What is the official website of Children's Specialized Hospital ?

The official website of Children's Specialized Hospital is https://www.rwjbh.org/CSH.

What is Children's Specialized Hospital's cybersecurity risk score?

Children's Specialized Hospital has an AI-generated cybersecurity risk score of 766 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Children's Specialized Hospital experienced?

According to Rankiteo, Children's Specialized Hospital currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Children's Specialized Hospital been affected by any supply chain cyber incidents ?

According to Rankiteo, Children's Specialized Hospital has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Greenbaum, Rowe, Smith & Davis LLP (Incident ID: GREHACRWJTHE1783635866) Greenbaum, Rowe, Smith & Davis LLP (Incident ID: TRIGREATL1783600896)

Does Children's Specialized Hospital have SOC 2 Type 1 certification ?

According to Rankiteo, Children's Specialized Hospital is not certified under SOC 2 Type 1.

Does Children's Specialized Hospital have SOC 2 Type 2 certification ?

According to Rankiteo, Children's Specialized Hospital does not hold a SOC 2 Type 2 certification.

Does Children's Specialized Hospital comply with GDPR ?

According to Rankiteo, Children's Specialized Hospital is not listed as GDPR compliant.

Does Children's Specialized Hospital have PCI DSS certification ?

According to Rankiteo, Children's Specialized Hospital does not currently maintain PCI DSS compliance.

Does Children's Specialized Hospital comply with HIPAA ?

According to Rankiteo, Children's Specialized Hospital is not compliant with HIPAA regulations.

Does Children's Specialized Hospital have ISO 27001 certification ?

According to Rankiteo,Children's Specialized Hospital is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Children's Specialized Hospital operate in ?

Children's Specialized Hospital operates primarily in the Hospitals and Health Care industry.

How many employees does Children's Specialized Hospital have ?

Children's Specialized Hospital employs approximately 1,190 people worldwide.

Does Children's Specialized Hospital own any subsidiaries ?

Children's Specialized Hospital presently has no subsidiaries across any sectors.

How many LinkedIn followers does Children's Specialized Hospital have ?

Children's Specialized Hospital's official LinkedIn profile has approximately 10,381 followers.

What is the NAICS classification code for Children's Specialized Hospital ?

Children's Specialized Hospital is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does Children's Specialized Hospital have a Crunchbase profile ?

No, Children's Specialized Hospital does not have a profile on Crunchbase.

Does Children's Specialized Hospital have a LinkedIn profile ?

Yes, Children's Specialized Hospital maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/children's-specialized-hospital.

How many cybersecurity incidents has Children's Specialized Hospital experienced ?

As of October 20, 2026, Rankiteo reports that Children's Specialized Hospital has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Children's Specialized Hospital have ?

Children's Specialized Hospital has an estimated 34,127 peer or competitor companies worldwide.

What types of cybersecurity incidents has Children's Specialized Hospital faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CSH

Boost Score +25 with badge (5 left)

766

/1000

Fair

791

/1000

Fair

Children's Specialized Hospital Vendor Cyber Rating & Cyber Score

rwjbh.org

Add Your Compliance Badge

Children’s Specialized Hospital is the nation’s leading provider of inpatient and outpatient care for children from birth to 21 years of age facing special health challenges — from chronic illnesses and complex physical disabilities like brain and spinal cord injuries, to developmental and behavioral issues like autism and mental health. At fifteen different New Jersey locations, our pediatric specialists partner with families to make our many innovative therapies and medical treatments more personalized and effective...so children can achieve more of their goals. For more information: Call: 1-888-CHILDRENS Visit www.rwjbh.org/CSH -Facebook: www.facebook.com/childrensspecialized -Twitter: www.twitter.com/childrensspecnj -YouTube:

CSH

Children's Specialized Hospital CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

RWJBarnabas Health

Breach

11/2025

Greenbaum, Rowe...

GREHACRWJTHE178...

Trinitas Regional M...

Breach

8/2023

Greenbaum, Rowe...

TRIGREATL178360...

Loading…

A.I.

CSH Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CSH

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Children's Specialized Hospital in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Children's Specialized Hospital in 2026.

Incident Types CSH vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Children's Specialized Hospital in 2026.

Incident History - CSH (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Children's Specialized Hospital Subsidiaries

CSH

Hospitals and Health Care

Website: https://www.rwjbh.org/CSH

Company Size: 1,190

RWJBarnabas HealthHospitals and Health Care

Robert Wood Johnson University HospitalHospitals and Health Care

Cooperman Barnabas Medical CenterHospitals and Health Care

Newark Beth Israel Medical CenterHospitals and Health Care

Newark Beth Israel Heart Transplant ProgramHospitals and Health Care

Jersey City Medical CenterHospitals and Health Care

Robert Wood Johnson University Hospital HamiltonHospitals and Health Care

Saint Barnabas Medical CenterHospitals and Health Care

Monmouth Medical CenterHospitals and Health Care

RWJBarnabas Health Medical GroupHospitals and Health Care

Community Medical Center-Toms River, NJHospitals and Health Care

Trinitas Regional Medical CenterHospitals and Health Care

Children’s Hospital of New Jersey at Newark Beth Israel Medical CenterHospitals and Health Care

Clara Maass Medical CenterHospitals and Health Care

Robert Wood Johnson University Hospital RahwayHospitals and Health Care

RWJBarnabas Health Corporate CareHospitals and Health Care

Monmouth Medical Center Southern CampusHospitals and Health Care

RWJBarnabas Health Behavioral HealthHospitals and Health Care

RWJBarnabas Health Institute for Prevention and RecoveryHospitals and Health Care

The Children's Hospital at Monmouth Medical CenterHospitals and Health Care

RWJBarnabas Health Business DevelopmentHospitals and Health Care

RWJBarnabas Health Ambulatory Care CenterHospitals and Health Care

Barnabas Health Home CareHealth, Wellness & Fitness

RWJBarnabas Health Cardiothoracic Surgery - Northern RegionHospitals and Health Care

Barnabas Health Hospice & Palliative CareHospitals and Health Care

RWJBarnabas Health Physician RecruitmentHospitals and Health Care

Robert Wood Johnson University Hospital SomersetHospitals and Health Care

RWJBH Health EquityHospitals and Health Care

Loading…

Children's Specialized Hospital Similar Companies

University of Maryland Medical System

umms.org

The University of Maryland Medical System (UMMS) was created in 1984 when the state-owned University Hospital became a private, nonprofit organization. It has evolved into a multi-hospital system with academic, community and specialty service missions reaching every part of the state and beyond. UMMS is a national and regional referral center for trauma, cancer care, neurocare, cardiac care, women's and children's health and physical rehabilitation. It also has one of the world's largest kidney transplant programs, as well as scores of other programs that improve the physical and mental health of thousands of people daily. The hospitals and health systems that comprise UMMS are: University of Maryland Medical Center University of Maryland Medical Center Midtown Campus UM Rehabilitation and Orthopaedic Institute UM Baltimore Washington Medical Center UM Capital Region Health UM Charles Regional Medical Center UM St. Joseph Medical Center UM Upper Chesapeake Health UM Shore Regional Health Mt. Washington Pediatric Hospital UM Community Medical Group

RWJBarnabas Health

rwjbh.org

RWJBarnabas Health is New Jersey’s largest and most comprehensive academic health system, caring for more than 5 million people annually. Nationally renowned for quality and safety, the system includes 14 hospitals and 9,000 affiliated physicians integrated to provide care at more than 700 patient care locations. RWJBarnabas Health is among New Jersey’s largest private employers, with more than 44,000 employees, contributing more than $5.5 billion to the state economy every year. RWJBarnabas Health partners with its diverse communities to build and sustain a healthier New Jersey. It provides patient-centered care in a compassionate and equitable manner. RWJBarnabas Health’s commitment to enhancing access to care includes a transformative partnership with Rutgers University, including the Rutgers Cancer Institute — the state's only NCI-designated Comprehensive Cancer Center - and Rutgers Robert Wood Johnson Medical School.

