What is the official website of Cityscape Global ?

The official website of Cityscape Global is https://linktr.ee/cityscapeglobal.

What is Cityscape Global's cybersecurity risk score?

Cityscape Global has an AI-generated cybersecurity risk score of 752 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Cityscape Global experienced?

According to Rankiteo, Cityscape Global currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Cityscape Global been affected by any supply chain cyber incidents ?

According to Rankiteo, Cityscape Global has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Cityscape Global have SOC 2 Type 1 certification ?

According to Rankiteo, Cityscape Global is not certified under SOC 2 Type 1.

Does Cityscape Global have SOC 2 Type 2 certification ?

According to Rankiteo, Cityscape Global does not hold a SOC 2 Type 2 certification.

Does Cityscape Global comply with GDPR ?

According to Rankiteo, Cityscape Global is not listed as GDPR compliant.

Does Cityscape Global have PCI DSS certification ?

According to Rankiteo, Cityscape Global does not currently maintain PCI DSS compliance.

Does Cityscape Global comply with HIPAA ?

According to Rankiteo, Cityscape Global is not compliant with HIPAA regulations.

Does Cityscape Global have ISO 27001 certification ?

According to Rankiteo,Cityscape Global is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Cityscape Global operate in ?

Cityscape Global operates primarily in the Real Estate industry.

How many employees does Cityscape Global have ?

Cityscape Global employs approximately 13 people worldwide.

Does Cityscape Global own any subsidiaries ?

Cityscape Global presently has no subsidiaries across any sectors.

How many LinkedIn followers does Cityscape Global have ?

Cityscape Global's official LinkedIn profile has approximately 21,120 followers.

Does Cityscape Global have a Crunchbase profile ?

No, Cityscape Global does not have a profile on Crunchbase.

Does Cityscape Global have a LinkedIn profile ?

Yes, Cityscape Global maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/csglobalksa.

How many cybersecurity incidents has Cityscape Global experienced ?

As of October 20, 2026, Rankiteo reports that Cityscape Global has not experienced any cybersecurity incidents.

How many peer or competitor companies does Cityscape Global have ?

Cityscape Global has an estimated 30,381 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Cityscape Global

Boost Score +25 with badge (5 left)

752

/1000

Fair

777

/1000

Fair

Cityscape Global Vendor Cyber Rating & Cyber Score

linktr.ee

Add Your Compliance Badge

The world's largest real estate exhibition. Experience the next generation of real estate innovation at Cityscape Global 2025, where industry leaders, innovators, and visionaries gather to shape the future of how we live, work, and thrive. 🗓️ 17-20 November 2025 📍 Riyadh Exhibition & Convention Center, Malham, Saudi Arabia

Cityscape Global

Cityscape Global CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Cityscape Global Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Cityscape Global

Incidents vs Real Estate Industry Avg (This Year)

No incidents recorded for Cityscape Global in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Cityscape Global in 2026.

Incident Types Cityscape Global vs Real Estate Industry Avg (This Year)

No incidents recorded for Cityscape Global in 2026.

Incident History - Cityscape Global (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Cityscape Global Subsidiaries

Cityscape Global

Real Estate

Website: https://linktr.ee/cityscapeglobal

Company Size: 13

Informa MarketsEvents Services

HIMSSNon-profit Organizations

HIMSS Global Health Conference & ExhibitionEvents Services

LEAPEvents Services

WHX DubaiEvents Services

Black Hat MEAEvents Services

Global Health Exhibition - ملتقى الصحة العالميEvents Services

VIBE SAUDIEvents Services

Seatrade CruiseEvents Services

F&B@SeaFood and Beverage Services

World of ConcreteConstruction

Informa Markets in AsiaEvents Services

HOFEXFood and Beverage Services

Restaurant, Bar & Café Hong KongEvents Services

The Battery Show AsiaEvents Services

Data Center AsiaEvents Services

APLFEvents Services

Natural & Organic AsiaEvents Services

The Battery Show EuropeAppliances, Electrical, and Electronics Manufacturing

HospitalarAdvertising Services

The Battery ShowEvents Services

PharmaconexEvents Services

Pharmaconex NigeriaPharmaceutical Manufacturing

Manufacturing by InformaEvents Services

PlasticsTodayTechnology, Information and Media

MD&M Trade ShowsEvents Services

MD+DITechnology, Information and Media

Powder & Bulk SolidsTechnology, Information and Media

Pharmaceutical & Medical Packaging News (PMPN)Packaging and Containers Manufacturing

Packaging DigestTechnology, Information and Media

Design NewsTechnology, Information and Media

MedTech WorldMedical Equipment Manufacturing

Qmed NewsMedical Equipment Manufacturing

HBA EventsPackaging and Containers Manufacturing

EMDTMedical Equipment Manufacturing

Electric & Hybrid Vehicle Technology ExpoEvents Services

Jakarta International ExpoEvents Services

Hong Kong Convention and Exhibition Centre (Management) LimitedEvents Services

Informa U.S. Boat ShowsEvents Services

Nigeria EnergyEvents Services

Electric & Hybrid Vehicle Technology Expo EuropeAppliances, Electrical, and Electronics Manufacturing

Pharmapack EuropeEvents Services

HOTELEXEvents Services

UBM Sinoexpo-ExpofinefoodEvents Services

UBM Sinoexpo-Hotel SuppliesEvents Services

UBM Sinoexpo-Wine & SpiritsEvents Services

UBM Sinoexpo-Coffee & TeaEvents Services

Gulf Print & PackPrinting Services

Cosmoprof AsiaEvents Services

EXPOMAFEMachinery Manufacturing

Fi IndiaEvents Services

Fi India AwardsFood and Beverage Manufacturing

Aircraft Interiors Middle East- AIMEAviation and Aerospace Component Manufacturing

ABASTUREvents Services

WWETT ShowUtilities

Concrete ShowConstruction

ISSA Show North AmericaEvents Services

GROWTECH. EventsEvents Services

CAMWATERGovernment Administration

InFlavourFood and Beverage Services

FIREX EgyptEvents Services

EastPack LimitedFarming

CMA ShippingMaritime Transportation

Mining IndonesiaMining

FHC - Shanghai Global Food Trade ShowEvents Services

DesignConEvents Services

THE GREEN EXPO® MEXICOEvents Services

AQUACULTURE VIETNAM EXPO & FORUMEvents Services

Global Aerospace SummitAirlines and Aviation

METALTECH & AUTOMEXMachinery Manufacturing

Art MiamiEvents Services

VIETSTOCK Expo & ForumEvents Services

Intertraffic AmericasFacilities Services

Thermal Management ExpoEvents Services

Cityscape BahrainReal Estate

Informa Markets - MéxicoEvents Services

Furniture ChinaEvents Services

Untitled ArtArtists and Writers

Informa Markets MalaysiaEvents Services

Super Terminal ExpoEvents Services

Newport International Boat ShowEvents Services

Sustainable Manufacturing ConferenceEvents Services

Adhesives & Bonding Expo EuropeEvents Services

Build Show LIVEResidential Building Construction

COTTM - China Outbound Travel & Tourism MarketEvents Services

Informa Markets in the PhilippinesEvents Services

UTECH LAS AMÉRICASPlastics and Rubber Product Manufacturing

TOC AsiaEducation

Electric & Power IndonesiaAppliances, Electrical, and Electronics Manufacturing

Medlab Middle East by BeelalRetail Health and Personal Care Products

Client Solutions - North AmericaEvents Services

OSH BangladeshEvents Services

Water IndonesiaEvents Services

Beauty Expo AustraliaEvents Services

OSH IndiaPublic Safety

Informa Markets - Infrastructure & ConstructionEvents Services

Autotech EgyptMotor Vehicle Manufacturing

Construction Indonesia & Concrete Show SEAConstruction

ESTAADEvents Services

Loading…

Cityscape Global Similar Companies

Coldwell Banker

cb coldwellbanker.com

Welcome to Coldwell Banker Real Estate LLC, a company founded in 1906 on a commitment to professionalism and customer service which remains the cornerstone of our business philosophy today. We are the nation’s oldest real estate company and our experience has helped make the dream of homeownership a reality for millions of families. Whether you are a first-time buyer or in the process of stepping up to your dream home, coldwellbanker.com is a great place to begin the process. We have made everything available to you 24/7 and only a click away - including information on properties for sale and access to the most professional sales agents in the business. Coldwell Banker affiliated real estate agents are the reason clients continue to work with us, transaction after transaction. Their knowledge and experience can guide you through the real estate process and help you with all of the details before, during and after the sale. Coldwell Banker is an Anywhere (NYSE: HOUS) brand.

Greystar

greystar.com

Founded in 1993, Greystar provides world-class service in the residential rental housing industry. Our innovative vertically integrated business model integrates the management, development and investment disciplines of the rental housing industry on international, regional and local levels. This unique approach and our commitment to hiring the best professionals have resulted in record growth, making us one of the most respected and trusted global real estate companies. Because our vertically integrated business model includes both investment and service-oriented businesses, we’re able to maintain a constant presence in local markets and create value in all phases of the real estate cycle. Our international platform provides economies of scale, financial sophistication, institutional quality reporting and tremendous capital relationships, while our city offices provide local market expertise and execution. Supported by a global team of 28,000+ employees, Greystar’s experienced and cross-functional executive team boasts on average over 23 years of industry experience and provides a diverse perspective throughout the investment process. Over the years, Greystar has learned what’s important to people when it comes to a place to call home. That’s why we continually strive to provide beautiful living environments and innovative services that enhance the living experience. We take great pride in knowing that our homes are inviting places for residents to celebrate life’s important moments. Privacy Policy: https://www.greystar.com/privacy DMCA: https://www.greystar.com/terms-of-use#Copyright%20Infringement%20Policy

Shimao Group

shimaogroup.com

Shimao Group has entered the real estate industry since 1989, After more than 30 years of development, the Group has made its layout in more than 100 core development cities across China, involving real estate, commercial, property management, hotel, theme entertainment and culture. Following the national strategy, Shimao continuously provides customers with high-level quality experience in living, life, consumption, business and tourism, leading the lifestyle and serving a better life.

Compass

cb compass.com

Compass is a real estate technology company with a powerful end-to-end platform that supports the entire buying and selling workflow. We deliver an incomparable experience to both agents and their clients all in service of the Compass mission: to help everyone find their place in the world. Founded in 2012 by Ori Allon and Robert Reffkin, Compass operates in 22+ regions across the United States including New York, Los Angeles and Orange County, Chicago, San Francisco, Boston, Washington D.C., South Florida, The Hamptons, Santa Barbara & Montecito, San Diego, Seattle & Eastside, Philadelphia, Connecticut, Westchester, Aspen, Boulder, Denver, Atlanta, Austin & Central Texas, Dallas-Fort Worth, Houston, Nashville, and Lake Tahoe. Learn more and find your place at www.compass.com and www.compass.com/careers. Compass only reaches out to applicants from a @compass.com domain and does not prompt applicants to download software or files as part of its application process.

Keller Williams Realty, LLC

kw.com

Austin, Texas-based Keller Williams, the world’s largest real estate franchise by agent count, has more than 1,100 offices and 176,000 agents. The franchise is also No. 1 in units and sales volume in the United States. Since 1983, the company has cultivated an agent-centric, technology-driven, and education-based culture that rewards agents as stakeholders. For more information, visit headquarters.kw.com.

Lopes Consultoria de Imóveis

lopes.com.br

A GARANTIA DE SER LOPES A Lopes é a maior empresa de soluções integradas de intermediação, consultoria e promoção de financiamentos de imóveis do Brasil. Está presente em 10 estados - São Paulo, Rio de Janeiro, Minas Gerais, Espírito Santo, Rio Grande do Sul, Paraná, Santa Catarina, Bahia, Pernambuco e Ceará - além do Distrito Federal. Líder em intermediação de venda e compra de lançamentos imobiliários, a Lopes atua também nos segmentos de imóveis usados, com a bandeira Pronto! e financiamento imobiliário, com a CrediPronto! Além disso, possui uma empresa especializada em comercialização de imóveis de até 200 mil reais: a HabitCasa. Sua missão é atender com excelência e segurança todos os clientes, pessoas ou empresas, atingindo e superando as expectativas de cada um deles. Dessa forma, a Lopes garante a qualidade do seu serviço e a satisfação de compradores, incorporadores e acionistas, além de atratividade aos corretores de imóveis parceiros ou associados. Símbolo de inovação e vanguardismo no mercado imobiliário, a Lopes trabalha com a filosofia de que nenhuma empresa pode se considerar grande, bem-sucedida ou experiente o bastante quando o assunto é a busca de aprendizado e aprimoramento. Por isso, usa os seus mais de 70 anos de experiência como lastro para a constante superação de novos desafios.

Emaar

emaar.com

WHO WE ARE Emaar is a pioneer of master-planned communities in Dubai since its inception in 1997. It is listed on the Dubai Financial Market as a public joint-stock company. Building upon the legacy of our flagship Downtown Dubai creations — the iconic Burj Khalifa, Dubai Mall, and Dubai Fountain — our dream is to be the world’s most valuable and trusted company, to enrich lives and to be powered by the best people. With proven competencies in properties, shopping malls & retail and hospitality & leisure, we shape new lifestyles with a passion for design excellence, build with quality and timely delivery. EXPANSION & DIVERSIFICATION Reflecting the pulse of Dubai, our portfolio encompasses developing renowned hospitality & leisure projects, premium shopping malls & Retail assets, as well as Master-Planned Communities and iconic Real-Estate assets. Our hospitality & leisure portfolio includes Address Hotels & Resorts and Armani Hotels & Resorts, among others. We are also the developers of premium shopping malls and retail assets such as the flagship The Dubai Mall – the world’s most visited retail & entertainment venue, Dubai Marina Mall and Souk-al-Bahar. Further, we continuously define the standard for exceptional cultural, entertainment and leisure experiences with destinations such as Dubai Opera, Dubai Aquarium & Underwater Zoo, Reel Cinemas, Dubai Ice Rink and VR Park.

Savills

savills.com

Savills is a global real estate advisor helping people thrive through places and spaces. With over 42,000 professionals in more than 700 offices across the Americas, Europe, Asia Pacific, Africa and the Middle East, we combine local knowledge with global insight to deliver tailored solutions that drive real impact. Headquartered in London and listed on the FTSE 250 (LON: SVS), we work with corporate, institutional and private clients to unlock the full potential of residential and commercial property. Whether you're a corporate looking to expand, an investor seeking to sustainably optimise your portfolio or a family trying to find a new home, we bring a truly personal approach to every project, delivering best-in-class insights and advice to help you make better property decisions.

Colliers

ow.ly

Colliers (NASDAQ, TSX: CIGI) is a global diversified professional services and investment management company operating through three industry-leading businesses: Commercial Real Estate, Engineering and Investment Management. With greater than a 30-year track record of consistent growth and strong recurring cash flows, we scale complementary, high-value businesses that provide essential services across the full asset lifecycle. Our unique partnership philosophy empowers exceptional leaders, preserves our entrepreneurial culture, and ensures meaningful inside ownership – driving strong alignment and sustained value creation for our shareholders. With $6 billion in annual revenues, 28,000 professionals, and $110 billion in assets under management, Colliers is committed to accelerating the success of our clients, investors, and people worldwide. Learn more at corporate.colliers.com.

Loading…

NEWS

Cityscape Global CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 25, 2026 07:00 AM

How the Middle East war reshapes the global cybersecurity landscape

War in the Middle East is being waged across cyberspace, exacerbating global cybersecurity risks worldwide. Here's what to know.

Read Article

February 27, 2026 08:00 AM

AI is supercharging a global cyber fraud crisis. It could also solve it

AI is seen as the biggest threat to online security in the year ahead. It's potential to automate cybercrime may only be matched by its...

Read Article

February 11, 2026 08:00 AM

Major cyberattack on Poland wind and solar farms raises global concerns over insecure network hardware

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning after a cyberattack targeted renewable energy...

Read Article

January 26, 2026 08:00 AM

Building cyber resilience at national scale: Why strategy matters more than ever

Cyber threats are rising, and national cyber resilience is now essential for economic growth and digital development. Learn why strategic...

Read Article

January 14, 2026 08:00 AM

LEAP East signs up Saudi tech giants NHC Innovation and stc as momentum builds for tech event’s inaugural Hong Kong edition in July

LEAP East's first outing in Hong Kong, from 8th – 10th July 2026, will serve as a strategic platform for conversations, deal-making,...

Read Article

January 12, 2026 08:00 AM

What execs need to know as global cyber risk rises in 2026

Major technological and geopolitical shifts are reshaping the cyber landscape, transforming it into a catalyst for progress and vector of...

Read Article

November 30, 2025 08:00 AM

I-Cybersecurity's Global Defenders I-Converge eRiyadh ye-Black Hat MEA 2025

Riyadh, Saudi Arabia – [30 November 2025]– I-cybersecurity community yehlabathi ivela eRiyadh ukukhuthaza ama-threats ezintsha kanye...

Read Article

November 27, 2025 11:55 AM

Cybersecurity and New Technologies | Office of Counter-Terrorism

At the Cyber challenge, 15 teams of young innovators presented solutions & received guidance from experts to develop creative ideas, ranging from P/CVE to...

Read Article

November 27, 2025 08:00 AM

Tahaluf CEO Mike Champion on Cityscape Global’s evolution and Saudi Arabia’s investment momentum

Cityscape Global has rapidly become one of the most influential real estate platforms worldwide, and at the centre of this transformation is...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Cityscape Global Vendor Cyber Rating & Cyber Score

Cityscape Global A.I CyberSecurity Scoring

Cityscape Global CyberSecurity News & History

Cityscape Global Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Cityscape Global

Incidents vs Real Estate Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Cityscape Global vs Real Estate Industry Avg (This Year)

Incident History - Cityscape Global (X = Date, Y = Severity)

Cityscape Global Subsidiaries

Cityscape Global

Cityscape Global Similar Companies

Coldwell Banker

Greystar

Shimao Group

Compass

Keller Williams Realty, LLC

Lopes Consultoria de Imóveis

Emaar

Savills

Colliers

Cityscape Global CyberSecurity News

How the Middle East war reshapes the global cybersecurity landscape

AI is supercharging a global cyber fraud crisis. It could also solve it

Major cyberattack on Poland wind and solar farms raises global concerns over insecure network hardware

Building cyber resilience at national scale: Why strategy matters more than ever

LEAP East signs up Saudi tech giants NHC Innovation and stc as momentum builds for tech event’s inaugural Hong Kong edition in July

What execs need to know as global cyber risk rises in 2026

I-Cybersecurity's Global Defenders I-Converge eRiyadh ye-Black Hat MEA 2025

Cybersecurity and New Technologies | Office of Counter-Terrorism

Tahaluf CEO Mike Champion on Cityscape Global’s evolution and Saudi Arabia’s investment momentum

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Cityscape Global CyberSecurity News & History

Cityscape Global Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Cityscape Global

Incidents vs Real Estate Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Cityscape Global vs Real Estate Industry Avg (This Year)

Incident History - Cityscape Global (X = Date, Y = Severity)

Cityscape Global Subsidiaries

Cityscape Global

Cityscape Global Similar Companies

Coldwell Banker

Greystar

Shimao Group

Compass

Keller Williams Realty, LLC

Lopes Consultoria de Imóveis

Emaar

Savills

Colliers

Cityscape Global CyberSecurity News

How the Middle East war reshapes the global cybersecurity landscape

AI is supercharging a global cyber fraud crisis. It could also solve it

Major cyberattack on Poland wind and solar farms raises global concerns over insecure network hardware

Building cyber resilience at national scale: Why strategy matters more than ever

LEAP East signs up Saudi tech giants NHC Innovation and stc as momentum builds for tech event’s inaugural Hong Kong edition in July

What execs need to know as global cyber risk rises in 2026

I-Cybersecurity's Global Defenders I-Converge eRiyadh ye-Black Hat MEA 2025

Cybersecurity and New Technologies | Office of Counter-Terrorism

Tahaluf CEO Mike Champion on Cityscape Global’s evolution and Saudi Arabia’s investment momentum

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo