaciones y entretenimiento. Estamos siempre a la vanguardia con el objetivo de llevar a nuestros clientes lo mejor en conectividad, ya sea para que estén cerca de los que más quieren ó puedan alcanzar el éxito profesional gracias a la velocidad que brinda la tecnología de fibra óptica. Nuestro impulso es el equipo que hemos formado, personas con talento, iniciativa, entusiastas y apasionados, que buscan siempre caminar unidos para llevar a más de 20 ciudades de la República Mexicana un servicio de excelencia. Queremos que nuestros clientes sean parte del camino al futuro y vivan al máximo la experiencia de la plataforma de conectividad y entretenimiento total.

Free

etre-free.fr

Trublion historique des Télécoms, Free reste un opérateur pas comme les autres. Nous continuons de nous distinguer de nos concurrents par nos produits, par notre politique tarifaire ou encore par le ton employé avec nos abonnés. Cette différence a aussi construit la grande entreprise que nous sommes devenus, qui réunit aujourd’hui plus de 11 500 collaborateurs. Elle a fait de nous un employeur… pas comme les autres.

Orange

orange.com

Orange is one of the world’s leading telecommunications operators with revenues of 40.3 billion euros in 2024 and 127,000 employees worldwide at 31 December 2024, including 71,000 employees in France. The Group has a total customer base of 291 million customers worldwide at 31 December 2024, including 253 million mobile customers and 22 million fixed broadband customers. The Group is present in 26 countries. Orange is also a leading provider of global IT and telecommunication services to multinational companies under the brand Orange Business. In February 2023, the Group presented its strategic plan « Lead the future », built on a new business model and guided by responsibility and efficiency. « Lead the future » capitalizes on network excellence to reinforce Orange's leadership in service quality.

Ericsson

ericsson.com

The future of mobile isn’t on the horizon, it’s happening now. At Ericsson, we’re building the foundation for an open network ecosystem where industries, developers, and enterprises thrive. The convergence of 5G, AI, cloud, and network APIs isn’t just a technological shift; it’s a transformation that is redefining industries and enhancing everyday life. Open, programmable networks are enabling real-time innovation and unlocking new business models across the globe. Imagine a world where developers can dynamically access network capabilities on demand, where enterprises don’t just use connectivity but shape it. This isn’t a distant vision, it’s the ecosystem we’re creating today. Collaboration fuels everything we do. By working across industries, we’re designing a future where connectivity isn’t just seamless. It’s intelligent, programmable, and transformative. The shift is happening. Are you part of it?

airtel

airtel.com

Airtel was founded to provide global connectivity and unlock endless opportunities. Our organization embodies a unique blend of energy, innovation, creativity, dedication, scale, and ownership, all aimed at being limitless. At Airtel, we strive to go beyond our duties to create impactful solutions for our consumers. Our team is highly skilled and constantly growing, actively developing infrastructure to introduce cutting-edge technologies like 5G, IoT, IQ, and Airtel Black. We have successfully launched 5G services in over 5,000 cities and towns nationwide, with 10 million unique customers on the 5G network nationally. Airtel Black is another convenient consumer service that provides combined billing for family and friends under a single bill. We also offer enterprise solutions, including national and international long-distance services for carriers. With a subscriber base exceeding 574 million as of 2023, we are committed to delivering effective products that contribute to the realization of a 'Digital India', enabling millions of individuals to connect and thrive for a brighter future. Our presence spans 7,915 census and 802,577 non-census towns and villages, covering almost 96% of the country's population with 388,726 Rkms of optical fiber and an extensive distribution network of 1.2 million outlets. We've also implemented conservation initiatives that have saved 14,676 MWh of electricity, 4412 tonnes of paper through our e-bill initiatives, and recycled 3330 tonnes of e-waste. At Airtel, we believe in taking early ownership, delivering quality, and experimenting with various career paths to boost our trajectories and gain valuable insights into the business, making us the best in the industry. We are committed to creating the ultimate experience for our consumers while maintaining an ecological balance in the world.