UPMC

upmc.com

UPMC is a world-renowned, nonprofit health care provider and insurer committed to delivering exceptional, people-centered care and community services. Headquartered in Pittsburgh and affiliated with the University of Pittsburgh Schools of the Health Sciences, UPMC is shaping the future of health through clinical and technological innovation, research, and education. Dedicated to advancing the well-being of our diverse communities, we provide nearly $2 billion annually in community benefits, more than any other health system in Pennsylvania. Our 100,000 employees — including more than 5,000 physicians — care for patients across more than 40 hospitals and 800 outpatient sites in Pennsylvania, New York, and Maryland, as well as overseas. UPMC Insurance Services covers more than 4 million members, providing the highest-quality care at the most affordable price. To learn more, visit UPMC.com.

Kaiser Permanente

cb kp.org

At the heart of health care, you’ll find Kaiser Permanente. As the nation’s leading not-for-profit, integrated health plan, we make a difference in the lives of members, patients, and communities across the country. With 39 hospitals and more than 734 locations in eight states and the District of Columbia, we proudly serve more than 12.7 million members from coast to coast. Whether you choose to join a hospital in the Northwest, a clinic in Southern California, or a medical office in the Mid-Atlantic, we have many opportunities for you to shape the future of care. Our teams are empowered to advance impactful and extraordinary care for all by pioneering health outcomes, encouraging diverse viewpoints, and creating new opportunities for learning and advancement. This covers more than our members and our employees; it also reaches far into our communities. Together, we’re proudly working as one for a healthier today and tomorrow. *Disclaimer: Please do not include any medical, personal, or confidential information in your comments. Comments are encouraged; however, Kaiser Permanente reserves the right to moderate comments on this page as necessary to prevent medical, personal, and confidential information from being posted on this site. In addition, Kaiser Permanente will remove all spam, personal attacks, profanity, and off-topic commentary. Comments containing advertisements about goods or services or announcements about news or events that are not related to Kaiser Permanente will be removed. Please note that your communications with Kaiser Permanente through this page are informal and are not part of Kaiser Permanente’s formal grievance process for members. To get information about the member grievance process or to submit a grievance, go to http://k-p.li/2aToRTn

BJC Health

bjc.org

BJC Health System is one of the largest nonprofit health care organizations in the United States and the largest in the state of Missouri, serving urban, suburban, and rural communities across Missouri, southern Illinois, eastern Kansas, and the greater Midwest region. One of the largest employers in Missouri, BJC operates as BJC HealthCare in its Eastern Region and as Saint Luke’s Health System in its Western Region. BJC comprises 24 hospitals and hundreds of clinics and service organizations all committed to providing extraordinary patient care and advancing medical breakthroughs. BJC’s nationally recognized academic hospitals—Barnes-Jewish and St. Louis Children’s hospitals—are affiliated with Washington University School of Medicine.

Norton Healthcare

cb NortonHealthcare.com

Norton Healthcare is a leader in serving adult and pediatric patients from throughout Greater Louisville, Southern Indiana, the commonwealth of Kentucky and beyond. The not-for-profit hospital and health care system is Louisville’s second largest employer, with more than 18,600 employees, over 1,750 employed medical providers and nearly 3,000 total providers on its medical staff. Norton Healthcare has five Louisville-based hospitals with a total of 1,907 licensed beds. Norton West Louisville Hospital is scheduled to open in late 2024. The system also includes eight outpatient centers, 18 Norton Immediate Care Centers, eight Norton Prompt Care at Walgreens clinics and an expanded telehealth program. It provides care at more than 350 locations throughout Kentucky and Southern Indiana. The hospitals provide inpatient and outpatient general care as well as specialty care including heart, neuroscience, cancer, orthopedic, women’s and pediatric services. A strong research program provides access to clinical trials in a multitude of areas. Norton King’s Daughters’ Health in Madison, Indiana, also is part of Norton Healthcare. Read more at KDHMadison.org/About-Us. Since 2018, Norton Healthcare’s five Louisville hospitals and Norton Cancer Institute have been named LGBTQ+ Healthcare Equality Leaders by the Human Rights Campaign Foundation, earning a top score of 100 on the Healthcare Equality Index (HEI). Norton Healthcare also was recognized in 2022 as one of the “Best Places to Work for Disability Inclusion” by the Disability Equality Index. To learn more about career opportunities, visit NortonHealthcareCareers.com.

