What is the official website of EDP Singapore PTE ?

The official website of EDP Singapore PTE is http://www.edp-sg.net.

What is EDP Singapore PTE's cybersecurity risk score?

EDP Singapore PTE has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has EDP Singapore PTE experienced?

According to Rankiteo, EDP Singapore PTE currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has EDP Singapore PTE been affected by any supply chain cyber incidents ?

According to Rankiteo, EDP Singapore PTE has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does EDP Singapore PTE have SOC 2 Type 1 certification ?

According to Rankiteo, EDP Singapore PTE is not certified under SOC 2 Type 1.

Does EDP Singapore PTE have SOC 2 Type 2 certification ?

According to Rankiteo, EDP Singapore PTE does not hold a SOC 2 Type 2 certification.

Does EDP Singapore PTE comply with GDPR ?

According to Rankiteo, EDP Singapore PTE is not listed as GDPR compliant.

Does EDP Singapore PTE have PCI DSS certification ?

According to Rankiteo, EDP Singapore PTE does not currently maintain PCI DSS compliance.

Does EDP Singapore PTE comply with HIPAA ?

According to Rankiteo, EDP Singapore PTE is not compliant with HIPAA regulations.

Does EDP Singapore PTE have ISO 27001 certification ?

According to Rankiteo,EDP Singapore PTE is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does EDP Singapore PTE operate in ?

EDP Singapore PTE operates primarily in the Business Consulting and Services industry.

How many employees does EDP Singapore PTE have ?

EDP Singapore PTE employs approximately 2 people worldwide.

Does EDP Singapore PTE own any subsidiaries ?

EDP Singapore PTE presently has no subsidiaries across any sectors.

How many LinkedIn followers does EDP Singapore PTE have ?

EDP Singapore PTE's official LinkedIn profile has approximately 77 followers.

Does EDP Singapore PTE have a Crunchbase profile ?

No, EDP Singapore PTE does not have a profile on Crunchbase.

Does EDP Singapore PTE have a LinkedIn profile ?

Yes, EDP Singapore PTE maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/edp-singapore-pte.

How many cybersecurity incidents has EDP Singapore PTE experienced ?

As of October 20, 2026, Rankiteo reports that EDP Singapore PTE has experienced 1 cybersecurity incidents.

How many peer or competitor companies does EDP Singapore PTE have ?

EDP Singapore PTE has an estimated 19,965 peer or competitor companies worldwide.

What types of cybersecurity incidents has EDP Singapore PTE faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ESP

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

EDP Singapore PTE Vendor Cyber Rating & Cyber Score

edp-sg.net

Add Your Compliance Badge

EDP combines leading expertise and experience to deliver Health and Safety, Asbestos Services, Property Compliance, Environment, Sustainability and Security services to businesses across a broad range of industry sectors. We actively assess, support and lead organisations to achieve compliance and realise value. Our expert consultants and delivery teams provide a full suite of services, solutions and technologies to deliver Risk Management, Compliance & Wellbeing for People, Property & Planet. In March 2021, as an acceleration in EDP’s strategy to build a global multi-disciplinary Health, Safety, Environment and Sustainability Consultancy business, EDP joined the RSK Group. RSK Group is the UK’s largest privately-owned

ESP

EDP Singapore PTE CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

EDP Singapore PTE

Cyber Attack

10/2025

JEN273212710242...

Loading…

A.I.

ESP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ESP

Incidents vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for EDP Singapore PTE in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for EDP Singapore PTE in 2026.

Incident Types ESP vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for EDP Singapore PTE in 2026.

Incident History - ESP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

EDP Singapore PTE Subsidiaries

ESP

Business Consulting and Services

Website: http://www.edp-sg.net

Company Size: 2

124

RSK GroupEnvironmental Services

BinniesCivil Engineering

Binnies DCWWCivil Engineering

ADASEnvironmental Services

RSK Habitat ManagementEnvironmental Services

ADAS ArboricultureEnvironmental Services

FarmPEPFarming

MWH TreatmentConstruction

CANCivil Engineering

RSK Middle EastEnvironmental Services

Copper ConsultancyPublic Relations and Communications Services

RSK AfricaEnvironmental Services

CAN RenewablesServices for Renewable Energy

RSK GeosciencesEnvironmental Services

RSK Geophysics and SafegroundEnvironmental Services

RSK GeospatialSurveying and Mapping Services

Carbon Zero ConsultingServices for Renewable Energy

Spencer Quantum LtdConstruction

Proeon Systems Ltd.Automation Machinery Manufacturing

The Woodhouse Partnership Ltd (TWPL)Business Consulting and Services

Woodhouse AustralasiaBusiness Consulting and Services

CX Utilities Ltd (An RSK Company)Utilities

EDP Consultants AustraliaEnvironmental Services

Stephenson HallidayEnvironmental Services

cbec eco-engineering UK & EuropeEnvironmental Services

C J Associates Geotechnical LtdConstruction

RSK WildingEnvironmental Services

Salix River and WetlandEnvironmental Services

Richard Irvin FM LimitedFacilities Services

ADAS LandscapeArchitecture and Planning

RSK APACEnvironmental Services

WatertrainEducation

Silcock Leedham Group LimitedConstruction

HydrofixServices for Renewable Energy

W Crowder & Sons LtdWholesale

RSK ResponseEnvironmental Services

RSK BENELUX BVEnvironmental Services

RSK NetherlandsEnvironmental Services

MG Scaffolding LtdConstruction

Up and UnderCivil Engineering

Pharos Generator Services LimitedMechanical Or Industrial Engineering

RSK AsbestosEnvironmental Services

Ian Farmer Associates (1998) LimitedCivil Engineering

RSK AcousticsArchitecture and Planning

Cambridge Environmental Assessments, part of RSK ADAS LtdChemical Manufacturing

HI-LINEEnvironmental Services

Calibrate Energy LtdRenewable Energy Semiconductor Manufacturing

RSK EnvironnementBusiness Consulting and Services

Aurora Health Physics Services LtdEnvironmental Services

Advantage RSKAlternative Dispute Resolution

Acies Civil and Structural LtdCivil Engineering

RSK EcologyEnvironmental Services

CR Civil EngineeringCivil Engineering

Nicholas O'Dwyer LtdEnvironmental Services

Civil Engineering InternationalCivil Engineering

Amphos 21Environmental Services

WRc GroupResearch Services

Structural SoilsCivil Engineering

WGM Engineering LtdEngineering Services

AxisOil and Gas

Headland Archaeology (UK) LtdEnvironmental Services

PellingsConstruction

Centara Ltd - Surveying, Engineering and CADUtilities

EcologiaEnvironmental Services

RSK Ireland Ltd.Environmental Services

Jennings O'Donovan & PartnersCivil Engineering

Leap EnvironmentalEnvironmental Services

Non Destructive Testing Services LtdConstruction

RoC ConsultingConstruction

EDPBusiness Consulting and Services

Southern Ecological Solutions (SES)Environmental Services

Virtus EnergyComputers and Electronics Manufacturing

1stinrailCivil Engineering

Optisol Services LtdRenewable Energy Semiconductor Manufacturing

FishtekEnvironmental Services

MilestoneConstruction

Richard Allitt Associates LtdCivil Engineering

Remote Aerial SurveysPhotography

rsim Remote SimulationsCivil Engineering

RemedX LtdEnvironmental Services

Streetwise UK Management LtdConstruction

TWIG GroupEnvironmental Services

B-Line and Easy2PlotPrinting Services

RSK LDE (Land and Development Engineering)Civil Engineering

RSK DACH-RegionEnvironmental Services

WaldramsReal Estate

Milner AssociatesConstruction

LARSEN WATER MANAGEMENT LTDUtilities

Central AllianceConstruction

SCPCivil Engineering

COGNICAConstruction

RSK AustraliaEnvironmental Services

ADAS PlanningArchitecture and Planning

RSK BiocensusEnvironmental Services

FR ConsultantsConstruction

RSK CreativeDesign Services

Minerex Environmental Ltd.Environmental Services

Smith + Kennedy ArchitectsArchitecture and Planning

ADEV ENVIRONNEMENTEnvironmental Services

ATV Contract Services LtdEnvironmental Services

Envireau WaterEnvironmental Services

RGM Environmental, Science and Technical support servicesEnvironmental Services

Travis BakerCivil Engineering

CS2 Chartered SurveyorsConstruction

RSK Consents SolutionsUtilities

Kirton Water Treatment ServicesUtilities

RSK RadiologicalEnvironmental Services

Brown & May Marine LtdFisheries

RSK IWS Integrated Waste Solutions LtdUtilities

Dermot Casey Tree Care Ltd.Consumer Services

ATP Architects & Building SurveyorsArchitecture and Planning

Treefellers LtdEnvironmental Services

Hawkins Electrical LtdAppliances, Electrical, and Electronics Manufacturing

Technik GSConstruction

Enviroflow Management LimitedUtilities

Nature PositiveEnvironmental Services

Homer Burgess LtdIndustrial Machinery Manufacturing

RSK International Projects GroupEnvironmental Services

Absolute Solar and Wind LtdRenewable Energy Semiconductor Manufacturing

Inis Environmental Consultants Ltd.Environmental Services

BMG ResearchMarket Research

RSK EnvironmentEnvironmental Services

The MSS GroupEnvironmental Services

GeocoreCivil Engineering

Loading…

EDP Singapore PTE Similar Companies

Capgemini Invent

capgemini.com

Capgemini Invent is the digital innovation, consulting and transformation brand of the Capgemini Group, a global business line that combines market leading expertise in strategy, technology, data science and creative design, to help CxOs envision and build what’s next for their businesses. For more information: http://www.capgemini.com/invent. Follow us on Twitter @CapgeminiInvent.

Alvarez & Marsal

alvarezandmarsal.com

Alvarez & Marsal is a leading global professional services firm dedicated to helping organizations tackle their most complex business issues, maximize stakeholder value, and deliver sustainable change. Privately held since its founding in 1983, clients select us for our deep expertise and proven ability to create and deliver practical solutions to their unique problems. Leveraging A&M’s restructuring heritage, our fact-driven, action-oriented approach empowers organizations to drive transformation and unlock value at every stage of growth. Our worldwide network extends across six continents, with over 10,000 people comprised of experienced operators, world-class consultants, former regulators and industry authorities. We foster a uniquely collaborative environment that embraces our peoples’ diverse perspectives and A&M’s entrepreneurial spirit to deliver end-to-end capabilities that span advisory, business performance improvement, and turnaround management. When action matters, find us at www.alvarezandmarsal.com.

Advantage Solutions

yourADV.com

At Advantage Solutions, we're the unseen architects behind your everyday purchases. From pantry staples to your online shopping carts, we ensure your favorite goods are always in stock and within reach by connecting manufacturers to the right retailers and teaming up with retailers to figure out the best ways to get those products into your hands. We specialize in elevating brand presence, enhancing retail strategies, and creating memorable brand experiences. Our purpose is to connect people with products and experiences that enrich their lives. How do we do that? Through our mission: to generate demand for consumer brands and retailers, converting shoppers into buyers in every way they shop, and our values: Put People First, Serve with Heart, Lead with Insights, Execute Relentlessly and Win Together. Check us out at advantagesolutions.net.

ELIS

cb elis.com

As the leader in circular services at work, Elis ensures its clients achieve optimal hygiene, well-being and protection – everywhere, every day, in a sustainable way. We employ 54,000 people locally in 30 countries. We work for public and private organizations of all sizes, in all sectors of activity offering solutions for flat linen, workwear, facility, beverage, pest control, mats, wipers, cleanroom and medical waste. Our circular services help clients stay focused on their core business and allow them to reduce their environmental footprint. Our circular services inspire our commitment: they create a bond between us, our clients and our planet and they unite our people around the world. Elis is listed on Euronext Paris. --- Leader des services circulaires au travail, Elis veille à ce que ses clients bénéficient d'une hygiène, d'un bien-être et d'une protection optimale – partout dans le monde, tous les jours et de manière durable. Nous employons localement 54 000 collaborateurs dans 29 pays. Nous travaillons pour des organismes publics et privés de toutes tailles, dans tous les secteurs d’activité en leur offrant des solutions en vêtement de travail, linge plat, sanitaires, boisson, prévention nuisibles, tapis, essuyage industriel, salles propres et DASRI. Nos services circulaires aident nos clients à concentrer leurs efforts sur leur cœur de métier et leur permettent de réduire leur empreinte environnementale. Nos services circulaires inspirent notre engagement : ils créent un lien entre nous, nos clients et notre planète et unissent nos collaborateurs dans le monde entier. Elis est côté sur Euronext Paris et fait partie du SBF 120.

ERM

erm.com

Sustainability is our business.  As the world’s largest specialist sustainability consultancy, ERM partners with clients to operationalize sustainability at pace and scale, deploying a unique combination of strategic transformation and technical delivery capabilities. This approach helps clients to accelerate the integration of sustainability at every level of their business.  With more than 50 years of experience, ERM’s diverse team of 8000+ experts in 40 countries and territories helps clients create innovative solutions to their sustainability challenges, unlocking commercial opportunities that meet the needs of today while preserving opportunity for future generations.  

Stefanini Group

stefanini.com

Global Tech Consulting Company All in One. Stefanini is a Brazilian multinational company with 37 years of experience and presence in 41 countries. With more than 35,000 employees, we co-create solutions for a better future, driving digital transformation with a focus on real results. We operate in an integrated way through 7 specialized business units: Consulting (Technology and Business Agility), Analytics & AI, Banking & Payments, Cybersecurity, Manufacturing 4.0, and Digital Marketing. Recognized as the most internationalized technology company in Brazil, according to the Fundação Dom Cabral (FDC) ranking, Stefanini is global by essence, collaborative by nature, and strategic by vocation. It is also a pioneer in applying Artificial Intelligence to transform businesses through an end-to-end AI-First approach.

PwC Deutschland

pwc.de

PwC is the leading auditing and consulting company in Germany. As an independent member of the international PwC network, it offers its services worldwide. PwC audits and advises leading industrial and service companies of all sizes. In Germany, over 15,000 employees generate revenues of more than three billion euros in the divisions of audit and audit-related services (assurance solutions), tax and legal advice (tax & legal solutions), transformation, risk & regulatory, sustainability, cloud & digital, and deals. The experts in the different service lines work together across all divisions and from different offices in Germany, making it possible to meet with them individually at 20 locations nationwide. Also part of PwC is Strategy& – a global team of practice-oriented strategists. You can find more information about our team of strategy advisors here: https://www.strategyand.pwc.com/ Thanks to its worldwide network, PwC is able to provide its clients with professional services around the world and to offer cross-border support. As an independent member of this network, PwC Germany has access to more than 365,000 employees in 136 countries. You can find current vacancies at PwC Germany and information on PwC’s different divisions on our career page: www.karriere.pwc.de If you have any questions about vacancies at the German firm or the application process, a member of our staff will be happy to help. Simply give us a call at +49 69 9585 - 5226 or send us an e-mail to: [email protected] For more insights into the world of PwC Germany, you can follow us on the following channels: Xing PwC Germany: www.xing.com/company/pwcdeutschland X PwC Germany: @pwc_de Instagram PwC Germany: www.instagram.com/pwc_de YouTube PwC Germany: www.youtube.com/user/pwcde YouTube PwC Career: www.youtube.com/user/pwccareerde Imprint: https://www.pwc.de/impressum

Publicis Sapient

publicissapient.com

Publicis Sapient is a technology company that provides enterprise AI platforms and services. With over 30 years of digital business transformation experience, we enable enterprise clients to transform how they operate and serve their customers, unlocking new value and enabling them to thrive in an AI-driven world. Our platforms use AI built off this deep enterprise context to help them modernize, build agentic solutions, and sustain their competitive advantage. The combination of our AI platforms and the expertise of our people enables us to deliver faster and more effective outcomes through solutions that are specific to the unique needs of our clients’ businesses, their industries and their customers.  Publicis Sapient is the technology hub of Publicis Groupe, uniting 20,000 people worldwide across 28 countries. For more information, visit publicissapient.com.

EY-Parthenon

ey.com

Our unique combination of transformative strategy, transactions and corporate finance delivers real-world value – solutions that work in practice, not just on paper. Benefiting from EY’s full spectrum of services, we’ve reimagined strategic consulting to work in a world of increasing complexity. With deep functional and sector expertise, paired with innovative AI-powered technology and an investor mindset, we partner with CEOs, boards, private equity and governments every step of the way – enabling you to shape your future with confidence. EY-Parthenon is a brand under which a number of EY member firms across the globe provide strategy consulting services. For more information, please visit ey.com/parthenon.

Loading…

NEWS

EDP Singapore PTE CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

EDP Singapore PTE Vendor Cyber Rating & Cyber Score

ESP A.I CyberSecurity Scoring

EDP Singapore PTE CyberSecurity News & History

ESP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for ESP

Incidents vs Business Consulting and Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types ESP vs Business Consulting and Services Industry Avg (This Year)

Incident History - ESP (X = Date, Y = Severity)

EDP Singapore PTE Subsidiaries

ESP

EDP Singapore PTE Similar Companies

Capgemini Invent

Alvarez & Marsal

Advantage Solutions

ELIS

ERM

Stefanini Group

PwC Deutschland

Publicis Sapient

EY-Parthenon

EDP Singapore PTE CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

EDP Singapore PTE CyberSecurity News & History

ESP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for ESP

Incidents vs Business Consulting and Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types ESP vs Business Consulting and Services Industry Avg (This Year)

Incident History - ESP (X = Date, Y = Severity)

EDP Singapore PTE Subsidiaries

ESP

EDP Singapore PTE Similar Companies

Capgemini Invent

Alvarez & Marsal

Advantage Solutions

ELIS

ERM

Stefanini Group

PwC Deutschland

Publicis Sapient

EY-Parthenon

EDP Singapore PTE CyberSecurity News

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo