What is the official website of Hyatt Centric ?

The official website of Hyatt Centric is https://www.hyatt.com/brands/hyatt-centric.

What is Hyatt Centric's cybersecurity risk score?

Hyatt Centric has an AI-generated cybersecurity risk score of 776 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Hyatt Centric experienced?

According to Rankiteo, Hyatt Centric currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Hyatt Centric been affected by any supply chain cyber incidents ?

According to Rankiteo, Hyatt Centric has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Klue Inc. (Incident ID: KLUHUNAPP1781864958) foh&boh (Incident ID: NORKFCFOHTACHYA1769001351) foh&boh (Incident ID: FOHNORHYAOMN1769001286) foh&boh (Incident ID: FOHKFCNORHYAOMN1769001235)

Does Hyatt Centric have SOC 2 Type 1 certification ?

According to Rankiteo, Hyatt Centric is not certified under SOC 2 Type 1.

Does Hyatt Centric have SOC 2 Type 2 certification ?

According to Rankiteo, Hyatt Centric does not hold a SOC 2 Type 2 certification.

Does Hyatt Centric comply with GDPR ?

According to Rankiteo, Hyatt Centric is not listed as GDPR compliant.

Does Hyatt Centric have PCI DSS certification ?

According to Rankiteo, Hyatt Centric does not currently maintain PCI DSS compliance.

Does Hyatt Centric comply with HIPAA ?

According to Rankiteo, Hyatt Centric is not compliant with HIPAA regulations.

Does Hyatt Centric have ISO 27001 certification ?

According to Rankiteo,Hyatt Centric is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Hyatt Centric operate in ?

Hyatt Centric operates primarily in the Hospitality industry.

How many employees does Hyatt Centric have ?

Hyatt Centric employs approximately 645 people worldwide.

Does Hyatt Centric own any subsidiaries ?

Hyatt Centric presently has no subsidiaries across any sectors.

How many LinkedIn followers does Hyatt Centric have ?

Hyatt Centric's official LinkedIn profile has approximately 12,036 followers.

What is the NAICS classification code for Hyatt Centric ?

Hyatt Centric is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does Hyatt Centric have a Crunchbase profile ?

No, Hyatt Centric does not have a profile on Crunchbase.

Does Hyatt Centric have a LinkedIn profile ?

Yes, Hyatt Centric maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hyatt-centric.

How many cybersecurity incidents has Hyatt Centric experienced ?

As of August 10, 2026, Rankiteo reports that Hyatt Centric has experienced 10 cybersecurity incidents.

How many peer or competitor companies does Hyatt Centric have ?

Hyatt Centric has an estimated 14,349 peer or competitor companies worldwide.

What types of cybersecurity incidents has Hyatt Centric faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Hyatt Centric

Boost Score +25 with badge (5 left)

776

/1000

Fair

801

/1000

Good

Hyatt Centric Vendor Cyber Rating & Cyber Score

hyatt.com

Add Your Compliance Badge

Hyatt Centric hotels are located in the heart of the action, serving as the perfect spot for exploring all your destination has to offer.

Hyatt Centric A.I CyberSecurity Scoring

Scoring History

Hyatt Centric

Hyatt Centric CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Apple Leisure Group

Breach

5/2026

Klue Inc.

KLUHUNAPP178186...

Hyatt

Breach

2/2025

foh&boh

NORKFCFOHTACHYA...

Hyatt

Breach

2/2025

foh&boh

FOHNORHYAOMN176...

HYATT Hotels

Breach

2/2025

foh&boh

FOHKFCNORHYAOMN...

Hyatt

Ransomware

100

1/2025

HYA1768842036

Hyatt

Ransomware

100

6/2021

HYAHIL176944683...

Hyatt Centric

Breach

3/2017

HYA456072525

Hyatt Centric

Ransomware

1/2016

HYA1348522

Hyatt Centric

Breach

8/2015

HYA550072525

Hyatt

Ransomware

100

6/2015

HYA1768948645

Loading…

A.I.

Hyatt Centric Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Hyatt Centric

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for Hyatt Centric in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Hyatt Centric in 2026.

Incident Types Hyatt Centric vs Hospitality Industry Avg (This Year)

No incidents recorded for Hyatt Centric in 2026.

Incident History - Hyatt Centric (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Hyatt Centric Subsidiaries

Hyatt Centric

Hospitality

Website: https://www.hyatt.com/brands/hyatt-centric

Company Size: 645

HyattHospitality

Hyatt RegencyHospitality

Hyatt Regency London – The ChurchillHospitality

Hyatt Regency KathmanduHospitality

Hyatt Regency Istanbul AtaköyOtelcilik

Hyatt Regency BelgradeHospitality

Hyatt Regency St. Louis at The ArchHospitality

Hyatt Regency New BrunswickHospitality

Hyatt Regency San AntonioHospitality

Hyatt Regency EkaterinburgГостиничное дело

Grand HyattHospitality

Grand Hyatt IstanbulOtelcilik

Park HyattHospitality

Park Hyatt Istanbul - Maçka PalasOtelcilik

Hyatt PlaceHospitality

Apple Leisure GroupHospitality

Apple VacationsTravel Arrangements

Travel ImpressionsLeisure, Travel & Tourism

CheapCaribbean.comTravel Arrangements

Alila HotelsHospitality

ANdAZHospitality

AMResortsTravel Arrangements

Destination by HyattHospitality

HYATT HotelsHospitality

Hyatt Regency IndianapolisHospitality

Thompson HotelsHospitality

Hyatt Hotels Development EAMEImmobilien

Amstar DMCTravel Arrangements

Miraval Resorts & SpasHospitality

Miraval Berkshires CareersHospitality

Miraval Austin Resort & SpaHospitality

Miraval The Red Seaالضيافة

Miraval Arizona CareersHospitality

Hyatt HouseHospitality

JdV by HyattHospitality

Unlimited Vacation ClubTravel Arrangements

Hyatt Vacation OwnershipHospitality

Secrets ResortsHospitality

The Unbound Collection by HyattHospitality

Trisept SolutionsIT Services and IT Consulting

VAX VacationAccess by Trisept SolutionsIT Services and IT Consulting

Hyatt Regency CalgaryHospitality

UrCove by HyattHospitality

tommie HotelsHospitality

ALG Vacations®Hospitality

Hyatt ZilaraHospitality

Caption by HyattHospitality

Hyatt ZivaHospitality

Loading…

Hyatt Centric Similar Companies

DoubleTree by Hilton

cb doubletree.com

DoubleTree by Hilton hotels are distinctively designed properties that provide true comfort to today’s business and leisure travelers. From the millions of delighted hotel guests who are welcomed with the brand’s legendary, warm chocolate chip cookies at check-in to the advantages of the award-winning Hilton HHonors® guest reward program, each DoubleTree by Hilton guest receives a satisfying stay wherever their travels take them. With a growing collection of contemporary, upscale accommodations in more than 375+ gateway cities, metropolitan areas and vacation destinations worldwide. DoubleTree by Hilton is part of Hilton Worldwide (NYSE: HLT), a leading global hospitality company spanning the lodging sector from luxury and full-service hotels and resorts to extended-stay suites and focused-service hotels. For 95 years, Hilton Worldwide has been dedicated to continuing its tradition of providing exceptional guest experiences. The company’s portfolio of eleven world-class global brands is comprised of more than 4,100 managed, franchised, owned and leased hotels and timeshare properties, with more than 685,000 rooms in 92 countries and territories, including Hilton Hotels & Resorts, Waldorf Astoria Hotels & Resorts, Conrad Hotels & Resorts, Curio – A Collection by Hilton, DoubleTree by Hilton, Embassy Suites Hotels, Hilton Garden Inn, Hampton Hotels, Homewood Suites by Hilton, Home2 Suites by Hilton and Hilton Grand Vacations. The company also manages an award-winning customer loyalty program, Hilton Honors.

Caesars Entertainment

caesars.com

Caesars Entertainment, Inc. is the largest casino-entertainment Company in the U.S. and one of the world's most diversified casino-entertainment providers. Since its beginning in Reno, NV, in 1937, Caesars Entertainment, Inc. has grown through development of new resorts, expansions and acquisitions. Caesars Entertainment, Inc.'s resorts operate primarily under the Caesars®, Harrah's®, Horseshoe®, and Eldorado® brand names. Caesars Entertainment, Inc. offers diversified gaming, entertainment and hospitality amenities, one-of-a-kind destinations, and a full suite of mobile and online gaming and sports betting experiences. All tied to its industry-leading Caesars Rewards loyalty program, the Company focuses on building value with its guests through a unique combination of impeccable service, operational excellence and technology leadership. Caesars is committed to its employees, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework. 21+Gambling Problem? 21+ to gamble. Gambling Problem? Call 1-800-522-4700 or text 800GAM. For more information, please visit. www.caesars.com/corporate. Caesars Entertainment promotes a collaborative culture where accountability, passion, and idea sharing create a foundation for innovation and continuous improvement in the casino entertainment industry. Caesars is always looking for intellectually-curious professionals who are aligned with our values, motivated by meritocracy, and inspired by our commitment to our guests, team members, communities, and environment. Learn what it’s like to join a diverse by design team at Caesars Entertainment and check out our open jobs.

