What is the official website of VMware Telco Cloud ?

The official website of VMware Telco Cloud is https://telco.vmware.com/.

What is VMware Telco Cloud's cybersecurity risk score?

VMware Telco Cloud has an AI-generated cybersecurity risk score of 759 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has VMware Telco Cloud experienced?

According to Rankiteo, VMware Telco Cloud currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has VMware Telco Cloud been affected by any supply chain cyber incidents ?

According to Rankiteo, VMware Telco Cloud has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: OpenAI (Incident ID: BROOPECHECISOPEVULCTI1785407853) PaperCut Software (Incident ID: VMWMICPAPIVA1775500095) Oracle (Incident ID: BROBECTHEORAABB1773750615) VMware (Incident ID: FEDVMW1772605503) Tecplix Technologies Private Limited (Incident ID: BAD1772389516) NA (Incident ID: VMWSON1768209752) Klue (Incident ID: GOOKLUVMW1782304423) Palo Alto Networks Unit 42 (Incident ID: UNIVMW1773865474) Citrix (Incident ID: CITVMW1776702564) Oracle (Incident ID: BRO3105131112625) Arista Networks (Incident ID: VMWARIBRO1785291907) VMware (Incident ID: VMW1770230091) VMware (Incident ID: VMWFED1769279335) VMware (Incident ID: BRO1769309760) Fortinet (Incident ID: CISSYMFBIFOR1768715192)

Does VMware Telco Cloud have SOC 2 Type 1 certification ?

According to Rankiteo, VMware Telco Cloud is not certified under SOC 2 Type 1.

Does VMware Telco Cloud have SOC 2 Type 2 certification ?

According to Rankiteo, VMware Telco Cloud does not hold a SOC 2 Type 2 certification.

Does VMware Telco Cloud comply with GDPR ?

According to Rankiteo, VMware Telco Cloud is not listed as GDPR compliant.

Does VMware Telco Cloud have PCI DSS certification ?

According to Rankiteo, VMware Telco Cloud does not currently maintain PCI DSS compliance.

Does VMware Telco Cloud comply with HIPAA ?

According to Rankiteo, VMware Telco Cloud is not compliant with HIPAA regulations.

Does VMware Telco Cloud have ISO 27001 certification ?

According to Rankiteo,VMware Telco Cloud is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does VMware Telco Cloud operate in ?

VMware Telco Cloud operates primarily in the Telecommunications industry.

How many employees does VMware Telco Cloud have ?

VMware Telco Cloud employs approximately None employees people worldwide.

Does VMware Telco Cloud own any subsidiaries ?

VMware Telco Cloud presently has no subsidiaries across any sectors.

How many LinkedIn followers does VMware Telco Cloud have ?

VMware Telco Cloud's official LinkedIn profile has approximately 21,282 followers.

What is the NAICS classification code for VMware Telco Cloud ?

VMware Telco Cloud is classified under the NAICS code 517, which corresponds to Telecommunications.

Does VMware Telco Cloud have a Crunchbase profile ?

No, VMware Telco Cloud does not have a profile on Crunchbase.

Does VMware Telco Cloud have a LinkedIn profile ?

Yes, VMware Telco Cloud maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/vmware-nfv.

How many cybersecurity incidents has VMware Telco Cloud experienced ?

As of August 16, 2026, Rankiteo reports that VMware Telco Cloud has experienced 36 cybersecurity incidents.

How many peer or competitor companies does VMware Telco Cloud have ?

VMware Telco Cloud has an estimated 10,288 peer or competitor companies worldwide.

What types of cybersecurity incidents has VMware Telco Cloud faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

VTC

Boost Score +25 with badge (5 left)

759

/1000

Fair

784

/1000

Fair

VMware Telco Cloud Vendor Cyber Rating & Cyber Score

vmware.com

Add Your Compliance Badge

Broadcom is continuously enhancing its telco cloud offerings across all areas of the telco network – including core, edge and RAN – to help customers achieve their long-term strategic 5G vision and immediate 4G business goals. The VMware Telco Cloud portfolio includes solutions from Infrastructure to Operations for Network Core, EDGE and RAN. Telco Cloud Operations, Telco Cloud Automation, Telco Cloud Infrastructure

VTC A.I CyberSecurity Scoring

Scoring History

VTC

VMware Telco Cloud CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

VMware

Vulnerability

8/2026

VMW1786731826

Broadcom

Vulnerability

100

7/2026

OpenAI

BROOPECHECISOPE...

