What is Casa de Sierra Nevada, A Belmond Hotel's cybersecurity risk score?

Casa de Sierra Nevada, A Belmond Hotel has an AI-generated cybersecurity risk score of 772 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Casa de Sierra Nevada, A Belmond Hotel experienced?

According to Rankiteo, Casa de Sierra Nevada, A Belmond Hotel currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Casa de Sierra Nevada, A Belmond Hotel been affected by any supply chain cyber incidents ?

According to Rankiteo, Casa de Sierra Nevada, A Belmond Hotel has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: TIFLVMCHR1770865579) Gainsight (Incident ID: GAI0292402112125) Salesforce (Incident ID: LOUPARVOLTIFJAP1770908674)

Does Casa de Sierra Nevada, A Belmond Hotel have SOC 2 Type 1 certification ?

According to Rankiteo, Casa de Sierra Nevada, A Belmond Hotel is not certified under SOC 2 Type 1.

Does Casa de Sierra Nevada, A Belmond Hotel have SOC 2 Type 2 certification ?

According to Rankiteo, Casa de Sierra Nevada, A Belmond Hotel does not hold a SOC 2 Type 2 certification.

Does Casa de Sierra Nevada, A Belmond Hotel comply with GDPR ?

According to Rankiteo, Casa de Sierra Nevada, A Belmond Hotel is not listed as GDPR compliant.

Does Casa de Sierra Nevada, A Belmond Hotel have PCI DSS certification ?

According to Rankiteo, Casa de Sierra Nevada, A Belmond Hotel does not currently maintain PCI DSS compliance.

Does Casa de Sierra Nevada, A Belmond Hotel comply with HIPAA ?

According to Rankiteo, Casa de Sierra Nevada, A Belmond Hotel is not compliant with HIPAA regulations.

Does Casa de Sierra Nevada, A Belmond Hotel have ISO 27001 certification ?

According to Rankiteo,Casa de Sierra Nevada, A Belmond Hotel is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Casa de Sierra Nevada, A Belmond Hotel operate in ?

Casa de Sierra Nevada, A Belmond Hotel operates primarily in the Hospitality industry.

How many employees does Casa de Sierra Nevada, A Belmond Hotel have ?

Casa de Sierra Nevada, A Belmond Hotel employs approximately 47 people worldwide.

Does Casa de Sierra Nevada, A Belmond Hotel own any subsidiaries ?

Casa de Sierra Nevada, A Belmond Hotel presently has no subsidiaries across any sectors.

How many LinkedIn followers does Casa de Sierra Nevada, A Belmond Hotel have ?

Casa de Sierra Nevada, A Belmond Hotel's official LinkedIn profile has approximately 1,669 followers.

What is the NAICS classification code for Casa de Sierra Nevada, A Belmond Hotel ?

Casa de Sierra Nevada, A Belmond Hotel is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does Casa de Sierra Nevada, A Belmond Hotel have a Crunchbase profile ?

No, Casa de Sierra Nevada, A Belmond Hotel does not have a profile on Crunchbase.

Does Casa de Sierra Nevada, A Belmond Hotel have a LinkedIn profile ?

Yes, Casa de Sierra Nevada, A Belmond Hotel maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/belmond-casa-de-sierra-nevada.

How many cybersecurity incidents has Casa de Sierra Nevada, A Belmond Hotel experienced ?

As of August 26, 2026, Rankiteo reports that Casa de Sierra Nevada, A Belmond Hotel has experienced 17 cybersecurity incidents.

How many peer or competitor companies does Casa de Sierra Nevada, A Belmond Hotel have ?

Casa de Sierra Nevada, A Belmond Hotel has an estimated 14,387 peer or competitor companies worldwide.

What types of cybersecurity incidents has Casa de Sierra Nevada, A Belmond Hotel faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CDSNBH

Boost Score +25 with badge (5 left)

772

/1000

Fair

797

/1000

Fair

Casa de Sierra Nevada, A Belmond Hotel Vendor Cyber Rating & Cyber Score

belmond.com

Add Your Compliance Badge

Evoking the charm of a bygone era, Casa de Sierra Nevada, A Belmond Hotel, San Miguel de Allende offers siesta-like calm in the heart of the colourful, historic city. Authentic and inviting, the hotel is arrayed across six heritage mansions dating from the 16th to 18th centuries, each rich with lovingly restored details. The 23 suites and 14 rooms all have local craftmanship at their core, with stucco walls, vaulted archways and wood-beamed ceilings. The hotel is home to two restaurants: Andanza for breakfast, lunch, and dinner; and Restaurante del Parque, serving authentic flavours of Oaxaca and Puebla. Tunki Rooftop by Handshake serves small plates paired with pioneering cocktails designed by Handshake, one of the ‘World’s 50 Best Bars.’

CDSNBH A.I CyberSecurity Scoring

Scoring History

CDSNBH

Casa de Sierra Nevada, A Belmond Hotel CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

SEPHORA

Cyber Attack

6/2026

SEPTHE178049083...

SEPHORA

Breach

4/2026

SEP1780946094

Christian Dior Cout...

Breach

3/2026

CHR1773773151

Christian Dior Cout...

Breach

2/2026

Salesforce

TIFLVMCHR177086...

Casa de Sierra Neva...

Breach

100

9/2025

PAR353253509232...

Casa de Sierra Neva...

Breach

9/2025

CHR159271509302...

LVMH

Breach

8/2025

Gainsight

GAI029240211212...

Casa de Sierra Neva...

Breach

7/2025

LVM852071225

Casa de Sierra Neva...

Breach

7/2025

LOU026510209062...

Christian Dior Cout...

Ransomware

100

5/2025

CHRMAR176950442...

Casa de Sierra Neva...

Cyber Attack

5/2025

CHR316343111172...

Casa de Sierra Neva...

Breach

1/2025

CHR706072225

Casa de Sierra Neva...

Breach

1/2025

PAR711072225

Louis Vuitton

Breach

1/2025

Salesforce

LOUPARVOLTIFJAP...

Casa de Sierra Neva...

Breach

100

11/2024

CHR243322409162...

Casa de Sierra Neva...

Cyber Attack

6/2024

PAR517090325

Casa de Sierra Neva...

Breach

07/2019

SEP2372423

Loading…

A.I.

CDSNBH Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CDSNBH

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for Casa de Sierra Nevada, A Belmond Hotel in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Casa de Sierra Nevada, A Belmond Hotel in 2026.

Incident Types CDSNBH vs Hospitality Industry Avg (This Year)

No incidents recorded for Casa de Sierra Nevada, A Belmond Hotel in 2026.

Incident History - CDSNBH (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Casa de Sierra Nevada, A Belmond Hotel Subsidiaries

CDSNBH

Hospitality

Website: https://www.belmond.com/hotels/north-america/mexico/san-miguel-de-allende/belmond-casa-de-sierra-nevada/?utm_source=social&utm_medium=link&utm_campaign=Linkedin_business&utm_content=CSN

Company Size: 47

103

BelmondHospitality

LVMHRetail Luxury Goods and Jewelry

Louis VuittonRetail Luxury Goods and Jewelry

SEPHORARetail

Christian Dior CoutureRetail Luxury Goods and Jewelry

BvlgariRetail Luxury Goods and Jewelry

FendiRetail Luxury Goods and Jewelry

Les EchosNewspaper Publishing

Les Echos STARTNewspaper Publishing

Les Echos Leadership & ManagementInformation Services

Les Echos Entrepreneurs Médias en ligne

The InnovatorÉdition de journaux

Parfums Christian DiorPersonal Care Product Manufacturing

LoeweRetail Luxury Goods and Jewelry

Moët HennessyBeverage Manufacturing

HennessyBeverage Manufacturing

Veuve ClicquotBeverage Manufacturing

Moët & ChandonBeverage Manufacturing

The Glenmorangie CompanyBeverage Manufacturing

RuinartBeverage Manufacturing

CHANDONBeverage Manufacturing

KRUG ChampagneWine & Spirits

Moët Hennessy Diageo FranceBeverage Manufacturing

Moët Hennessy Diageo ChinaBeverage Manufacturing

Moët Hennessy Diageo SingaporeBeverage Manufacturing

Moët Hennessy Wine EstatesBeverage Manufacturing

Moët Hennessy Diageo MalaysiaBeverage Manufacturing

Belvedere VodkaBeverage Manufacturing

EminenteBeverage Manufacturing

Cloudy Bay VineyardsBeverage Manufacturing

Château GaloupetBeverage Manufacturing

Newton VineyardFood and Beverage Manufacturing

敖云 Ao Yun VineyardBeverage Manufacturing

Benefit CosmeticsPersonal Care Product Manufacturing

Life at Benefit: We're in the Feelgood Business!Personal Care Product Manufacturing

GIVENCHYRetail Luxury Goods and Jewelry

GuerlainPersonal Care Product Manufacturing

Loro PianaRetail Luxury Goods and Jewelry

MAKE UP FOR EVERPersonal Care Product Manufacturing

CELINERetail Luxury Goods and Jewelry

HublotRetail Luxury Goods and Jewelry

LVMH Fragrance BrandsPersonal Care Product Manufacturing

Parfums GivenchyFabrication de parfums et de produits pour la toilette

KENZO ParfumsFabrication de parfums et de produits pour la toilette

TAG HeuerRetail Luxury Goods and Jewelry

RIMOWARetail Luxury Goods and Jewelry

Acqua di ParmaRetail Luxury Goods and Jewelry

KENZO ModeRetail Apparel and Fashion

GROUPE BON MARCHÉ : Le Bon Marché Rive Gauche et La Grande Epicerie de Paris.Retail

Marc JacobsRetail Apparel and Fashion

CHAUMETRetail Luxury Goods and Jewelry

DFS Group LimitedRetail

Samaritaine Paris Pont-NeufRetail

24SRetail Apparel and Fashion

ZENITH WatchesRetail Luxury Goods and Jewelry

Starboard Cruise ServicesRetail

ThéliosRetail Luxury Goods and Jewelry

FRED JewelryRetail Luxury Goods and Jewelry

Maison Francis KurkdjianPersonal Care Product Manufacturing

REPOSSIRetail Luxury Goods and Jewelry

LVMH Fashion Group North America Retail Luxury Goods and Jewelry

BerlutiRetail Luxury Goods and Jewelry

NOWNESSBook and Periodical Publishing

Royal Van Lent ShipyardShipbuilding

Moët Hennessy Diageo Hong Kong & MacauBeverage Manufacturing

Moët Hennessy Diageo JapanFood and Beverage Services

Nona SourceRetail Apparel and Fashion

NUDE SkincarePersonal Care Product Manufacturing

HeristoriaRetail Luxury Goods and Jewelry

Copacabana Palace, A Belmond HotelHospitality

Le Manoir aux Quat'Saisons, A Belmond HotelHospitality

Maroma, A Belmond HotelHospitality

Grand Hotel EuropeHospitality

Hotel Cipriani, A Belmond HotelHospitality

Mount Nelson, A Belmond HotelHospitality

Splendido, A Belmond HotelHospitality

Venice Simplon-Orient-ExpressHospitality

Miraflores Park, A Belmond HotelHospitality

The Cadogan, A Belmond HotelHospitality

Reid's Palace, A Belmond HotelHospitality

Hotel das Cataratas, A Belmond HotelHospitality

Belmond SafarisTravel Arrangements

La Residencia, A Belmond HotelHospitality

Caruso, A Belmond HotelHospitality

Castello di Casole, A Belmond HotelHospitality

Villa Sant'Andrea, A Belmond HotelHospitality

El Encanto, A Belmond HotelHospitality

La Samanna, A Belmond HotelHospitality

Monasterio, A Belmond HotelHospitality

Villa San Michele, A Belmond HotelHospitality

Grand Hotel Timeo, A Belmond HotelHospitality

British Pullman, A Belmond TrainTravel Arrangements

Rio Sagrado, A Belmond HotelHospitality

Eastern & Oriental Express, A Belmond TrainHospitality

Cap Juluca, A Belmond HotelHospitality

21 ClubRestaurants

Palacio Nazarenas, A Belmond HotelHospitality

Royal Scotsman, A Belmond TrainTravel Arrangements

Jimbaran Puri, A Belmond HotelHospitality

Las Casitas, A Belmond HotelHospitality

Les Bateaux BelmondHospitality

Napasai, A Belmond HotelHospitality

Sanctuary Lodge, A Belmond HotelHospitality

Loading…

Casa de Sierra Nevada, A Belmond Hotel Similar Companies

Accor

accor.com

We are Accor We are more than 290,000 hospitality experts placing people at the heart of what we do, creating emotion for our guests, and nurturing passion for service and achievement beyond limits. Building on the strength of our teams and of our fully integrated ecosystem of leading brands, personalized services & expert solutions, we break new ground to reimagine hospitality and inspire new ways to experience the world. We are dedicated to suit all desires and needs, and reinvent the guest experience every day with our 45 hotel brands across all segments- 5,600 properties around the world from luxury five-star palaces to smart economy hotels, exquisite residences to full-service resorts. Because we take care of millions of guests and each of our hotels is a world in itself, where every action counts. We strive to make positive impact both locally and globally, to ensure hospitality benefits not only the few, but all.

Rotana Hotels

rotana.com

Since inception, Rotana has grown to be the region’s largest hospitality management company, and a brand that is widely recognized and admired. Rotana currently manages a portfolio of over 100 properties throughout the Middle East, Africa, Eastern Europe and Türkiye offering a wide range of services and products through its 6 sub brands; Rotana Hotels & Resorts for the 4 and 5 star properties, Arjaan Hotel Apartments for the long term stays, Rayhaan Hotels & Resorts, Rotana’s alcohol free 4 and 5 star properties, Centro Hotels, a 3 star plus affordable lifestyle brand, Edge by Rotana our collection of independent hotels and The Residences by Rotana, a brand developed for guests that are looking for a permanent home. If you are interested to join Rotana, kindly log on to www.rotanacareers.com and proceed with the online application and our Human Resources Team will look into your respective application.

JW Marriott

jwmarriott.com

No loud pretense. No excess formalities. Just understated elegance you’ll feel the moment you walk into one of over 80 worldwide destinations. JW Marriott is part of Marriott International’s luxury portfolio and consists of beautiful properties in gateway cities and distinctive resort locations in 28 countries around the world. These elegant hotels cater to today’s sophisticated, self-assured travelers, offering them the quiet luxury they seek in a warmly authentic, relaxed atmosphere lacking in pretense. JW Marriott properties artfully provide highly crafted, anticipatory experiences that are reflective of their locale so that their guests have the time to focus on what is most important to them.

Delaware North

cb DelawareNorth.com

Delaware North is a global leader in the hospitality and entertainment industry. The company annually serves more than a half-billion guests across three continents, including at high-profile sports venues, airports, national and state parks, restaurants, resorts, hotels and casinos. Building on more than a century of enduring partnerships and a commitment to local communities and sustainability, Delaware North’s vision is to delight guests by creating the world’s best experiences today while reimagining tomorrow.

Taj Hotels

tajhotels.com

Established in 1903, Taj is The Indian Hotels Company Limited’s (IHCL) iconic brand for the world’s most discerning travellers seeking luxury and authentic experiences. Taj has been rated as India’s Strongest Brand across all sectors for an unprecedented fourth time and also as the World’s Strongest Hotel Brand for the third consecutive year in 2024 by Brand Finance. From landmark city addresses to enchanting jungle safaris, and from idyllic resorts to authentic living Grand Palaces, each Taj hotel offers an unrivalled fusion of warm Indian hospitality, world-class service and modern luxury. Taj's unique portfolio comprises hotels across India, North America, United Kingdom, Africa, Middle East, Sri Lanka, Maldives and Nepal.

Hilton Grand Vacations

cb hgv.com

Hilton Grand Vacations is a global leader in vacation ownership, developing, marketing and operating a portfolio of high-quality, shared-ownership properties in highly desired vacation destinations. Our company also manages and operates innovative club membership programs providing exclusive exchange, leisure travel, and reservation services for our Members. At Hilton Grand Vacations, our culture of hospitality extends to our more than 10,000 Team Members who collectively play an important role in delivering exceptional service, quality accommodations, and memorable travel experiences. That’s why we’ve created a workplace that supports growth, opportunity, work-life balance, and respect throughout our Club affiliated properties, sales centers, and corporate offices around the globe.

Mandarin Oriental

mandarinoriental.com

Mandarin Oriental Hotel Group is the award-winning owner and operator of some of the world’s most luxurious hotels, resorts and residences. Having grown from its Asian roots into a global brand, the Group now operates 43 hotels, 12 residences and 23 exclusive homes in 26 countries and territories, with each property reflecting the Group’s oriental heritage, local culture and unique design. Mandarin Oriental has a strong pipeline of hotels and residences under development and is a member of the Jardine Matheson Group. Mandarin Oriental’s aim is to be recognised widely as the best global luxury hotel group, providing 21st-century luxury with oriental charm in each of its hotels. This will be achieved by investing in the Group’s exceptional facilities and people while maximizing profitability and long-term shareholder value. The Group regularly receives recognition and awards for outstanding service and quality management. The strategy of the Group is to open the hotels currently under development while continuing to seek further selective opportunities for expansion around the world. The parent company, Mandarin Oriental International Limited, is incorporated in Bermuda and has a premium listing on the London Stock Exchange, with secondary listings in Bermuda and Singapore. Mandarin Oriental Hotel Group International Limited, which operates from Hong Kong, manages the activities of the Group’s hotels. Mandarin Oriental is a member of the Jardine Matheson Group.

Holiday Inn

holidayinn.com

More than an iconic place to stay, Holiday Inn Hotels are a place to be in the moment–gathered to celebrate with family, laughing with friends, sharing a meal with the team, or just for some well-deserved me-time. No matter the reason you travel, when you’re here, you’re right where you’re meant to be. Book with us and become an IHG One Rewards member.

Hampton

hampton.com

The Hampton brand, including Hampton Inn, Hampton Inn & Suites and Hampton by Hilton, is an award-winning leader in the upper-midscale hotel segment. With more than 2,700 properties in 32 countries globally, Hampton is part of Hilton Worldwide, the leading global hospitality company. All Hampton Hotels offer warm surroundings and a friendly service culture and personality, defined as “Hamptonality,” supported by its 100% Satisfaction Guarantee. High-quality accommodations, in-room conveniences and the latest technology, combined with numerous locations and consistent offerings, have made Hampton a leader in its segment and one of the fastest growing hotel brands. For more information please visit: www.hampton.com www.hamptonfranchise.com news.hampton.com www.hiltonworldwide.com/careers/ To connect with us on social please visit: www.facebook.com/hampton www.twitter.com/hampton www.youtube.com/hampton

Loading…

NEWS

Casa de Sierra Nevada, A Belmond Hotel CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 20, 2023 07:00 AM

5 Luxury Hotels In Central America Celebrating The Day Of The Dead

Girl with fantasy and catrina makeup shakes up transeuentes and consumers at Ladeira Porto Geral on 24 October 2017 in Sao Paulo, Brazil.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-80138

SUMMARY

ClipBucket V5's web installer fails to properly validate or escape the php_cli_filepath parameter before passing it to shell execution. Unauthenticated attackers can submit a crafted POST request to the installer with a malicious php_cli_filepath value to execute arbitrary commands as the web server user.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-79912

SUMMARY

A vulnerability was detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The impacted element is the function getCurrentTime of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument ntp_server results in command injection. The attack can be initiated remotely. The exploit is now public and may be used.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: 8.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 8.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

3.9

REFERENCES

CVE-2026-79911

SUMMARY

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: 10)

cvss2

Base Score: 10.0

Complexity: LOW

AV:N/AC:L/Au:N/C:C/I:C/A:C

cvss3

Base Score: 10.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.9

REFERENCES

CVE-2026-70665

SUMMARY

Doorkeeper OpenID Connect implements an OpenID Connect authentication provider for Rails applications on top of Doorkeeper. Prior to 1.10.4, the Dynamic Client Registration (DCR) endpoint persists client-supplied scopes without validating them against the server's configured scope set. Under certain conditions, this allows a self-registered client to obtain scopes beyond what the server intended to grant. In DynamicClientRegistrationController#application_params, the scopes attribute is assigned directly from params[:scope] with no validation against Doorkeeper.configuration.scopes or optional_scopes. Combined with enforce_configured_scopes being off by default and Doorkeeper's ScopeChecker prioritizing application-level scopes over server-level scopes, this creates a privilege escalation path. This issue is fixed in version 1.10.4.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-55805

SUMMARY

Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal core allows Stored XSS. This issue affects Drupal core versions: from 0.0.0 to 10.6.13, from 11.3.0 to 11.3.14, from 11.4.0 to 11.4.4, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*, from 0.0.0 to 11.2.*.

Published

Date2026-08-25

Updated

Date2026-08-25

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://www.drupal.org/sa-core-2026-012

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…