What is the official website of CommuteAir ?

The official website of CommuteAir is https://www.commuteair.com.

What is CommuteAir's cybersecurity risk score?

CommuteAir has an AI-generated cybersecurity risk score of 688 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has CommuteAir experienced?

According to Rankiteo, CommuteAir currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CommuteAir been affected by any supply chain cyber incidents ?

According to Rankiteo, CommuteAir has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CommuteAir have SOC 2 Type 1 certification ?

According to Rankiteo, CommuteAir is not certified under SOC 2 Type 1.

Does CommuteAir have SOC 2 Type 2 certification ?

According to Rankiteo, CommuteAir does not hold a SOC 2 Type 2 certification.

Does CommuteAir comply with GDPR ?

According to Rankiteo, CommuteAir is not listed as GDPR compliant.

Does CommuteAir have PCI DSS certification ?

According to Rankiteo, CommuteAir does not currently maintain PCI DSS compliance.

Does CommuteAir comply with HIPAA ?

According to Rankiteo, CommuteAir is not compliant with HIPAA regulations.

Does CommuteAir have ISO 27001 certification ?

According to Rankiteo,CommuteAir is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CommuteAir operate in ?

CommuteAir operates primarily in the Airlines and Aviation industry.

How many employees does CommuteAir have ?

CommuteAir employs approximately 901 people worldwide.

Does CommuteAir own any subsidiaries ?

CommuteAir presently has no subsidiaries across any sectors.

How many LinkedIn followers does CommuteAir have ?

CommuteAir's official LinkedIn profile has approximately 28,607 followers.

What is the NAICS classification code for CommuteAir ?

CommuteAir is classified under the NAICS code 481, which corresponds to Air Transportation.

Does CommuteAir have a Crunchbase profile ?

No, CommuteAir does not have a profile on Crunchbase.

Does CommuteAir have a LinkedIn profile ?

Yes, CommuteAir maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/commuteair.

How many cybersecurity incidents has CommuteAir experienced ?

As of August 27, 2026, Rankiteo reports that CommuteAir has experienced 2 cybersecurity incidents.

How many peer or competitor companies does CommuteAir have ?

CommuteAir has an estimated 3,846 peer or competitor companies worldwide.

What types of cybersecurity incidents has CommuteAir faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CommuteAir

Boost Score +25 with badge (5 left)

688

/1000

Weak

713

/1000

Moderate

CommuteAir Vendor Cyber Rating & Cyber Score

commuteair.com

Add Your Compliance Badge

CommuteAir is a regional airline operating flights on behalf of United Airlines as a United Express partner. With a fleet of more than 55 Embraer ERJ145 aircraft, CommuteAir operates up to 1,600 weekly flights - connecting people and communities to the world via United's global network. Headquartered in Cleveland, CommuteAir has major hubs in Houston and Washington Dulles. Additionally, the company operates maintenance hangars in Houston, Albany, and Lincoln. Founded in 1989, CommuteAir is majority-owned by Champlain Enterprises, Inc. and 40% owned by United Airlines, Inc.

CommuteAir A.I CyberSecurity Scoring

Scoring History

CommuteAir

CommuteAir CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

CommuteAir

Breach

1/2023

COM442072625

CommuteAir

Breach

11/2022

COM017091825

Loading…

A.I.

CommuteAir Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CommuteAir

Incidents vs Airlines and Aviation Industry Avg (This Year)

No incidents recorded for CommuteAir in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CommuteAir in 2026.

Incident Types CommuteAir vs Airlines and Aviation Industry Avg (This Year)

No incidents recorded for CommuteAir in 2026.

Incident History - CommuteAir (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CommuteAir Subsidiaries

Parent Company

CommuteAir

Airlines and Aviation

Website: https://www.commuteair.com

Company Size: 1,001-5,000 employees

No subsidiary data available for this company.

Loading…

CommuteAir Similar Companies

SpiceJet Limited

cb spicejet.com

Red. Hot. Spicy. That’s not just our tagline, it’s how we fly. Red reflects the bold spirit we bring to every journey, energetic, passionate, and full of heart. Hot captures the warmth of our service and the vibrant destinations we connect. Spicy is our drive to keep travel exciting through innovation and industry-firsts. Since 2005, SpiceJet has been shaping India’s aviation journey, connecting people, places, and possibilities. We pioneered regional air connectivity under the UDAN scheme, making air travel more accessible across the country. We led several industry-firsts, including India’s first biofuel-powered flight, the first seaplane, and in-flight entertainment on personal devices. Our premium economy product, SpiceMax, brings added comfort, priority services, and hot meals, redefining low-cost travel. At SpiceJet, we fly with passion, powered by people, always Red. Hot. Spicy.

Alaska Airlines

cb alaskaair.jobs

We’re creating an airline people love. It begins with each Alaska Airlines employee, bringing unique strengths and energy to our work in the air and on the ground. Every day, we go beyond what’s expected and reach for the remarkable, together. Welcome to our LinkedIn page. We like conversations on our page, but comments that contain profanity, hate speech, spam or are otherwise offensive will be removed. Out of respect for our employees' privacy, we reserve the right to hide or remove any post or comment that is disparaging or has negative intent towards our employees. Our Social Care Team is here for you 24/7. If you require assistance or need an official response, please contact us at http://bit.ly/ContactAK.

IndiGo (InterGlobe Aviation Ltd)

cb goindigo.in

IndiGo is India’s largest passenger airline. We operate with focus on our three pillars – offering low fares, being on-time and delivering a courteous and hassle-free experience. IndiGo has become synonymous with being on-time. Since our inception in August 2006, we have grown from a carrier with one plane to a fleet of 400+ aircraft today. A uniform fleet for each type of operation, high operational reliability and an award winning service make us one of the most reliable airlines in the world. IndiGo has a total destination count of 130+ destinations with 90+ domestic destinations and 40+ International destinations.

LATAM Airlines

linktr.ee

We are the leading airline in South America with the largest destinations, frequencies and aircraft fleet offer. We have the largest network of domestic destinations in five South American markets: Brazil, Chile, Colombia, Ecuador and Peru, and international operations in Latin America, Europe, the United States, Oceania and the Caribbean. Discover your next destination at latam.com Follow us on: Facebook: www.facebook.com/LATAMAirlines Twitter: www.twitter.com/LATAMAirlines YouTube: www.youtube.com/LATAMAirlines_EN Instagram: www.instagram.com/LATAMAirlines

SAUDI AIRLINES

saudia.com

At Saudia Group, we're on a mission to inspire people to go beyond borders. Our purpose is rooted in unlocking human potential and connecting the world in ways never thought possible. We are committed to reshaping the aviation ecosystem in our region and beyond, by embracing innovation and a customer-centric approach. Our Vision: To be the preferred choice of a customer-centric aviation ecosystem from the region. Our Mission: By driving synergies, unlocking opportunities, and embracing a tech-first mindset, we will maximize sustainable value creation, and earn the loyalty of our people, customers, and communities. Our Core Values: - Customer Centricity - People - Heritage & Innovation - Collaboration - Collective Accountability - Excellence These values are the guiding principles that define our culture and drive our decisions. We are dedicated to nurturing a workplace where everyone feels valued and empowered to contribute to our shared vision. Join us on this exhilarating journey of redefining aviation, breaking boundaries, and fostering connections across the globe.

AirAsia

airasia.com

It all starts here. 23 years ago, a dream took flight - shaping and forever changing the travel industry in Asia. The idea was simple: Make flying affordable for everyone. We made that dream happen. We started an airline in 2001. Today, we’ve evolved to become something much bigger. We’re now a world-class brand, a leading Asean airline, a digital travel and lifestyle platform; and we’re not stopping. If you’re passionate about connecting people and transforming lives, we want you onboard. When it comes to your career, your Allstar journey will be an adventure. Find your dream career destination with us.

Singapore Airlines

cb singaporeair.com

Welcome aboard Singapore Airlines on LinkedIn. Discover travel inspirations, business travel tips, cultural insights, our latest updates, and more. Singapore Airlines is a global company dedicated to providing air transportation services of the highest quality and to maximising returns for the benefit of its shareholders and employees. We have come a long way since our founding in 1972, evolving from a regional airline to one of the most respected travel brands around the world. We fly one of the youngest aircraft fleets in the world to destinations spanning a network across five continents, with the famed Singapore Girl as our internationally-recognisable icon providing the high standards of care and service that customers have come to expect of us. Please refer to https://bit.ly/2Z2MVN1 for guidelines on our social media channels.

Lufthansa

cb lufthansa.com

Lufthansa is one of the world’s leading airlines, connecting passengers to over 200 destinations across 74 countries from our hubs in Frankfurt and Munich. As an industry pioneer, we are committed to shaping the future of sustainable aviation, investing in next-generation aircraft, cutting-edge technology, and digital solutions. Our goal is to drive excellence: not just in the sky, but across every touchpoint of the travel experience. With Lufthansa Allegris, our new long-haul experience, we are setting a new standard in premium travel, introducing a completely redesigned First, Business, Premium Economy, and Economy Class for ultimate comfort and choice. We continue to enhance the travel experience with state-of-the-art lounges, award-winning service, and onboard broadband Wi-Fi (FlyNet) across our entire long-haul fleet. Follow us for updates on how we're shaping the future of aviation. For more information, reservations or customer service, visit lufthansa.com or follow us on Facebook, X and Instagram. We look forward to welcoming you onboard. This LinkedIn page is maintained by Deutsche Lufthansa AG. We will not answer specific Customer Service queries here on LinkedIn. If you have an immediate concern or need to contact us please visit http://www.lufthansa.com/us/en/imprint

Etihad

etihad.com

Marhaba! Welcome to Etihad Airways. We are proud to be the national airline of the UAE, flying to 100+ destinations via Abu Dhabi. At Etihad, we don't stop at the border of what's possible, we go beyond it. Proudly inspired by our Emirati identity, we are dedicated to delivering extraordinary travel experiences, helping our guests realise their ambitions. Our journey started in 2003. Since then, we have proudly helped millions of guests travel the globe. We are honoured to have had over 12 million valued members join our Etihad Guest loyalty programme. Diversity is key in driving us forward. At 12,000+ employees representing 140+ nationalities, our team comes together to deliver exceptional experiences at every stage of the journey. If you share our spirit of ambition and would like to reach new heights, visit https://careers.etihad.com/

Loading…

NEWS

CommuteAir CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 30, 2023 08:00 AM

TSA issues security directive to airports, carriers after 'no-fly' list leak

TSA issued a security directive to all U.S. airports and air carriers demanding tougher cybersecurity rules after the leak of the no-fly...

Read Article

January 27, 2023 08:00 AM

Green & Bishop Demand Answers on Hack of TSA No-Fly List Data

Committee on Homeland Security Chairman Mark E. Green, MD (R-TN) and Representative Dan Bishop (R-NC) are demanding answers from the Transportation Security...

Read Article

January 23, 2023 08:00 AM

TSA's no-fly list was exposed by a hacker who found it when she was "bored"

The list was found in an unsecured server hosted by CommuteAir.

Read Article

January 23, 2023 08:00 AM

The TSA’s Entire No Fly List Appears to Have Just Leaked

A Swiss cybersecurity hacktivist has leaked the TSA's No-Fly List, a highly sensitive document, after discovering it on an unsecured server.

Read Article

January 23, 2023 08:00 AM

The U.S. ‘No Fly List’ Found On the Open Internet

The Ohio-based airline, CommuteAir, responsible for the incident confirmed the legitimacy of the data to the media.

Read Article

January 23, 2023 01:26 AM

The No-Fly List Has Been Leaked, TSA Investigating ‘Cybersecurity Incident’

A Swiss hacker known as “maia arson crimew” has got hold of a copy of the list—albeit a version from a few years ago—not by getting past fortress-like layers of...

Read Article

January 22, 2023 08:00 AM

Hacktivist Discovered U.S. No Fly List on Unsecured Airline Server

A copy of the No Fly List from 2019 has leaked, uncovered by a Swiss cybersecurity researcher and hacktivist who claims to have discovered it on an unsecured...

Read Article

January 20, 2023 08:00 AM

TSA investigating how some no-fly list data was exposed on internet

The Transportation Security Administration said it was investigating a “potential cybersecurity incident” after a hacker claimed to access an older version of...

Read Article

January 19, 2023 08:00 AM

EXCLUSIVE: U.S. airline accidentally exposes ‘No Fly List’ on unsecured server

Leaked TSA No Fly List: CommuteAir, a regional carrier, left a copy of the U.S. No Fly List on an unsecured server.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-81203

SUMMARY

A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=login2. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-80158

SUMMARY

A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no_log, unlike the sibling password parameter in the same module. As a consequence, the supplied IPA/LDAP bind password is recorded in cleartext in the managed host's system journal/syslog (the module's "Invoked with" record), is included in the module's return values and verbose (-v) output, and is displayed in Automation Controller / AWX job output. The password is additionally passed on the command line to the ipa-getkeytab helper (as --bindpw <value>), exposing it in the process list to local users while the command runs. An attacker able to read these logs, job output, or the process table can obtain the directory bind credential, potentially compromising the accounts and objects that credential can access.

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

1.8

REFERENCES

CVE-2026-75340

SUMMARY

The device metadata import interface /device/instance/{productId}/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery (SSRF).

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/fangtang7/CVE/blob/main/jetlinks-community/ssrf.md

CVE-2026-75338

SUMMARY

disconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access Control. The config-fetching APIs /api/config/item, /api/config/file, /api/config/list and /api/config/simple/list are exposed without authentication. The LoginInterceptor explicitly whitelists these four paths, so any anonymous attacker can read every configuration item and configuration file managed by the config center.

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/fangtang7/CVE/blob/main/disconf/Unauthenticated.md

CVE-2026-75336

SUMMARY

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json.

Published

Date2026-08-26

Updated

Date2026-08-26

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

https://github.com/fangtang7/CVE/blob/main/funiture/SQL%20Injection.md

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…