Loading…

NEWS

VMware Telco Cloud CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 05, 2026 08:00 AM

11 Best Stocks With Huge Upside Potential to Buy According to Reddit

Broadcom Inc. (NASDAQ:AVGO) is one of the best stocks with huge upside potential to buy according to Reddit. On March 2, RBC Capital cut the...

Read Article

March 05, 2026 05:40 AM

CISA Warns of Exploited VMware Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical vulnerability in Broadcom's VMware Aria...

Read Article

March 04, 2026 08:00 AM

Broadcom Inc. (AVGO) Strengthens Position Across Semiconductors and Enterprise Software

Broadcom Inc. (NASDAQ:AVGO) is one of the best blue chip stocks to buy for the long term. On March 2, at Mobile World Congress in Barcelona,...

Read Article

March 02, 2026 08:01 AM

Broadcom's VMware Telco Cloud 9 targets 40% savings and lower power use

Planned VMware Telco Cloud 9 adds private AI-as-a-Service, GPU virtualization and sovereign cloud tools, with Broadcom citing 40% TCO and...

Read Article

February 24, 2026 08:00 AM

Multiple VMware Aria Vulnerabilities Enable Remote Code Execution Attacks

These flaws affect key products like VMware Cloud Foundation and Telco Cloud platforms, urging organizations to apply patches immediately.

Read Article

February 04, 2026 08:00 AM

CISA: VMware ESXi flaw now exploited in ransomware attacks

CISA confirmed on Wednesday that ransomware gangs have begun exploiting a high-severity VMware ESXi sandbox escape vulnerability that was...

Read Article

January 23, 2026 08:00 AM

OECD Report Warns Of Telco Market Failure As Australia Faces Key Spectrum Decision

Australia's telecommunications sector is failing to deliver competitive pricing and quality service, according to a new report from the...

Read Article

October 31, 2025 07:00 AM

CISA adds VMware bug to KEV a year after first exploited

CISA updated its known exploited vulnerability catalogue on Thursday to include the VMware bug CVE-2025-41244, first exploited in October...

Read Article

October 28, 2025 07:00 AM

CMC Telecom wins 8 global cybersecurity awards, leads in AI-driven defense

CMC Telecom's sweeping recognition at the 2025 Cybersecurity Excellence Awards in the US, where it won eight international prizes,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-56355

SUMMARY

GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-56347

SUMMARY

AVideo TopMenu plugin through version 26.0 contains a stored cross-site scripting vulnerability in menu item rendering due to missing output encoding of icon classes, URLs, and text labels. Attackers can inject malicious JavaScript through unescaped menu item fields that execute for all site visitors, potentially stealing session cookies or performing unauthorized actions.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.8

REFERENCES

CVE-2026-56346

SUMMARY

AVideo through version 25.0 contains an authentication bypass vulnerability in the decryptMessage.json.php endpoint that allows unauthenticated users to decrypt PGP messages. Remote attackers can submit private keys, ciphertext, and passphrases to perform server-side decryption without credentials, exposing key material to logs and enabling resource exhaustion attacks.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-56345

SUMMARY

AVideo through 29.0 contains an authorization bypass vulnerability in the Meet plugin's uploadRecordedVideo.json.php endpoint that derives the target users_id from the uploaded filename without verification. An attacker with knowledge of the Meet shared secret can craft a malicious file upload with a filename containing an arbitrary users_id to invoke passwordless User->login() and establish an authenticated session as any user including admin. Attackers can obtain the Meet shared secret through path-traversal vulnerabilities or timing attacks against checkToken.json.php, then POST a crafted file to uploadRecordedVideo.json.php with a filename like '1-anything.mp4' to hijack admin sessions and gain full account takeover.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.2

REFERENCES

CVE-2026-56342

SUMMARY

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the statsURL parameter, which lacks isSSRFSafeURL() validation and accepts requests to private IP ranges and cloud metadata endpoints. Attackers can exploit this by crafting requests to internal services, cloud metadata endpoints like 169.254.169.254, and localhost to retrieve sensitive information including IAM credentials, internal service responses, and network configuration details.

Published

Date2026-06-20

Updated

Date2026-06-20

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…