The Ohio State University Wexner Medical Center

osu.edu

At The Ohio State University Wexner Medical Center you will find more than a job – you can establish a career that allows you to actually change the face of medicine. As central Ohio's only academic medical center, we emphasize learning, development and innovation in order to offer the very best in personalized care to over 1.7 million patients each year. There's plenty of opportunity for career growth too, because Ohio State's Wexner Medical Center encompasses seven hospitals, fourteen primary care offices, a walk-in clinic, two After-Hours Care locations and eleven multi-specialty clinics, as well as the College of Medicine, the School of Health and Rehabilitation Sciences, the health sciences library and the Faculty Group Practice. You'll find clinical care offered in virtually every medical specialty and subspecialty and an interdisciplinary team of healthcare experts beyond compare. Ohio State offers great pay, complete benefits, state retirement options, tuition assistance and access to the cultural and sporting resources at one of the nation’s largest universities (learn more at wexnermedical.osu.edu/careers). Outside of work, you'll discover a great quality of life. Columbus is the nation's 14th largest city with beautiful neighborhoods and a full range of activities and entertainment options. Everything we do is driven by our strategic plan, which is built on our mission to improve health in Ohio and across the world through innovation in research, education and patient care. To accomplish this, our vision calls us to push the boundaries of discovery and knowledge to solve significant problems and deliver unparalleled care. If this sounds appealing to you and you share our values of inclusiveness, determination, empathy, sincerity, ownership and innovation, Ohio State may be the perfect fit for you. Apply today and let's see what we can do together to change the world through medicine.

Highmark Health

cb highmarkhealth.org

A national blended health organization, Highmark Health and our leading businesses support millions of customers with products, services and solutions closely aligned to our mission of creating remarkable health experiences, freeing people to be their best. Headquartered in Pittsburgh, we're regionally focused in Pennsylvania, Delaware, West Virginia and New York, with customers in all 50 states and the District of Columbia. We passionately serve individual consumers and fellow businesses alike. Our companies cover a diversified spectrum of essential health-related needs, including health insurance, health care delivery, population health management, dental solutions, reinsurance solutions, and innovative technology solutions. Our financial position reflects strength and stability, with our year-end 2024 consolidated revenues totaling $29.4 billion. We’re also proud to carry forth an important legacy of compassionate care and philanthropy that began more than 170 years ago. This tradition of giving back, reinvesting and ensuring that our communities remain strong and healthy is deeply embedded in our culture, informing our decisions every day.

HCA Healthcare

hcahealthcare.com

HCA Healthcare is dedicated to giving people a healthier tomorrow. As one of the nation’s leading providers of healthcare services, HCA Healthcare is comprised of 189 hospitals and approximately 2,600 sites of care in 19 states and the United Kingdom. In addition to hospitals, sites of care include surgery centers, freestanding ERs, urgent care centers, diagnostic and imaging centers, walk-in clinics and physician clinics. Many things set HCA Healthcare apart from other healthcare organizations; however, at our core, our greatest strength is our people. Every day, more than 320,000 colleagues go to work with a collective focus: our patients. Our focus positively impacts the care experience at the bedside and beyond. We are proud of the impact we have in our communities through employment, investment and charitable giving. HCA Healthcare is a learning health system that uses our approximately 47 million annual patient encounters to advance science, improve patient care and save lives. At HCA Healthcare, we are excited about the future of medicine. We believe we are uniquely positioned to play a leading role in the transformation of care. Note: Be alert for fraudulent job postings, emails, and phone calls. HCA Healthcare will never send you money or ask you to send money during the interview or hiring process.

Loading…

NEWS

Children's Specialized Hospital CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 14, 2025 08:00 AM

King Abdullah Medical Complex Jeddah and Maternity and Children's Specialist Hospital optimize operations with InterSystems TrakCare MEUI Upgrade

KAMCJ is a 500-bed hospital complex under the Ministry of Health.

Read Article

October 18, 2024 07:00 AM

These 3 Texas children's hospitals rank among the best in the US. See full list

Three Texas children's hospitals scored among the highest nationally in a recent study by U.S. News. See which ranks high in pediatric...

Read Article

September 17, 2024 07:00 AM

My Special Aflac Duck® 'boroughs' into a new home: Children's Hospital at Montefiore in The Bronx

40 of the robotic companions donated to pediatric cancer and sickle cell patients courtesy of Aflac. BRONX, N.Y., Sept.