VMware

Vulnerability

5/2026

VMW1778840944

Symantec

Ransomware

100

5/2026

SYM1783607031

VMware

Vulnerability

100

4/2026

PaperCut Softwa...

VMWMICPAPIVA177...

Broadcom

Vulnerability

3/2026

BRO1775111316

Broadcom

Cyber Attack

3/2026

Oracle

BROBECTHEORAABB...

VMware

Vulnerability

100

3/2026

VMware

FEDVMW177260550...

VMware

Cyber Attack

100

3/2026

Tecplix Technol...

BAD1772389516

VMware

Vulnerability

100

2/2026

VMW1770515769

VMware

Vulnerability

1/2026

VMWSON176820975...

Symantec

Ransomware

100

1/2026

SOPCROSYM177062...

VMware

Breach

100

1/2026

Klue

GOOKLUVMW178230...

VMware

Cyber Attack

100

12/2025

Palo Alto Netwo...

UNIVMW177386547...

VMware

Vulnerability

100

11/2025

Citrix

CITVMW177670256...

VMware Telco Cloud

Ransomware

100

7/2025

VMW410073025

Broadcom

Ransomware

100

6/2025

Oracle

BRO310513111262...

VMware Telco Cloud

Ransomware

100

5/2025

VMW222051225

VMware Telco Cloud

Ransomware

100

5/2025

BRO089300811212...

VMware

Vulnerability

100

5/2025

Arista Networks

VMWARIBRO178529...

VMware Telco Cloud

Vulnerability

4/2025

VMW806040125

VMware Telco Cloud

Cyber Attack

100

3/2025

VMW113211109252...

VMware

Ransomware

100

3/2025

VMware

VMW1770230091

VMware

Breach

1/2025

CISVMWJUNCAN177...

VMware Telco Cloud

Vulnerability

10/2024

VMW300213010312...

VMware Telco Cloud

Ransomware

9/2024

BRO336253311172...

VMware Telco Cloud

Ransomware

100

7/2024

VMW000072224

VMware Telco Cloud

Vulnerability

6/2024

VMW289232810312...

VMware

Vulnerability

100

6/2024

VMware

VMWFED176927933...

Broadcom

Vulnerability

100

1/2024

VMware

BRO1769309760

VMware Telco Cloud

Vulnerability

6/2023

BRO459244509302...

Horizon

Ransomware

01/2022

VMW1659222

Symantec

Cyber Attack

6/2021

Fortinet

CISSYMFBIFOR176...

VMware Telco Cloud

Breach

2/2021

SYM1336271222

Broadcom

Vulnerability

100

1/2020

BROMIC7-ENGICIS...

VMware Telco Cloud

Vulnerability

06/2016

SYM44121823

Loading…

A.I.

VTC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for VTC

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for VMware Telco Cloud in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for VMware Telco Cloud in 2026.

Incident Types VTC vs Telecommunications Industry Avg (This Year)

No incidents recorded for VMware Telco Cloud in 2026.

Incident History - VTC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

VMware Telco Cloud Subsidiaries

VTC

Telecommunications

Website: https://telco.vmware.com/

Company Size: 10,001+ employees

VMwareSoftware Development

BroadcomSemiconductor Manufacturing

SymantecSoftware Development

Symantec Mobility SolutionsComputer and Network Security

OmnissaSoftware Development

Workspace ONESoftware Development

HorizonSoftware Development

Broadcom's ValueOps Value Stream ManagementSoftware Development

Broadcom SoftwareSoftware Development

Broadcom Mainframe SoftwareSoftware Development

Automation by BroadcomSoftware Development

Broadcom Wired ConnectivityComputer Networking

OmnissaSoftware Development

Broadcom Wi-FiWireless Services

Broadcom Software AcademySoftware Development

ArcotFinancial Services

Broadcom Software AIOpsSoftware Development

VMware CloudSoftware Development

VMware AriaSoftware Development

VCF LearningSoftware Development

Loading…

VMware Telco Cloud Similar Companies

Cox Communications

cb cox.com

Cox Communications is committed to creating more moments of real human connection. We bring people closer to family and friends through technology that’s inspired by a culture that puts people first, and we’re always working to improve life in the communities we serve. Our world-class broadband applications and services are helping create smart homes and smart cities that will bring more comfort, convenience, security, entertainment and connectivity to the lives of the people we serve. Our company is full of dreamers and doers; people who make plans and who make things happen. And, of course, people who have fun doing it. In short, people like you. Join the Cox team and make your mark!

TELUS

telus.com

At TELUS, our purpose-driven team works together every day to innovate and do good. From providing technology solutions that make our lives safer and easier, to supporting those who need it most, our inclusive, spirited and giving people are passionate about empowering our customers, communities and each other to thrive in our digital world. A company that helps you be your best self at home and at work: Find a place where you truly belong, your opinions are valued and you can be your best self. A career that ignites your full potential: Get the guidance and support you need to explore your interests, build your skills and get where you want to go. A culture that goes beyond the expected to strengthen communities and the planet: Seize the opportunity to make a difference in our communities and do good for our planet as part of our purpose-driven team. An innovative team committed to solving complex, real world problems: Join a digitally-enabled workforce that’s pushing the boundaries to create sustainable change. We're always building Canada, join us at www.telus.com/careers

Motorola Solutions

cb motorolasolutions.com

About Motorola Solutions | Solving for safer Safety and security are at the heart of everything we do at Motorola Solutions. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Learn more about our commitment to innovating for a safer future for us all at www.motorolasolutions.com.

yes

yes.co.il

תכירו את השחקנים הראשיים שלנו: העובדות והעובדים. אנחנו לא עובדים עם תסריט קבוע, חושבים מחוץ לקופסא, ומייצרים ז'אנר משלנו. כש-יס קמה, בשנת 1998, הבאנו את בשורת הלווין אל עולם שידורי הטלוויזיה והיינו הראשונים להציע שידורים דיגיטליים ושירותי טלוויזיה אינטראקטיביים - כשבחירת התכנים היא בידיים של הלקוח, מה שהגדיר מחדש את ענף שידורי הטלוויזיה בישראל. את החדשנות הזאת רואים ברזולוציית HD בכל הצוותים והמחלקות שלנו - מהתוכן שבוחר את התכנים, דרך הטכנאים שמתקינים את התשתית ועד חטיבת השירות שזמינה ללקוחות שלנו עם כל צורך שיצוץ. בשיתוף פעולה שחוצה צוותים ומחלקות, השתמשנו מהרגע הראשון בטכנולוגיות החדשניות ביותר ועליהן הלבשנו את מיטב התכנים. חתמנו על חוזי רכישה עם אולפני הסרטים והמפיצים המובילים בעולם כדי לדאוג למבחר הגדול ביותר של סרטים חדשים באיכות הצפייה החדה ביותר שנראתה עד היום. ואנחנו משתפים פעולה עם ענקיות הסטרימינג הבינלאומיות: דיסני פלוס, דיסקברי פלוס ונטפליקס וכל זה מתאפשר בזכות גיוס הטובים ביותר בעולמות הבידור, הטכנולוגיה והתמיכה תוך מתן דגש על שירות לקוחות שדוגל בהקשבה ובשקיפות. אפילו מכרנו לאחרונה כמה הפקות מקור מובילות בחו"ל. ביניהן "פאודה", עליה נכתב בניו יורק טיימס שהיא אחת הסדרות הבינלאומיות הטובות ביותר לשנת 2017, כמו גם "כבודו" ו-"שטיסל", שנמכרו ל-CBS. ו"מלכת היופי של ירושלים" שנמכרה ל-נטפליקס. לא פלא שכ- 580 אלף משפחות בישראל וכ- 1000 עובדים כבר אמרו לנו כן

Lumen Technologies

lumen.com

Lumen connects the world. We digitally connect people, data and applications – quickly, securely and effortlessly. Everything we do at Lumen takes advantage of our network strength. From metro connectivity to long-haul data transport to our edge cloud, security, and managed service capabilities, we meet our customers’ needs today and as they build for tomorrow.

Telefónica

cb telefonica.com

Telefónica is today one of the largest telecommunications companies in the world in terms of market capitalisation and number of customers. We have the best infrastructure, as well as an innovative range of digital and data services; therefore, we are favorably positioned to meet the needs of our customers and capture growth in new businesses. We are sensitive to the new challenges demanded by society today and, therefore, we provide the means to facilitate communication between people, providing them with the most secure and cutting-edge technology. Our vision is focused on technology making people's lives easier and our aim is to promote progress in that direction, so that technology can make a positive impact on the world both socially and environmentally, and, ultimately, so as to provide value and trust in an ever-changing and accelerating world. Digital life is life itself, and technology is an essential part of being human. We want to create, protect and boost connections in life so people can choose a world of unlimited possibilities. We want to be a company in which our clients, employees, suppliers, shareholders, and society in general can trust. In order to achieve this, we communicate our strategy, business model and most relevant data to our stakeholders in a clear and transparent manner, so as to show the company's ability to create value.

Free

etre-free.fr

Trublion historique des Télécoms, Free reste un opérateur pas comme les autres. Nous continuons de nous distinguer de nos concurrents par nos produits, par notre politique tarifaire ou encore par le ton employé avec nos abonnés. Cette différence a aussi construit la grande entreprise que nous sommes devenus, qui réunit aujourd’hui plus de 11 500 collaborateurs. Elle a fait de nous un employeur… pas comme les autres.

T-Mobile

t-mobile.com

As the supercharged Un-carrier, T-Mobile US, Inc. (NASDAQ: TMUS) is powered by an award-winning 5G network that connects more people, in more places, than ever before. With T-Mobile’s unique value proposition of best network, best value, and best experiences, the Un-carrier is redefining connectivity and fueling competition while continuing to drive the next wave of innovation in wireless and beyond. Headquartered in Bellevue, Wash., T-Mobile provides services through its subsidiaries and operates its flagship brands, T-Mobile, Metro by T-Mobile, and Mint Mobile.

Idea Cellular Ltd

cb ideacellular.com

Idea Cellular is an Aditya Birla Group Company, India's first truly multinational corporation. Idea is a pan-India integrated GSM operator offering 2G and 3G services, and has its own NLD and ILD operations, and ISP license. With revenue in excess of $4 billion; revenue market share of 18%; and subscriber base of over 150 million, Idea is India’s 3rd largest mobile operator. Idea ranks among the Top 10 country operators in the world with a traffic of over 1.5 billion minutes a day. Idea’s robust pan-India coverage is built on a network of over 100,000 2G and 3G cell sites, spread across over 55,000 towns in India. Using the latest in technology, Idea provides world-class service delivery through the most extensive network of customer touch points, comprising of nearly 4,500 exclusive Idea outlets, and over 7,000 call centre seats. Idea’s customer service delivery platform is ISO 9001:2008 certified, making it the only operator in the country to have this standard certification for all 22 service areas and the corporate office Idea won the ‘Best Brand Campaign’ at the esteemed World Communication Awards 2011. It also recently won 3 Awards at the ET Telecom Awards 2012, in the following categories Customer Experience Enhancement, Excellence in Marketing and Innovative products, respectively.

Loading…

NEWS

VMware Telco Cloud CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 05, 2026 08:00 AM

11 Best Stocks With Huge Upside Potential to Buy According to Reddit

Broadcom Inc. (NASDAQ:AVGO) is one of the best stocks with huge upside potential to buy according to Reddit. On March 2, RBC Capital cut the...

Read Article

March 05, 2026 05:40 AM

CISA Warns of Exploited VMware Flaw

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical vulnerability in Broadcom's VMware Aria...

Read Article

March 04, 2026 08:00 AM

Broadcom Inc. (AVGO) Strengthens Position Across Semiconductors and Enterprise Software

Broadcom Inc. (NASDAQ:AVGO) is one of the best blue chip stocks to buy for the long term. On March 2, at Mobile World Congress in Barcelona,...

Read Article

March 02, 2026 08:01 AM

Broadcom's VMware Telco Cloud 9 targets 40% savings and lower power use

Planned VMware Telco Cloud 9 adds private AI-as-a-Service, GPU virtualization and sovereign cloud tools, with Broadcom citing 40% TCO and...

Read Article

February 24, 2026 08:00 AM

Multiple VMware Aria Vulnerabilities Enable Remote Code Execution Attacks

These flaws affect key products like VMware Cloud Foundation and Telco Cloud platforms, urging organizations to apply patches immediately.

Read Article

February 04, 2026 08:00 AM

CISA: VMware ESXi flaw now exploited in ransomware attacks

CISA confirmed on Wednesday that ransomware gangs have begun exploiting a high-severity VMware ESXi sandbox escape vulnerability that was...

Read Article

January 23, 2026 08:00 AM

OECD Report Warns Of Telco Market Failure As Australia Faces Key Spectrum Decision

Australia's telecommunications sector is failing to deliver competitive pricing and quality service, according to a new report from the...

Read Article

October 31, 2025 07:00 AM

CISA adds VMware bug to KEV a year after first exploited

CISA updated its known exploited vulnerability catalogue on Thursday to include the VMware bug CVE-2025-41244, first exploited in October...

Read Article

October 28, 2025 07:00 AM

CMC Telecom wins 8 global cybersecurity awards, leads in AI-driven defense

CMC Telecom's sweeping recognition at the 2025 Cybersecurity Excellence Awards in the US, where it won eight international prizes,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…