Radisson Hotel Group

radissonhotels.com

Radisson Hotel Group is an international hotel group, operating in EMEA and APAC with over 1,320 hotels in operation and under development in +95 countries. The international hotel group is rapidly expanding with a plan to significantly grow the portfolio. The Group’s overarching brand promise is Every Moment Matters with a signature Yes I Can! service ethos. The Radisson family of brands portfolio includes Radisson Collection, art’otel, Radisson Blu, Radisson, Radisson RED, Radisson Individuals, Park Plaza, Park Inn by Radisson, Country Inn & Suites by Radisson, and prizeotel brought together under one commercial umbrella brand Radisson Hotels. Radisson Rewards is Radisson Hotel Group’s loyalty program, which delivers an elevated experience that makes Every Moment Matter. As the most streamlined program in the sector, members enjoy exceptional advantages and can access their benefits from day one across a wide range of hotels in Europe, Middle East, Africa, and Asia Pacific. Radisson Meetings provides tailored solutions for any event or meeting, including hybrid solutions placing guests and their needs at the heart of its offer. Radisson Meetings is built around three strong service commitments: Personal, Professional and Memorable, while delivering on the brilliant basics and being uniquely 100% Carbon Neutral. At Radisson Hotel Group we care for people, communities and planet and aim to be Net Zero by 2050 based on the approved near-term Science Based Targets. With unique solutions such as 100% carbon neutral Radisson Meetings, we make sustainable hotel stays easy. To facilitate sustainable travel choices, all our hotels are becoming verified on Hotel Sustainability Basics.

Holiday Inn Express

holidayinnexpress.com

An IHG hotel. IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. At Holiday Inn Express, we strive to make every interaction you have with us simple, smart and refreshingly engaging. With over 3,000 hotels in 75 different countries, Holiday Inn Express is IHG’s largest brand and one of the fastest growing hotel brands in the industry. Holiday Inn Express offers affordable hotels, high speed internet access, free breakfast and a comfortable room that will leave you relaxed and recharged. InterContinental Hotels Group PLC is the Group’s holding company and is incorporated in Great Britain and registered in England and Wales. Approximately 350,000 people work across IHG's hotels and corporate offices globally. Visit https://www.ihg.com/holidayinnexpress/hotels/us/en/reservation for hotel information and reservations and www.ihgrewards.com for more on IHG One Rewards. For our latest news, follow us on LinkedIn, Facebook, Instagram, TikTok and Twitter.

Hilton Grand Vacations

cb hgv.com

Hilton Grand Vacations is a global leader in vacation ownership, developing, marketing and operating a portfolio of high-quality, shared-ownership properties in highly desired vacation destinations. Our company also manages and operates innovative club membership programs providing exclusive exchange, leisure travel, and reservation services for our Members. At Hilton Grand Vacations, our culture of hospitality extends to our more than 10,000 Team Members who collectively play an important role in delivering exceptional service, quality accommodations, and memorable travel experiences. That’s why we’ve created a workplace that supports growth, opportunity, work-life balance, and respect throughout our Club affiliated properties, sales centers, and corporate offices around the globe.

Kempinski Hotels

kempinski.com

Founded in Germany in 1897, Kempinski Hotels has long reflected the finest traditions of European hospitality. Today, as ever, Kempinski is synonymous with distinctive luxury. Located in many of the world's most well-known cities and resorts, the Kempinski collection includes hotels in a grand manner, pace-setting modern establishments and older hotels of individual charm. All blend gracefully into their surroundings and offer luxurious accommodations, superb cuisine and unrivalled facilities - complemented by impeccable service. For leisure and business guests alike, the name Kempinski has long been synonymous with style, mobility and efficiency. Put simply, they are the first choice for the discerning individual. In addition to operating many of the finest city hotels in the world, Kempinski is a name that can now be found in many exciting resort locations, each combining local flair and ambience with the international standards of service and luxury that Kempinski guests have come to expect. To see all the different Kempinski jobs and apply, please go to https://careers.kempinski.com

ITC Hotels Limited

itchotels.com

Established in 1975, ITC Hotels Limited has grown to encompass over 140+ hotels across 90+ destinations, solidifying its presence in the Indian subcontinent ITC Hotels seamlessly blends India’s rich tradition of hospitality with globally benchmarked services, offering a collection of hotels and resorts that reflect the unique culture and ethos of each destination. The group operates under six vibrant brands: ITC Hotels and Mementos in the luxury segment, Storii in the boutique premium segment, Welcomhotel in the upper upscale category, Fortune in the midscale segment, and WelcomHeritage in the heritage leisure space

Rosewood Hotel Group

rosewoodhotelgroup.com

Rosewood Hotel Group is one of the world’s leading global lifestyle and hospitality management groups. It encompasses four brands: ultra-luxury Rosewood; upper-upscale New World Hotels & Resorts; Asaya, an integrated well-being concept; and Carlyle & Co., a modern and progressive private members club. Its combined hotel portfolio consists of 59 properties in 26 countries with more than 30 new properties currently under development. OUR PURPOSE AND CULTURE We are driven to create a future where people and place enrich one another. We are wholly committed to rooting ourselves more deeply in every place we are in while setting new benchmarks for positive impact. As a pioneering collective with a common purpose, we curate extraordinary moments and honor the soul of every place along our journey. At Rosewood Hotel Group, we answer The Calling. Together, we Make the Place. OUR GUIDING PHILOSOPHY We believe in and are guided by Relationship Hospitality. We are all about heartfelt interactions. A desire to build genuine, rewarding and lasting relationships with everyone we meet comes naturally to us. OUR COMMITMENT At Rosewood Hotel Group, your voice is heard – and valued. We’re a community that encourages associates to be themselves, not fit into a fixed culture, and this philosophy shines through in our commitments to reflect and honor the history, culture and geography of our destinations. We’re not only committed to building and nurturing genuine, long-lasting relationships but to transforming them – and our Diversity, Equity and Inclusion (DEI) strategy helps put these principles into practice.

Taj Hotels

tajhotels.com

Established in 1903, Taj is The Indian Hotels Company Limited’s (IHCL) iconic brand for the world’s most discerning travellers seeking luxury and authentic experiences. Taj has been rated as India’s Strongest Brand across all sectors for an unprecedented fourth time and also as the World’s Strongest Hotel Brand for the third consecutive year in 2024 by Brand Finance. From landmark city addresses to enchanting jungle safaris, and from idyllic resorts to authentic living Grand Palaces, each Taj hotel offers an unrivalled fusion of warm Indian hospitality, world-class service and modern luxury. Taj's unique portfolio comprises hotels across India, North America, United Kingdom, Africa, Middle East, Sri Lanka, Maldives and Nepal.

Loading…

NEWS

Hyatt Centric CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 19, 2025 10:19 PM

6th Annual TribalHub Cybersecurity Summit

The 6th Annual TribalHub Cybersecurity Summit has expanded to include a non-technical Executive Responsibility track, designed for leaders across tribal…

Read Article

December 17, 2025 08:00 AM

New Isla Verde hotel pairs city stay with complimentary beach club access

Hyatt debuts a $30M, 223-room Hyatt Centric in Isla Verde with Vivo Beach Club access, 16000 sq. ft. of event space and 500-point bonuses...

Read Article

November 12, 2025 08:00 AM

Bodoe: Include wellness in HSE framework

Health Minister Dr Lackram Bodoe has called for the evolution of the traditional health, safety and the environment framework to become a...

Read Article

October 24, 2025 07:00 AM

6 New Luxury Hotel Openings In Italy You’ll Want To Book For 2026

Italy remains one of the top destinations for luxury travelers looking for elite hotel stays, and it's not just first-time visitors driving...

Read Article

October 02, 2025 07:00 AM

Candlelight Concerts Debut in Bengaluru at Hyatt Centric

Candlelight Concerts bring A.R. Rahman tributes and movie soundtracks to Bengaluru's Hyatt Centric Hebbal.

Read Article

August 07, 2025 07:00 AM

Zimbabwe and Russia Officially Launch Selection for National Cybersecurity Training Programme

The launch event took place yesterday at the Hyatt Regency Hotel in Harare, with government officials, international partners,...

Read Article

August 04, 2025 07:00 AM

Free Cybersecurity Training… and a $100m Russian Tech Hub? The Plan to Make Zim a Cyber Power

Zimbabwe launches free cybersecurity training with Russian-backed firm Cyberus; promises jobs, internships, and a $100m CyberDom hub.

Read Article

July 30, 2025 07:00 AM

New Hyatt Centric hotel to open in Anjuna, Goa

Hyatt Hotels has unveiled plans to open Hyatt Centric hotel in Goa, further expanding its Classics portfolio in India's leisure market.

Read Article

July 25, 2025 07:00 AM

IBC x AusCham to Host Cybersecurity Forum in Phnom Penh on July 30 at Hyatt Regency

A timely and informative forum on cybersecurity, scheduled to take place at the Hyatt Regency Phnom Penh on Wednesday, July 30, 2025.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…