Read Article

September 09, 2024 07:00 AM

Strategies for Six Issues Facing Children's Hospitals

Discover strategies for mental health screenings, workplace violence, artificial intelligence, CLABSIs, Cybersecurity, and REaL data.

Read Article

August 22, 2024 06:57 PM

Opening a World of Possibilities for Those on the Autism Spectrum

Children's Specialized Hospital has opened a new Autism Center of Excellence to help patients and their families navigate the treatment process.

Read Article

August 14, 2024 09:03 PM

At Norton Children's Hospital, the tiniest babies get specialized care

The Tiny Baby Unit is a dedicated section of the Norton Children's Hospital NICU solely for babies who weigh 2.75 pounds or less at birth.

Read Article

July 12, 2024 07:00 AM

IAEA Board condemns attack on Kyiv children's hospital, blaming Russia

The U.N. nuclear watchdog's Board of Governors passed a resolution on Friday condemning Monday's military strike on a children's hospital in...

Read Article

July 08, 2024 07:00 AM

Nearly 800,000 affected by children’s hospital ransomware attack

Ann & Robert H. Lurie Children's Hospital of Chicago was impacted by a ransomware attack.

Read Article

July 01, 2024 07:00 AM

Lurie Children's Hospital says nearly 800K patients' data compromised in cyberattack

After a cybersecurity breach in January, Lurie Children's Hospital of Chicago reactivated its patient-facing Epic MyChart services last...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Children's Specialized Hospital Vendor Cyber Rating & Cyber Score

CSH A.I CyberSecurity Scoring

Children's Specialized Hospital CyberSecurity News & History

CSH Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for CSH

Incidents vs Hospitals and Health Care Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types CSH vs Hospitals and Health Care Industry Avg (This Year)

Incident History - CSH (X = Date, Y = Severity)

Children's Specialized Hospital Subsidiaries

CSH

Children's Specialized Hospital Similar Companies

University of Maryland Medical System

RWJBarnabas Health

UPMC

Kaiser Permanente

BJC Health

Norton Healthcare

The Ohio State University Wexner Medical Center

Highmark Health

HCA Healthcare

Children's Specialized Hospital CyberSecurity News

King Abdullah Medical Complex Jeddah and Maternity and Children's Specialist Hospital optimize operations with InterSystems TrakCare MEUI Upgrade

These 3 Texas children's hospitals rank among the best in the US. See full list

My Special Aflac Duck® 'boroughs' into a new home: Children's Hospital at Montefiore in The Bronx

Strategies for Six Issues Facing Children's Hospitals

Opening a World of Possibilities for Those on the Autism Spectrum

At Norton Children's Hospital, the tiniest babies get specialized care

IAEA Board condemns attack on Kyiv children's hospital, blaming Russia

Nearly 800,000 affected by children’s hospital ransomware attack

Lurie Children's Hospital says nearly 800K patients' data compromised in cyberattack

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Children's Specialized Hospital CyberSecurity News & History

CSH Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for CSH

Incidents vs Hospitals and Health Care Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types CSH vs Hospitals and Health Care Industry Avg (This Year)

Incident History - CSH (X = Date, Y = Severity)

Children's Specialized Hospital Subsidiaries

CSH

Children's Specialized Hospital Similar Companies

University of Maryland Medical System

RWJBarnabas Health

UPMC

Kaiser Permanente

BJC Health

Norton Healthcare

The Ohio State University Wexner Medical Center

Highmark Health

HCA Healthcare

Children's Specialized Hospital CyberSecurity News

King Abdullah Medical Complex Jeddah and Maternity and Children's Specialist Hospital optimize operations with InterSystems TrakCare MEUI Upgrade

These 3 Texas children's hospitals rank among the best in the US. See full list

My Special Aflac Duck® 'boroughs' into a new home: Children's Hospital at Montefiore in The Bronx

Strategies for Six Issues Facing Children's Hospitals

Opening a World of Possibilities for Those on the Autism Spectrum

At Norton Children's Hospital, the tiniest babies get specialized care

IAEA Board condemns attack on Kyiv children's hospital, blaming Russia

Nearly 800,000 affected by children’s hospital ransomware attack

Lurie Children's Hospital says nearly 800K patients' data compromised in cyberattack

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo