What is the official website of The Office of Commercial and Business Affairs ?

The official website of The Office of Commercial and Business Affairs is https://www.state.gov/social-media-terms-of-use/.

What is The Office of Commercial and Business Affairs's cybersecurity risk score?

The Office of Commercial and Business Affairs has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has The Office of Commercial and Business Affairs experienced?

According to Rankiteo, The Office of Commercial and Business Affairs currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has The Office of Commercial and Business Affairs been affected by any supply chain cyber incidents ?

According to Rankiteo, The Office of Commercial and Business Affairs has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does The Office of Commercial and Business Affairs have SOC 2 Type 1 certification ?

According to Rankiteo, The Office of Commercial and Business Affairs is not certified under SOC 2 Type 1.

Does The Office of Commercial and Business Affairs have SOC 2 Type 2 certification ?

According to Rankiteo, The Office of Commercial and Business Affairs does not hold a SOC 2 Type 2 certification.

Does The Office of Commercial and Business Affairs comply with GDPR ?

According to Rankiteo, The Office of Commercial and Business Affairs is not listed as GDPR compliant.

Does The Office of Commercial and Business Affairs have PCI DSS certification ?

According to Rankiteo, The Office of Commercial and Business Affairs does not currently maintain PCI DSS compliance.

Does The Office of Commercial and Business Affairs comply with HIPAA ?

According to Rankiteo, The Office of Commercial and Business Affairs is not compliant with HIPAA regulations.

Does The Office of Commercial and Business Affairs have ISO 27001 certification ?

According to Rankiteo,The Office of Commercial and Business Affairs is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does The Office of Commercial and Business Affairs operate in ?

The Office of Commercial and Business Affairs operates primarily in the Government Administration industry.

How many employees does The Office of Commercial and Business Affairs have ?

The Office of Commercial and Business Affairs employs approximately None employees people worldwide.

Does The Office of Commercial and Business Affairs own any subsidiaries ?

The Office of Commercial and Business Affairs presently has no subsidiaries across any sectors.

How many LinkedIn followers does The Office of Commercial and Business Affairs have ?

The Office of Commercial and Business Affairs's official LinkedIn profile has approximately 941 followers.

What is the NAICS classification code for The Office of Commercial and Business Affairs ?

The Office of Commercial and Business Affairs is classified under the NAICS code 92, which corresponds to Public Administration.

Does The Office of Commercial and Business Affairs have a Crunchbase profile ?

No, The Office of Commercial and Business Affairs does not have a profile on Crunchbase.

Does The Office of Commercial and Business Affairs have a LinkedIn profile ?

Yes, The Office of Commercial and Business Affairs maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bizatstate.

How many cybersecurity incidents has The Office of Commercial and Business Affairs experienced ?

As of August 10, 2026, Rankiteo reports that The Office of Commercial and Business Affairs has experienced 1 cybersecurity incidents.

How many peer or competitor companies does The Office of Commercial and Business Affairs have ?

The Office of Commercial and Business Affairs has an estimated 13,158 peer or competitor companies worldwide.

What types of cybersecurity incidents has The Office of Commercial and Business Affairs faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

OCBA

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

The Office of Commercial and Business Affairs Vendor Cyber Rating & Cyber Score

state.gov

Add Your Compliance Badge

The Office of Commercial and Business Affairs advances trade, commercial, and economic policies for America’s workers and the middle-class to help create jobs and strengthen U.S. communities. The Special Representative leads efforts to expand U.S. exports through commercial advocacy and to create and advance a level playing field for U.S. workers and companies overseas.

OCBA A.I CyberSecurity Scoring

Scoring History

OCBA

The Office of Commercial and Business Affairs CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

The Office of Comme...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

OCBA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for OCBA

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for The Office of Commercial and Business Affairs in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for The Office of Commercial and Business Affairs in 2026.

Incident Types OCBA vs Government Administration Industry Avg (This Year)

No incidents recorded for The Office of Commercial and Business Affairs in 2026.

Incident History - OCBA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

The Office of Commercial and Business Affairs Subsidiaries

OCBA

Government Administration

Website: https://www.state.gov/social-media-terms-of-use/

Company Size: 51-200 employees

Under Secretary Jose W. FernandezInternational Affairs

U.S. Department of StateInternational Affairs

The Fulbright ProgramInternational Affairs

U.S. Embassy and Consulates in Brazil Government Administration

Diplomatic Security ServiceLaw Enforcement

U.S. Embassy ManaguaGovernment Relations Services

U.S. Embassy ZambiaInternational Affairs

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

U.S. Embassy Amman, JordanGovernment Relations Services

Foreign Service InstituteInternational Affairs

U.S. Embassy JakartaGovernment Administration

U.S. Embassy South AfricaGovernment Relations Services

U.S. Embassy in San SalvadorGovernment Administration

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

U.S. Embassy in AustraliaInternational Affairs

Ambassador Michael BattleGovernment Relations Services

U.S. Consulate General MumbaiGovernment Administration

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

U.S. Embassy in the Dominican RepublicGovernment Administration

Embajada de Estados Unidos en ArgentinaRelaciones gubernamentales

Embassy of the United States of America, LondonGovernment Relations

DT - Diplomatic Technology at StateInternational Affairs

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

Bureau of Cyberspace and Digital PolicyInternational Affairs

U.S. Embassy in the PhilippinesGovernment Administration

U.S. Embassy Montevideo, UruguayGovernment Administration

U.S. Embassy PanamaGovernment Administration

U.S. Embassy TunisGovernment Administration

U.S. Department of State - Virtual Student Federal Service (VSFS)Government Administration

U.S. Department of State Industry LiaisonGovernment Administration

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

US Embassy ParisGovernment Administration

U.S. Embassy Santiago, ChileServicios de relaciones gubernamentales

US Embassy Bucharest, RomaniaGovernment Administration

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

U.S. Embassy in MexicoGovernment Administration

U.S. Mission to the European UnionGovernment Administration

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Consulate General MontréalGovernment Administration

U.S. Embassy OsloGovernment Administration

U.S. Mission, GenevaGovernment Administration

U.S. Consulate General MilanGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

U.S. Embassy MadridGovernment Administration

U.S. Consulate General BarcelonaGovernment Administration

U.S. Mission to the UAEGovernment Administration

U.S. Embassy LuxembourgInternational Affairs

U.S. Consulate General FrankfurtGovernment Administration

US Mission to the UN Agencies in RomeGovernment Administration

US BotschaftGovernment Administration

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Consulate General - StrasbourgGovernment Administration

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Embassy JerusalemGovernment Administration

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

Department of State - Office of the Science & Technology AdviserGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

National Museum of American DiplomacyGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

U.S. Embassy TegucigalpaGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

U.S. Mission ThailandGovernment Administration

U.S. Embassy in BulgariaGovernment Administration

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

U.S. Department of State - Bureau of Energy ResourcesGovernment Administration

U.S. Department of State - Bureau of Energy Resources Central Asia Energy Fellows ProgramGovernment Administration

Loading…

The Office of Commercial and Business Affairs Similar Companies

Assurance Maladie

ameli.fr

Travailler à l’Assurance Maladie, c’est donner une nouvelle dimension à votre métier et agir au quotidien pour la protection de notre système de santé. Participez à une grande diversité de projets dans un cadre bienveillant et soyez fier de contribuer à une mission essentielle : agir ensemble, protéger chacun. Depuis près de 80 ans, l'Assurance Maladie joue un rôle majeur au service de la solidarité nationale. Nous sommes convaincus que la clé de la pérennité du système de santé relève d'une responsabilité collective et réside dans l'implication forte de chacun de ses acteurs. Au sein de ce système, l'Assurance Maladie assume une triple mission : ⏺️ garantir un accès universel aux droits et permettre l'accès aux soins ⏺️ accompagner chacun dans la préservation de sa santé ⏺️ améliorer l'efficacité du système Toutes ses missions, l’Assurance Maladie les mène avec le souci d’assurer la meilleure qualité de service. Elle s’appuie pour cela sur un réseau de proximité qui couvre l’ensemble du territoire et l’engagement de plus de 80 000 collaborateurs qui agissent jour après jour à l’échelle départementale, régionale et nationale. Ensemble, au quotidien, ils font vivre ses valeurs d’universalité, de solidarité, de responsabilité et d’innovation.

France Travail

francetravail.fr

France Travail est un acteur majeur du marché de l’emploi en France où il s’investit pour faciliter le retour à l’emploi des demandeurs d’emploi et offrir aux entreprises des réponses adaptées à leurs besoins de recrutement. Les 55 000 collaborateurs de France Travail œuvrent au quotidien pour être le trait d’union entre les demandeurs d’emploi et les entreprises. France Travail is a key player in the French employment market. Its role is to help the unemployed find work and support companies to fulfil their recruitment requirements. Day-to-day, France Travail's 55,000 staff provides that vital link between job seekers and companies.

ISSSTE

www.com

INSTITUTO DE SEGURIDAD Y SERVICIOS SOCIALES DE LOS TRABAJADORES DEL ESTADO. ES UN ORGANISMOS PÚBLICO QUE OTORGA SERVICIOS DE SALUD, PENSIONES, VIVIENDA, PRÉSTAMOS, ESTANCIAS INFANTILES, TURISMO, CULTURA, RECREACION, DEPORTE; CUYOS AFILIADOS SON TRABAJADORES DE DEPENDENCIAS GUBERNAMENTALES, CON DERECHO A LA SEGURIDAD SOCIAL. Y CUYOS OBJETIVOS INSTITUCIONALES ADEMÁS DE CONTRIBUIR A LOGRAR LOS OBJETIVOS PROPUESTOS POR EL PLAN NACIONAL DE DESARROLLO 2007 – 2012, COADYUVARÁN A LOGRAR LA VISIÓN DE LA INSTITUCIÓN ESTABLECIDA PARA EL AÑO 2030 Y CONCRETAR LA MISIÓN QUE TIENE ESTABLECIDA. MISIÓN DEL ISSSTE CONTRIBUIR A SATISFACER NIVELES DE BIENESTAR INTEGRAL DE LOS TRABAJADORES AL SERVICIO DEL ESTADO, PENSIONADOS, JUBILADOS Y FAMILIARES DERECHOHABIENTES, CON EL OTORGAMIENTO EFICAZ Y EFICIENTE DE LOS SEGUROS, PRESTACIONES Y SERVICIOS, CON ATENCIÓN ESMERADA, RESPETO, CALIDAD Y CUMPLIENDO SIEMPRE CON LOS VALORES INSTITUCIONALES DE HONESTIDAD, LEGALIDAD Y TRANSPARENCIA. VISIÓN DEL ISSSTE POSICIONAR AL ISSSTE COMO LA INSTITUCIÓN QUE GARANTICE LA PROTECCIÓN INTEGRAL DE LOS TRABAJADORES DE LA ADMINISTRACIÓN PÚBLICA FEDERAL, PENSIONADOS, JUBILADOS Y SUS FAMILIAS DE ACUERDO AL NUEVO PERFIL DEMOGRÁFICO DE LA DERECHOHABIENCIA, CON EL OTORGAMIENTO DE SEGUROS, PRESTACIONES Y SERVICIOS DE CONFORMIDAD CON LA NORMATIVIDAD VIGENTE, BAJO CÓDIGOS NORMADOS DE CALIDAD Y CALIDEZ, CON SOLVENCIA FINANCIERA, QUE PERMITAN GENERAR VALORES Y PRÁCTICAS QUE FOMENTEN LA MEJORA SOSTENIDA DE BIENESTAR, CALIDAD DE VIDA Y EL DESARROLLO DEL CAPITAL HUMANO. PARA CONOCER MAS DE NUESTRO INSTITUTO FAVOR DE CONSULTAR LA PAGINA INSTITUCIONAL WWW2.ISSSTE.GOB.MX EN DONDE SEGURAMENTE ENCONTRARAN MATERIAL DE ORIENTACION AMENO Y EXPLICATIVO ADEMAS DE LA HISTORIA DE INSTITUTO, SUS ALCANCES Y LOGROS ASI COMO LOS PROGRAMAS CON QUE CUENTA ACTUALMENTE EL INSTITUTO.

CONICET

conicet.gov.ar

El Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) es el principal organismo dedicado a la promoción de la ciencia y la tecnología en la Argentina. Su actividad se desarrolla en cuatro grandes áreas: • Ciencias agrarias, ingeniería y de materiales • Ciencias biológicas y de la salud • Ciencias exactas y naturales • Ciencias sociales y humanidades En el CONICET, además promovemos y gestionamos la transferencia de tecnologías, servicios y capacidades de Investigación y Desarrollo (I+D) que genera su comunidad científica hacia los sectores socioproductivos, Pymes, Gobiernos, organismos públicos y la sociedad civil. En ese sentido: • Conectamos recursos humanos altamente especializados con empresarios/as para generar oportunidades conjuntas. • Impulsamos la participación con cámaras y asociaciones empresarias, parques tecnológicos e industriales, organismos del Estado, ONG, organizaciones civiles, y redes nacionales e internacionales de vinculación tecnológica. • Facilitamos la transferencia al sector productivo mediante procesos de escalado, pruebas de concepto, entre otros. • Promovemos la creación de Empresas de Base Tecnológica. El CONICET es un ente autárquico del Estado Nacional en jurisdicción del Ministerio de Ciencia, Tecnología e Innovación.

Government of Alberta

alberta.ca

Work with the Alberta government to build a stronger province for current and future generations. We offer diverse and rewarding employment opportunities in an environment that encourages continuous learning and career growth. We are one of the largest employers in Alberta with over 27,000 employees throughout the province. We are an award winning organization that values respect, accountability, integrity, and excellence. Our employees share a common vision of proudly working together to build a stronger province and make a positive and lasting difference in the lives of Albertans. The people of Alberta enjoy a very high quality of life, including the lowest overall taxes in Canada. www.jobs.alberta.ca Please see our comment policy: https://www.alberta.ca/social-media-comment-policy.aspx

Helsingin kaupunki – Helsingfors stad – City of Helsinki

hel.fi

#MeTeemmeHelsingin Helsingin kaupunki on Suomen suurin työnantaja, jonka palveluksessa on lähes 39 000 ammattilaista ja asiantuntijaa. Helsingin kaupunki tarjoaa henkilöstölle monipuolisia, mielenkiintoisia ja yhteiskunnallisesti merkittäviä työtehtäviä, hyvät mahdollisuudet kehittymiseen, ammattitaitoiset työkaverit, työaikajoustot sekä kilpailukykyiset henkilöstöedut. Lisää kaupungista työnantajana: https://www.hel.fi/fi/avoimet-tyopaikat/miksi-toihin-kaupungille Helsingin kaupungin kotisivut: www.hel.fi *** Helsingfors stad, Finlands största arbetsgivare, har cirka 39 000 anställda. Dessa yrkesmänniskor och experter, som företräder ett antal olika branscher. Tack vare stadens och sektorernas storlek har de anställda mångsidiga, intressanta och samhälleligt viktiga arbetsuppgifter, goda möjligheter att utbilda sig och utvecklas, yrkeskunniga arbetskamrater, arbetstidsflexibilitet och konkurrenskraftiga personalförmåner. Mer om staden som arbetsgivare: https://www.hel.fi/sv/lediga-jobb/varfor-borja-arbeta-hos-staden Helsinki stad webbplats: www.hel.fi/sv *** The City of Helsinki is Finland’s biggest employer with 39 000 employees, who are professionals and experts of various fields. The large size of the City and the wide scope of the fields of employment give the City personnel versatile and socially important jobs, good opportunities for training and development on the job, skilled colleagues, flexible working hours and competitive personnel benefits. City as an employer: https://www.hel.fi/en/open-jobs/why-work-for-the-city City of Helsinki website: www.hel.fi/en

Københavns Kommune

kk.dk

Københavns Kommune er Danmarks største arbejdsplads med ca. 45.000 medarbejdere. Vi udvikler hovedstaden og servicerer over 500.000 københavnere. Vores mål er at fastholde og udvikle København som en af verdens bedste byer at bo i – og skabe øget vækst gennem viden, innovation og beskæftigelse. Find dit næste job her eller på www.kk.dk/job På vores karrieresite www.kk.dk/job kan du bl.a. se alle vores ledige stillinger og tilmelde dig vores jobagent. Her kan du også læse om vores medarbejdergoder.

Social Security Administration

ssa.gov

Social Security provides financial protection for our nation’s people, supporting more than 64 million individuals and families. With retirement, disability, and survivors benefits, Social Security is one of the most successful anti-poverty programs in our nation's history. We are there throughout life’s journey, helping secure today and tomorrow. We are one of the largest independent agencies in government, with over 58,000 team members throughout the country. Our talented workforce includes employees who serve customers directly, as well as those who support their work in diverse fields. Through compassion and dedication, our team members help promote the economic security of the country. They are the heart of our agency, providing high-quality, personalized service to people in their communities, nationwide, and even living abroad. Our workforce is our greatest strength at SSA. We place high priority on developing, engaging, and empowering our team members. Through career development programs, our team members have access to a wide range of training and professional development opportunities. We rely on our team members’ feedback to improve how we administer our programs and to create an environment of trust and cooperation across our organization. We also offer an excellent benefits package to our team members. To learn more about a career with SSA, visit SSA.gov/careers.

U.S. Department of Veterans Affairs

va.gov

Welcome to the United States Department of Veterans Affairs (VA) Official LinkedIn page. We're recruiting the finest employees to care for our #Veterans. Following/engagement ≠ signify VA endorsement. This is a moderated page, meaning that all comments will be reviewed for appropriate content. Please show respect to others. Comments that do not directly relate to the topics covered on this page, including commerce, external links, spam, abusive or vulgar language, hate speech, accusations against individuals, or personal attacks will be considered “off topic” and may not be posted. VA reserves the right to determine which comments are acceptable for this page. VA may remove comments that do not follow these terms, or comments that VA may reasonably believe could cause harm if they remain. VA may, at its sole discretion, terminate a user’s ability to post comments to this site for repeated or excessive violations of these standards. For more information, please visit bit.ly/2Q14Y1p

Loading…

NEWS

The Office of Commercial and Business Affairs CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 17, 2026 08:12 PM

Roquemore Skierski PLLC Opens McKinney Office to Expand Business & Commercial Litigation Services in Collin County

Roquemore Skierski PLLC announces the opening of its new McKinney office, increasing access to litigation counsel for businesses in Collin County.

Read Article

January 07, 2026 08:00 AM

Conduent Business Services Data Breach Victim Count Swells to More Than 14.7M

Conduent Business Services in New Jersey had previously confirmed in a breach report to the Oregon Attorney General that a 2024 hacking...

Read Article

January 04, 2026 08:00 AM

Healthcare Data Breach Statistics

The HIPAA Journal has compiled healthcare data breach statistics from October 2009, when the Department of Health and Human Services (HHS)...

Read Article

December 30, 2025 08:00 AM

Cybersecurity and Credit Union System Resilience Annual Report to Congress

MESSAGE FROM THE CHAIRMAN On behalf of the National Credit Union Administration (NCUA), I am submitting our annual, statutorily required...

Read Article

December 17, 2025 08:00 AM

Best Business Internet Service Provider Reviews of 2026

Need an internet service provider for your business? We've researched and analyzed the top providers to help you find the one that's right...

Read Article

December 01, 2025 08:09 PM

No-Cost Cybersecurity Services & Tools

CISA has curated a database of no-cost cybersecurity services and tools as part of our continuing mission to reduce cybersecurity risk across U.S. critical...

Read Article

July 18, 2025 10:21 PM

2024 Investment Climate Statements: Thailand

EXECUTIVE SUMMARY. Thailand is an upper middle-income country with a half-trillion-dollar economy, generally pro-investment policies, and well-developed...

Read Article

July 17, 2025 07:48 AM

2024 Investment Climate Statements: Saudi Arabia

The SAG is seeking foreign investment in burgeoning sectors such as infrastructure, tourism, entertainment, health and science, technology, and renewable...

Read Article

July 16, 2025 06:44 PM

2024 Investment Climate Statements: Ireland

EXECUTIVE SUMMARY. After years of unsurpassed growth, Ireland's economy entered a recession in 2023, the first decline in economic activity since 2012.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…