Comparison Overview
COMO Metropolitan London
COMO Metropolitan London
Old Park Lane, London, W1K 1LB, GB
Last Update: 29/11/2025
COMO Metropolitan London combines contemporary design, a vibrant Park Lane location and expert staff. Japanese-Peruvian restaurant Nobu features award-winning cuisine situated on the first floor of the property. COMO Shambhala Urban Escape offers holistic therapies, yog...
IHG Hotels & Resorts
Windsor Dials 1, Arthur Road, Windsor, Berkshire, GB, SL4 1RS
Last Update: 27/05/2026
IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. With a family of 21 hotel brands and IHG One Rewards, one of the world's largest hotel loyalty programmes, IHG has over 7,000 open hote...
Compliance Ranges Comparison
COMO Metropolitan London
IHG Hotels & Resorts
Benchmark & Cyber Underwriting Signals
Incidents vs Hospitality Industry Avg (This Year)
No incidents recorded for COMO Metropolitan London in 2026.
Incidents vs Hospitality Industry Avg (This Year)
No incidents recorded for IHG Hotels & Resorts in 2026.
Incident History - COMO Metropolitan London (X = Date, Y = Severity)
COMO Metropolitan London cyber incidents detection timeline including parent company and subsidiaries.
Incident History - IHG Hotels & Resorts (X = Date, Y = Severity)
IHG Hotels & Resorts cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
COMO Metropolitan London
IHG Hotels & Resorts
FAQ
Latest Global CVEs
Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.
WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contact_id in the POST request body without tenant ownership verification. Attackers can exploit the service-role client that bypasses row-level security to modify victim contact fields including name, email, and company across tenant boundaries using only a known contact UUID.
Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.
When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.
Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable to a path traversal / authorization bypass in the Headscale API client used by node and user rename operations. This issue has been patched in versions 0.6.3 and 0.7.0-beta.3.