What is the official website of J & P Richardson Engineering & Design ?

The official website of J & P Richardson Engineering & Design is https://http://www.jpr.com.au.

What is J & P Richardson Engineering & Design's cybersecurity risk score?

J & P Richardson Engineering & Design has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has J & P Richardson Engineering & Design experienced?

According to Rankiteo, J & P Richardson Engineering & Design currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has J & P Richardson Engineering & Design been affected by any supply chain cyber incidents ?

According to Rankiteo, J & P Richardson Engineering & Design has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does J & P Richardson Engineering & Design have SOC 2 Type 1 certification ?

According to Rankiteo, J & P Richardson Engineering & Design is not certified under SOC 2 Type 1.

Does J & P Richardson Engineering & Design have SOC 2 Type 2 certification ?

According to Rankiteo, J & P Richardson Engineering & Design does not hold a SOC 2 Type 2 certification.

Does J & P Richardson Engineering & Design comply with GDPR ?

According to Rankiteo, J & P Richardson Engineering & Design is not listed as GDPR compliant.

Does J & P Richardson Engineering & Design have PCI DSS certification ?

According to Rankiteo, J & P Richardson Engineering & Design does not currently maintain PCI DSS compliance.

Does J & P Richardson Engineering & Design comply with HIPAA ?

According to Rankiteo, J & P Richardson Engineering & Design is not compliant with HIPAA regulations.

Does J & P Richardson Engineering & Design have ISO 27001 certification ?

According to Rankiteo,J & P Richardson Engineering & Design is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does J & P Richardson Engineering & Design operate in ?

J & P Richardson Engineering & Design operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does J & P Richardson Engineering & Design have ?

J & P Richardson Engineering & Design employs approximately None employees people worldwide.

Does J & P Richardson Engineering & Design own any subsidiaries ?

J & P Richardson Engineering & Design presently has no subsidiaries across any sectors.

How many LinkedIn followers does J & P Richardson Engineering & Design have ?

J & P Richardson Engineering & Design's official LinkedIn profile has approximately 42 followers.

What is the NAICS classification code for J & P Richardson Engineering & Design ?

J & P Richardson Engineering & Design is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does J & P Richardson Engineering & Design have a Crunchbase profile ?

No, J & P Richardson Engineering & Design does not have a profile on Crunchbase.

Does J & P Richardson Engineering & Design have a LinkedIn profile ?

Yes, J & P Richardson Engineering & Design maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/j-&-p-richardson-engineering-&-design.

How many cybersecurity incidents has J & P Richardson Engineering & Design experienced ?

As of August 10, 2026, Rankiteo reports that J & P Richardson Engineering & Design has experienced 1 cybersecurity incidents.

How many peer or competitor companies does J & P Richardson Engineering & Design have ?

J & P Richardson Engineering & Design has an estimated 9,684 peer or competitor companies worldwide.

What types of cybersecurity incidents has J & P Richardson Engineering & Design faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

JPRED

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

J & P Richardson Engineering & Design Vendor Cyber Rating & Cyber Score

jpr.com.au

Add Your Compliance Badge

JPR ENGINEERING & DESIGN J & P Richardson Industries (JPR) offers design, construction, engineering, in house manufacturing, electrical installation and 24/7 maintenance and breakdown support. We are also a RTO, offering a broad range of nationally accredited and non accredited competencies. COST EFFECTIVE, PRACTICAL, SEAMLESS INTEGRATION JPR provides engineering solutions to the industrial, commercial, mining and process manufacturing industries, providing client focused industrial automation solutions. We specialise in large shutdown and maintenance projects, supervisory control and data acquisition (SCADA), process automation (PLC) and data management systems. END-TO-END SOLUTIONS, HIGH QUALITY RESULTS We offer an end to end

JPRED A.I CyberSecurity Scoring

Scoring History

JPRED

J & P Richardson Engineering & Design CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

J & P Richardson En...

Ransomware

100

9/2023

VIN096210910302...

Loading…

A.I.

JPRED Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for JPRED

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for J & P Richardson Engineering & Design in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for J & P Richardson Engineering & Design in 2026.

Incident Types JPRED vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for J & P Richardson Engineering & Design in 2026.

Incident History - JPRED (X = Date, Y = Severity)

Loading…

SUBSIDIARY

J & P Richardson Engineering & Design Subsidiaries

JPRED

Appliances, Electrical, and Electronics Manufacturing

Website: https://http://www.jpr.com.au

Company Size: None employees

VINCI EnergiesInformation Technology & Services

VINCIConstruction

VINCI ConstructionConstruction

Sogea-SatomConstruction

VINCI Construction Grands ProjetsConstruction

FreyssinetCivil Engineering

VINCI Building UKConstruction

Soletanche BachyConstruction

NUVIAConstruction

Entrepose GroupOil and Gas

VINCI Construction Outre-merConstruction

VINCI CONSTRUCTION SIIT Services and IT Consulting

MenardConstruction

VINCI ImmobilierReal Estate

VINCI Immobilier ConseilReal Estate

EuroviaConstruction

ETFRail Transportation

EUROVIA ESPAÑA. GRUPO VINCIConstruction

BA Blacktop Group of CompaniesConstruction

Test CMS-ONEConstruction

Eurovia QuébecConstruction

VINCI AutoroutesTransportation/Trucking/Railroad

VINCI ConcessionsTruck Transportation

VINCI AirportsAirlines and Aviation

VINCI HighwaysTransportation/Trucking/Railroad

VINCI insertion EmploiServices d’aide à l’insertion professionnelle

Nicholson ConstructionConstruction

LeonardConstruction

Leonard in der D-A-CH RegionConstruction

ActemiumAutomation Machinery Manufacturing

AxiansInformation Technology & Services

ComsipStaffing and Recruiting

OmexomElectric Power Transmission, Control, and Distribution

VINCI Energies BrasilIT Services and IT Consulting

VINCI Energies ItaliaIT Services and IT Consulting

Axians ItaliaInformation Technology & Services

VINCI Facilities ItaliaFacilities Services

Elphi VM Impianti ElettriciAppliances, Electrical, and Electronics Manufacturing

VINCI Energies Building Solutions ItaliaConstruction

VINCI Energies BelgiumIT Services and IT Consulting

VINCI Energies DeutschlandDesign Services

Digitalschmiede VINCI Energies DeutschlandIT und Services

VINCI Energies Building Solutions in GermanyConstruction

G+H GroupConstruction

VINCI Facilities DeutschlandConstruction

SKE InternationalConstruction

UxelloConstruction

VINCI Energies UK & RoITechnology, Information and Internet

SECURE Systems & ServicesInformation Technology & Services

Mobility - Enjoy the wayIT Services and IT Consulting

VINCI Energies NorgeEnvironmental Services

PT Indokomas Buana PerkasaConstruction

VINCI Energies SverigeEnvironmental Services

VINCI Nordic Foundation Ideell organisationsförvaltning

ElectrixUtilities

Omexom SuomiElectric Power Transmission, Control, and Distribution

VINCI Energies NLIT Services and IT Consulting

Axians NLIT Services and IT Consulting

Axians | Business AnalyticsIT Services and IT Consulting

Axians NL | Business ApplicationsIT Services and IT Consulting

Actemium NederlandAutomation Machinery Manufacturing

Koning & HartmanTechnology, Information and Internet

Bosman BedrijvenConstruction

VerkerkConstruction

VINCI Energies Building Solutions in NederlandConstruction

Schilt BedrijvenConstruction

VerAutomation B.V.Automation Machinery Manufacturing

Amecha BVIndustrial Machinery Manufacturing

de Jong engineeringAutomation Machinery Manufacturing

Omexom NLRenewable Energy Semiconductor Manufacturing

VINCI Energies PortugalHolding Companies

Mentor IMC GroupOil and Gas

VINCI Energies SénégalIT Services and IT Consulting

J & P Richardson ManufacturingAppliances, Electrical, and Electronics Manufacturing

J & P Richardson TrainingAppliances, Electrical, and Electronics Manufacturing

J & P Richardson ContractingAppliances, Electrical, and Electronics Manufacturing

J & P Richardson UtilitiesCivil Engineering

Loading…

J & P Richardson Engineering & Design Similar Companies

Delta Electronics

deltaww.com

Delta is a global innovative provider of switching power supplies and DC brushless fans, as well as a major source for power management solutions, components, visual displays, industrial automation, networking products, and renewable energy solutions. Delta Group has sales offices worldwide and manufacturing plants in Taiwan, China, Thailand, Mexico, India and Europe. As a global innovator in power electronics, Delta's mission is, "To provide innovative, clean and efficient energy solutions for a better tomorrow." Delta is committed to environmental protection and has implemented green, lead-free production and waste management programs for many years.

Dyson

dyson.com

Dyson solves real-world problems and creates better products through the application of engineering, science, design and creativity. It is a family-owned, global technology company, founded by Sir James Dyson who remains at the helm alongside his son Jake. Since inventing the first cyclonic bagless vacuum cleaner, the DC01, Dyson has consistently invested in research and development to improve its products and technologies radically. Dyson offers products across a growing range of areas: floorcare, air purification, robotics, haircare including formulations, lighting, hand drying, and most recently audio. Dyson continues to expand into new areas. Today, Dyson sells products in more than 80 markets, has 450 Dyson stores worldwide and is available in all major technology and beauty retailers. Dyson has global headquarters in Singapore and major technology campuses in Singapore, the UK, Malaysia, and the Philippines. Its global team of engineers, scientists and software developers are focused on developing technology-enabled products which work better and which people love to use. Key areas of focus have included high-speed electric digital motors, sensing and vision systems, robotics, machine learning and aerodynamics. Beyond products, to encourage an inventive future, Dyson is also inspiring the next generation of engineers and inventors through the Dyson Institute of Engineering and Technology, the James Dyson Foundation and the James Dyson Award. The Dyson family applies its problem-solving approach in other fields, and established Dyson Farming in 2012. It is one of the largest farming businesses in the UK, extending to 36,000 acres across Lincolnshire, Oxfordshire, Gloucestershire and Somerset. It is a family-owned enterprise unlike any other, focussed on long-term investment in British farming and the countryside to grow tasty and nutritious food.

Legrand

legrandgroup.com

Legrand is a global specialist in electrical and digital building infrastructures, dedicated to supporting technological, societal and environmental change around the globe. Our purpose is to improve lives by transforming the spaces where people live, work and meet by delivering electrical and digital infrastructures and connected solutions that are simple, innovative and sustainable. With nearly 38,000 employees around the world, we work hard every day to make the buildings of tomorrow more sustainable for everyone. Legrand reported sales of €8.3 billion in 2022. The company is listed on Euronext Paris and is notably a component stock of the CAC 40, CAC 40 ESG and CAC SBT 1.5 indexes. (code ISIN FR0010307819).

Keysight Technologies

keysight.com

Keysight empowers innovators to explore, design, and bring world-changing technologies to life. As the industry’s premier global innovation partner, Keysight’s software-centric solutions serve engineers across the design and development environment, enabling them to deliver tomorrow’s breakthroughs at speed and with reduced risk. Keysight leverages its strength as the world’s leading test and measurement provider and today enables innovators to push the boundaries of engineering by quickly solving design, emulation, and test challenges to help create the best product experiences. Whether you're looking to improve your design and development process, optimize and secure your network, or harness AI and digital twins to get a head start on technologies like 6G, AV and EV, IoT, or quantum computing — Keysight accelerates innovation across the workflow with intelligent insights built on the most accurate measurements. Our fusion of technology knowledge, measurement science expertise, and tailored solutions helps you forge ahead with confidence in our connected and dynamic world. Keysight Technologies (NYSE: KEYS) is an S&P 500 technology company, headquartered in Santa Rosa, California, with offices and manufacturing worldwide. Keysight owns 2,000+ patents and our ~15,000 employees work with nearly 32,000 customers worldwide to start technology revolutions. Keysight customers span the communications, industrial automation, aerospace and defense, automotive, energy, semiconductor, and general electronics markets. Join us! To accelerate innovation to connect and secure the world, innovators start here, with Keysight.

Eaton

eaton.com

Eaton is an intelligent power management company dedicated to improving the quality of life and protecting the environment for people everywhere. We are guided by our commitment to do business right, to operate sustainably and to help our customers manage power ─ today and well into the future. By capitalizing on the global growth trends of electrification and digitalization, we’re accelerating the planet’s transition to renewable energy and helping to solve the world’s most urgent power management challenges. Eaton is an Equal Opportunity Employer. Eaton is committed to ensuring equal employment opportunities for all job applicants and employees. Employment decisions are based upon job-related reasons regardless of an applicant's race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, marital status, genetic information, protected veteran status, or any other status protected by law.

Sanmina

sanmina.com

Sanmina Corporation (Nasdaq: SANM) is a leading integrated manufacturing solutions provider serving the fastest-growing segments of the global Electronics Manufacturing Services (EMS) market. Recognized as a technology leader, Sanmina Corporationprovides end-to-end manufacturing solutions, delivering superior quality and support to Original Equipment Manufacturers (OEMs) primarily in the communications networks, defense and aerospace, industrial and semiconductor systems, medical, multimedia, computing and storage, automotive and clean technology sectors. Sanmina Corporation has facilities strategically located in key regions throughout the world.

Flex

flex.com

Flex (Reg. No. 199002645H) is the global manufacturing partner of choice that helps leading brands design, build, and manage products that improve the world. For more information, visit flex.com. We love to hear your thoughts, comments and ideas so feel free to like, share and comment away. Any question or opinion is good to go as long as it is respectful and falls within the scope of this page. Derogatory comments, spam and unsolicited selling are not welcome here and such posts will be removed.

Bharat Heavy Electricals Limited

bhel.com

Established in 1964, BHEL is one of India's largest engineering and manufacturing enterprises in the energy and infrastructure sectors, and a leading power equipment manufacturer globally. BHEL serves the core sectors of the economy and provides a comprehensive portfolio of products, systems and services to customers in power, transmission, transportation, renewables, water, defence & aerospace, oil & gas, and industry. BHEL has created value for its stakeholders due to the scale and depth of its operations, rich experience, competent manpower, innovative ecosystem, diverse product-mix and focus on sustainable business solutions. BHEL’s greatest asset- its highly skilled and committed workforce of more than 34,000 employees is the cornerstone of its success. BHEL’s commitment to nation building reflects in many ways- in its contribution to the country’s installed power generation capacity; bringing the latest state-of-the-art technology to the country; consistent highest expenditure of more than 2.5% of its turnover on R&D and innovation in the Indian engineering segment; pan-India presence; establishment of world-class assets with presence in over 84 country across the globe, and contribution to the society at large through initiatives in skilling youth, health & hygiene, education, cleanliness and environment protection, to name a few. With a widespread network of 16 manufacturing facilities, 2 repair units, 4 regional offices, 8 service centres, 1 subsidiary, 3 active joint ventures, 15 regional marketing centres, 3 overseas offices and current project execution at more than 150 project sites across India and abroad, BHEL manufactures a wide range of high quality & reliable products adhering to national & international standards. BHEL has installed over 1000 utility sets worldwide with its installed base of supplied power generating equipment exceeding 185 GW. BHEL has also commissioned 200+ electric substations & 5 major HVDC projects in the country.

Panasonic

cb holdings.panasonic

Founded in 1918, and today a global leader in developing innovative technologies and solutions for wide-ranging applications in the consumer electronics, housing, devices, B2B solutions and energy sectors worldwide, the Panasonic Group switched to an operating company system on April 1, 2022 with Panasonic Holdings Corporation serving as a holding company. The Group reported consolidated net sales of 8,458.2 billion yen for the year ended March 31, 2025.

Loading…

NEWS

J & P Richardson Engineering & Design CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 03, 2025 09:00 PM

Helen J. Persichilli Obituary

Helen J. Persichilli, 81, passed away Monday morning (Dec. 1, 2025) at her home on Cedar Street, surrounded by the love of her family. To honor her...

Read Article

December 03, 2025 08:54 PM

The Rev. Frank J. Alagna, 81

The Rev. Frank J. Alagna, Episcopal priest, counselor, and passionate advocate for immigrant justice, died Saturday, November 29, 2025 at.

Read Article

December 03, 2025 08:53 PM

Thomas J. Mahoney Jr. Obituary (2025) - Providence, RI - E. G. Cummings Memorial Funeral Home, Inc.

Thomas Mahoney Obituary Mrs. Dorothy Scott Nichols, a resident of Montgomery, AL, passed away on December 1, 2025. The funeral service will...

Read Article

December 03, 2025 08:45 PM

Daniel J. "Dan" Ryan Obituary (2025) - Auburn, MA - Britton-Wallace Funeral Home - Auburn

Daniel Ryan Obituary Time stopped for a moment on Tuesday, November 25th, some of you may have felt it, too. We imagine it was the moment...

Read Article

December 03, 2025 08:39 PM

Jessie J Reveals Why She Broke Royal Protocol When Meeting Kate Middleton

Despite being told not to, Jessie J went against royal protocol and gave the Princess of Wales a hug during the Royal Variety Performance event.

Read Article

December 03, 2025 08:35 PM

The Shackles of Crime: John J. Lennon’s "The Tragedy of True Crime"

Twice a month I enter the only women's prison in Connecticut to record incarcerated women as they read books for their children.

Read Article

December 03, 2025 08:34 PM

Obituary for Donald J. Roulley

DONALD J. ROULLEY. Of Niagara Falls, NY passed away November 26, 2025. He was born in Niagara Falls, NY on January 10, 1946, the son of the...

Read Article

December 03, 2025 08:33 PM

Mr. Emanuel J. Johnson Obituary (2025) - Shreveport, LA - Heavenly Gates Funeral Home - Shreveport

Emanuel Johnson Obituary On behalf of the Management and Staff of Heavenly Gates Funeral Home, in conjunction with the Johnson Family,...

Read Article

December 03, 2025 08:25 PM

Harlow J Heintz

POYNETTE - Harlow James Heintz, 74, died November 29, 2025, at his home after a brief illness.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…