What is the official website of Global Aerospace Summit ?

The official website of Global Aerospace Summit is https://www.aerospacesummit.com/.

What is Global Aerospace Summit's cybersecurity risk score?

Global Aerospace Summit has an AI-generated cybersecurity risk score of 790 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Global Aerospace Summit experienced?

According to Rankiteo, Global Aerospace Summit currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Global Aerospace Summit been affected by any supply chain cyber incidents ?

According to Rankiteo, Global Aerospace Summit has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Global Aerospace Summit have SOC 2 Type 1 certification ?

According to Rankiteo, Global Aerospace Summit is not certified under SOC 2 Type 1.

Does Global Aerospace Summit have SOC 2 Type 2 certification ?

According to Rankiteo, Global Aerospace Summit does not hold a SOC 2 Type 2 certification.

Does Global Aerospace Summit comply with GDPR ?

According to Rankiteo, Global Aerospace Summit is not listed as GDPR compliant.

Does Global Aerospace Summit have PCI DSS certification ?

According to Rankiteo, Global Aerospace Summit does not currently maintain PCI DSS compliance.

Does Global Aerospace Summit comply with HIPAA ?

According to Rankiteo, Global Aerospace Summit is not compliant with HIPAA regulations.

Does Global Aerospace Summit have ISO 27001 certification ?

According to Rankiteo,Global Aerospace Summit is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Global Aerospace Summit operate in ?

Global Aerospace Summit operates primarily in the Airlines and Aviation industry.

How many employees does Global Aerospace Summit have ?

Global Aerospace Summit employs approximately 3 people worldwide.

Does Global Aerospace Summit own any subsidiaries ?

Global Aerospace Summit presently has no subsidiaries across any sectors.

How many LinkedIn followers does Global Aerospace Summit have ?

Global Aerospace Summit's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Global Aerospace Summit ?

Global Aerospace Summit is classified under the NAICS code 481, which corresponds to Air Transportation.

Does Global Aerospace Summit have a Crunchbase profile ?

No, Global Aerospace Summit does not have a profile on Crunchbase.

Does Global Aerospace Summit have a LinkedIn profile ?

Yes, Global Aerospace Summit maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/global-aerospace-summit-abu-dhabi.

How many cybersecurity incidents has Global Aerospace Summit experienced ?

As of October 20, 2026, Rankiteo reports that Global Aerospace Summit has not experienced any cybersecurity incidents.

How many peer or competitor companies does Global Aerospace Summit have ?

Global Aerospace Summit has an estimated 3,883 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

GAS

Boost Score +25 with badge (5 left)

790

/1000

Fair

815

/1000

Good

Global Aerospace Summit Vendor Cyber Rating & Cyber Score

aerospacesummit.com

Add Your Compliance Badge

The Global Aerospace Summit is an elite gathering of global leaders focusing on the strategic growth of the aerospace, defence, aviation & space industries. The event will return in 2026.

GAS

Global Aerospace Summit CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

GAS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for GAS

Incidents vs Airlines and Aviation Industry Avg (This Year)

No incidents recorded for Global Aerospace Summit in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Global Aerospace Summit in 2026.

Incident Types GAS vs Airlines and Aviation Industry Avg (This Year)

No incidents recorded for Global Aerospace Summit in 2026.

Incident History - GAS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Global Aerospace Summit Subsidiaries

GAS

Airlines and Aviation

Website: https://www.aerospacesummit.com/

Company Size: 3

Informa MarketsEvents Services

WHX DubaiEvents Services

Black Hat MEAEvents Services

Global Health Exhibition - ملتقى الصحة العالميEvents Services

VIBE SAUDIEvents Services

LEAPEvents Services

HIMSSNon-profit Organizations

HIMSS Global Health Conference & ExhibitionEvents Services

Seatrade CruiseEvents Services

F&B@SeaFood and Beverage Services

World of ConcreteConstruction

HospitalarAdvertising Services

The Battery Show EuropeAppliances, Electrical, and Electronics Manufacturing

Cityscape GlobalReal Estate

ESTAADEvents Services

The Battery ShowEvents Services

Informa Markets in AsiaEvents Services

APLFEvents Services

Restaurant, Bar & Café Hong KongEvents Services

HOFEXFood and Beverage Services

Data Center AsiaEvents Services

Natural & Organic AsiaEvents Services

The Battery Show AsiaEvents Services

Manufacturing by InformaEvents Services

MD+DITechnology, Information and Media

MD&M Trade ShowsEvents Services

PlasticsTodayTechnology, Information and Media

Packaging DigestTechnology, Information and Media

Pharmaceutical & Medical Packaging News (PMPN)Packaging and Containers Manufacturing

Powder & Bulk SolidsTechnology, Information and Media

MedTech WorldMedical Equipment Manufacturing

Design NewsTechnology, Information and Media

Qmed NewsMedical Equipment Manufacturing

HBA EventsPackaging and Containers Manufacturing

EMDTMedical Equipment Manufacturing

PharmaconexEvents Services

Pharmaconex NigeriaPharmaceutical Manufacturing

Electric & Hybrid Vehicle Technology Expo EuropeAppliances, Electrical, and Electronics Manufacturing

Gulf Print & PackPrinting Services

Concrete ShowConstruction

EXPOMAFEMachinery Manufacturing

Pharmapack EuropeEvents Services

Cosmoprof AsiaEvents Services

Electric & Hybrid Vehicle Technology ExpoEvents Services

Jakarta International ExpoEvents Services

Nigeria EnergyEvents Services

ABASTUREvents Services

Informa U.S. Boat ShowsEvents Services

HOTELEXEvents Services

UBM Sinoexpo-ExpofinefoodEvents Services

UBM Sinoexpo-Coffee & TeaEvents Services

UBM Sinoexpo-Hotel SuppliesEvents Services

UBM Sinoexpo-Wine & SpiritsEvents Services

Hong Kong Convention and Exhibition Centre (Management) LimitedEvents Services

Aircraft Interiors Middle East- AIMEAviation and Aerospace Component Manufacturing

ISSA Show North AmericaEvents Services

Fi IndiaEvents Services

Fi India AwardsFood and Beverage Manufacturing

InFlavourFood and Beverage Services

CAMWATERGovernment Administration

GROWTECH. EventsEvents Services

FIREX EgyptEvents Services

CMA ShippingMaritime Transportation

Art MiamiEvents Services

DesignConEvents Services

EastPack LimitedFarming

Mining IndonesiaMining

VIETSTOCK Expo & ForumEvents Services

Intertraffic AmericasFacilities Services

METALTECH & AUTOMEXMachinery Manufacturing

AQUACULTURE VIETNAM EXPO & FORUMEvents Services

FHC - Shanghai Global Food Trade ShowEvents Services

Adhesives & Bonding Expo EuropeEvents Services

THE GREEN EXPO® MEXICOEvents Services

WWETT ShowUtilities

Thermal Management ExpoEvents Services

Informa Markets MalaysiaEvents Services

Informa Markets - MéxicoEvents Services

Super Terminal ExpoEvents Services

Cityscape BahrainReal Estate

Furniture ChinaEvents Services

COTTM - China Outbound Travel & Tourism MarketEvents Services

UTECH LAS AMÉRICASPlastics and Rubber Product Manufacturing

Untitled ArtArtists and Writers

Beauty Expo AustraliaEvents Services

Informa Markets in the PhilippinesEvents Services

Water IndonesiaEvents Services

Medlab Middle East by BeelalRetail Health and Personal Care Products

OSH IndiaPublic Safety

Client Solutions - North AmericaEvents Services

Newport International Boat ShowEvents Services

Build Show LIVEResidential Building Construction

Construction Indonesia & Concrete Show SEAConstruction

Electric & Power IndonesiaAppliances, Electrical, and Electronics Manufacturing

Autotech EgyptMotor Vehicle Manufacturing

OSH BangladeshEvents Services

Informa Markets - Infrastructure & ConstructionEvents Services

Sustainable Manufacturing ConferenceEvents Services

TOC AsiaEducation

Loading…

Global Aerospace Summit Similar Companies

GOL Linhas Aéreas

voegol.com.br

Somos a maior Companhia Aérea do País e estamos entre as que mais crescem no mundo. A nossa história começou em 2001 e, desde então, somos responsáveis por inovar o mercado da aviação no Brasil. Tudo isso graças à dedicação do nosso Time para garantir o nosso Valor número 1, a Segurança, entregando sempre a melhor experiência em voar. Carregamos em nossa bagagem o respeito para promover a diversidade e a inclusão em nosso ambiente de trabalho, valorizando o talento das nossas Águias e seguindo nosso propósito de ser a Primeira para Todos, seja no solo ou no céu. Além disso, criamos uma série de facilidades que tornam as viagens dos nossos Clientes ainda mais tranquilas, como: Novo App, Selfie Check-in, GOL+ Conforto, Programa de fidelidade da Smiles e Entretenimento a bordo. Com a laranjinha, você voa mais alto e leva a nossa essência Simples, Humana e Inteligente em todas as decolagens.

easyJet

easyjet.com

We’re on a mission to make low-cost travel easy. Whatever your role, you’ll connect millions of people to what they love using Europe’s best airline network, great value fares, and friendly service. And to help us get there we’ll give you everything you need to make a personal impact on our growing business. We believe in sharing new opportunities, stepping up to challenges, and supporting each other with our Orange Spirit. Get ready to make a difference. Make it easyJet.

SAUDI AIRLINES

saudia.com

At Saudia Group, we're on a mission to inspire people to go beyond borders. Our purpose is rooted in unlocking human potential and connecting the world in ways never thought possible. We are committed to reshaping the aviation ecosystem in our region and beyond, by embracing innovation and a customer-centric approach. Our Vision: To be the preferred choice of a customer-centric aviation ecosystem from the region. Our Mission: By driving synergies, unlocking opportunities, and embracing a tech-first mindset, we will maximize sustainable value creation, and earn the loyalty of our people, customers, and communities. Our Core Values: - Customer Centricity - People - Heritage & Innovation - Collaboration - Collective Accountability - Excellence These values are the guiding principles that define our culture and drive our decisions. We are dedicated to nurturing a workplace where everyone feels valued and empowered to contribute to our shared vision. Join us on this exhilarating journey of redefining aviation, breaking boundaries, and fostering connections across the globe.

Turkish Airlines

cb turkishairlines.com

Turkish Airlines has soared to new heights since its first flight in 1933, becoming the airline that connects more countries than any other. Our commitment to excellence is reflected in the world-class service, comfort, and innovative travel experience we offer, designed to elevate every journey. With a diverse team of professionals from around the world, we are proud to be a truly global company, bringing together different perspectives and expertise to deliver an unparalleled travel experience. Powered by an expansive and unrivaled network, we bridge continents and cultures, providing a seamless and premium journey that reflects our passion for aviation. Each flight carries the promise of comfort and the prestige of flying under the Turkish flag, with a dedication to delivering the best to our passengers. Our story is one of continuous growth, driven by a commitment to inspire new discoveries, and set the standard for global air travel.

Etihad

etihad.com

Marhaba! Welcome to Etihad Airways. We are proud to be the national airline of the UAE, flying to 100+ destinations via Abu Dhabi. At Etihad, we don't stop at the border of what's possible, we go beyond it. Proudly inspired by our Emirati identity, we are dedicated to delivering extraordinary travel experiences, helping our guests realise their ambitions. Our journey started in 2003. Since then, we have proudly helped millions of guests travel the globe. We are honoured to have had over 12 million valued members join our Etihad Guest loyalty programme. Diversity is key in driving us forward. At 12,000+ employees representing 140+ nationalities, our team comes together to deliver exceptional experiences at every stage of the journey. If you share our spirit of ambition and would like to reach new heights, visit https://careers.etihad.com/

IndiGo (InterGlobe Aviation Ltd)

cb goindigo.in

IndiGo is India’s largest passenger airline. We operate with focus on our three pillars – offering low fares, being on-time and delivering a courteous and hassle-free experience. IndiGo has become synonymous with being on-time. Since our inception in August 2006, we have grown from a carrier with one plane to a fleet of 400+ aircraft today. A uniform fleet for each type of operation, high operational reliability and an award winning service make us one of the most reliable airlines in the world. IndiGo has a total destination count of 130+ destinations with 90+ domestic destinations and 40+ International destinations.

Qantas

cb qantas.com

We would like to acknowledge the Traditional Custodians of the local lands and waterways on which we live, work and fly. We pay our respects to Elders past and present. Spirit is everything to us, and joining the Qantas team means bringing your spirit to ours. We have over 30,000 exceptional employees, and every year we fly millions of customers around Australia and the world – together. If you hop on board with the team, you'll experience a workplace where creativity, diversity and innovation are encouraged. We aim to give every member of the Qantas Group the support to follow their dreams, face new challenges, and let their future take flight. Ultimately, people are our priority – those who work for us and those who travel with us. Recruitment scam alert: We're aware of scammers posing as Qantas Group recruiters. We'll only contact candidates via official Qantas Group channels and company email addresses. Don't share personal details or documents unless you're confident it's genuine. Learn more or report a scam: https://www.qantas.com/en-au/help/cyber-safety-scams Member of the oneworld Alliance. Please read the Qantas LinkedIn House Rules at http://bit.ly/QFhouserules

Lufthansa

cb lufthansa.com

Lufthansa is one of the world’s leading airlines, connecting passengers to over 200 destinations across 74 countries from our hubs in Frankfurt and Munich. As an industry pioneer, we are committed to shaping the future of sustainable aviation, investing in next-generation aircraft, cutting-edge technology, and digital solutions. Our goal is to drive excellence: not just in the sky, but across every touchpoint of the travel experience. With Lufthansa Allegris, our new long-haul experience, we are setting a new standard in premium travel, introducing a completely redesigned First, Business, Premium Economy, and Economy Class for ultimate comfort and choice. We continue to enhance the travel experience with state-of-the-art lounges, award-winning service, and onboard broadband Wi-Fi (FlyNet) across our entire long-haul fleet. Follow us for updates on how we're shaping the future of aviation. For more information, reservations or customer service, visit lufthansa.com or follow us on Facebook, X and Instagram. We look forward to welcoming you onboard. This LinkedIn page is maintained by Deutsche Lufthansa AG. We will not answer specific Customer Service queries here on LinkedIn. If you have an immediate concern or need to contact us please visit http://www.lufthansa.com/us/en/imprint

Alaska Airlines

cb alaskaair.jobs

We’re creating an airline people love. It begins with each Alaska Airlines employee, bringing unique strengths and energy to our work in the air and on the ground. Every day, we go beyond what’s expected and reach for the remarkable, together. Welcome to our LinkedIn page. We like conversations on our page, but comments that contain profanity, hate speech, spam or are otherwise offensive will be removed. Out of respect for our employees' privacy, we reserve the right to hide or remove any post or comment that is disparaging or has negative intent towards our employees. Our Social Care Team is here for you 24/7. If you require assistance or need an official response, please contact us at http://bit.ly/ContactAK.

Loading…

NEWS

Global Aerospace Summit CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 11, 2026 05:23 PM

FCC chair criticizes slow pace of Amazon satellite launches

The chairman of the Federal Communications Commission dismissed criticism from Amazon.com of Elon Musk's SpaceX plan to launch a...

Read Article

March 04, 2026 08:00 AM

US agency considers limits on telecom foreign call centers, requiring English proficiency

The Federal Communications Commission said on Wednesday it is considering limits on U.S. telecom firms' ‌use of foreign call centers and...

Read Article

March 02, 2026 08:00 AM

Must-Attend Tech Conferences 2026

Explore the top tech conferences to attend in 2026. Discover key dates, locations, and must-see events in AI, cloud, cybersecurity, IT,...

Read Article

February 20, 2026 08:00 AM

FCC asks networks to air 'pro-America content' to mark nation's 250th birthday

The head of the Federal Communications Commission urged U.S. broadcasters on Friday to air "patriotic, pro-America content" to mark this...

Read Article

February 18, 2026 08:00 AM

Data leak at Abu Dhabi finance summit exposes global figures, FT reports

Former British Prime Minister David Cameron and hedge fund billionaire Alan Howard were among the hundreds whose passports and other...

Read Article

February 18, 2026 08:00 AM

Federal Communications Commission chair backs Nexstar, Tegna merger

The chair of the Federal Communications Commission said Wednesday he supports Nexstar's proposed $3.54 billion acquisition of Tegna that...

Read Article

February 11, 2026 08:00 AM

Singapore Airshow 2026 Milestone Edition: 20 Years of Shaping the Aerospace Landscape as Asia-Pacific Drives Global Grow

SINGAPORE, Feb. 1, 2026 /PRNewswire/ -- Singapore Airshow 2026, organised and managed by Experia Events Pte Ltd, will take place from 3 to 8...

Read Article

February 03, 2026 08:00 AM

Fiji strengthens global aviation presence in Singapore

Fiji is strengthening its presence on the global aviation stage through its participation in the Changi Aviation Summit currently underway...

Read Article

February 02, 2026 05:45 AM

Cybersecurity Action Plan

me ICAO Assembly Resolution A40-10 requested ICAO to develop an action plan to support States and industry in the adoption of the Aviation Cybersecurity...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Global Aerospace Summit Vendor Cyber Rating & Cyber Score

GAS A.I CyberSecurity Scoring

Global Aerospace Summit CyberSecurity News & History

GAS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for GAS

Incidents vs Airlines and Aviation Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types GAS vs Airlines and Aviation Industry Avg (This Year)

Incident History - GAS (X = Date, Y = Severity)

Global Aerospace Summit Subsidiaries

GAS

Global Aerospace Summit Similar Companies

GOL Linhas Aéreas

easyJet

SAUDI AIRLINES

Turkish Airlines

Etihad

IndiGo (InterGlobe Aviation Ltd)

Qantas

Lufthansa

Alaska Airlines

Global Aerospace Summit CyberSecurity News

FCC chair criticizes slow pace of Amazon satellite launches

US agency considers limits on telecom foreign call centers, requiring English proficiency

Must-Attend Tech Conferences 2026

FCC asks networks to air 'pro-America content' to mark nation's 250th birthday

Data leak at Abu Dhabi finance summit exposes global figures, FT reports

Federal Communications Commission chair backs Nexstar, Tegna merger

Singapore Airshow 2026 Milestone Edition: 20 Years of Shaping the Aerospace Landscape as Asia-Pacific Drives Global Grow

Fiji strengthens global aviation presence in Singapore

Cybersecurity Action Plan

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Global Aerospace Summit CyberSecurity News & History

GAS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for GAS

Incidents vs Airlines and Aviation Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types GAS vs Airlines and Aviation Industry Avg (This Year)

Incident History - GAS (X = Date, Y = Severity)

Global Aerospace Summit Subsidiaries

GAS

Global Aerospace Summit Similar Companies

GOL Linhas Aéreas

easyJet

SAUDI AIRLINES

Turkish Airlines

Etihad

IndiGo (InterGlobe Aviation Ltd)

Qantas

Lufthansa

Alaska Airlines

Global Aerospace Summit CyberSecurity News

FCC chair criticizes slow pace of Amazon satellite launches

US agency considers limits on telecom foreign call centers, requiring English proficiency

Must-Attend Tech Conferences 2026

FCC asks networks to air 'pro-America content' to mark nation's 250th birthday

Data leak at Abu Dhabi finance summit exposes global figures, FT reports

Federal Communications Commission chair backs Nexstar, Tegna merger

Singapore Airshow 2026 Milestone Edition: 20 Years of Shaping the Aerospace Landscape as Asia-Pacific Drives Global Grow

Fiji strengthens global aviation presence in Singapore

Cybersecurity Action Plan

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo