What is the official website of Labour Program ?

The official website of Labour Program is http://ow.ly/1jxu30qipd8.

What is Labour Program's cybersecurity risk score?

Labour Program has an AI-generated cybersecurity risk score of 761 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Labour Program experienced?

According to Rankiteo, Labour Program currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Labour Program been affected by any supply chain cyber incidents ?

According to Rankiteo, Labour Program has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Labour Program have SOC 2 Type 1 certification ?

According to Rankiteo, Labour Program is not certified under SOC 2 Type 1.

Does Labour Program have SOC 2 Type 2 certification ?

According to Rankiteo, Labour Program does not hold a SOC 2 Type 2 certification.

Does Labour Program comply with GDPR ?

According to Rankiteo, Labour Program is not listed as GDPR compliant.

Does Labour Program have PCI DSS certification ?

According to Rankiteo, Labour Program does not currently maintain PCI DSS compliance.

Does Labour Program comply with HIPAA ?

According to Rankiteo, Labour Program is not compliant with HIPAA regulations.

Does Labour Program have ISO 27001 certification ?

According to Rankiteo,Labour Program is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Labour Program operate in ?

Labour Program operates primarily in the Government Administration industry.

How many employees does Labour Program have ?

Labour Program employs approximately None employees people worldwide.

Does Labour Program own any subsidiaries ?

Labour Program presently has no subsidiaries across any sectors.

How many LinkedIn followers does Labour Program have ?

Labour Program's official LinkedIn profile has approximately 3,675 followers.

What is the NAICS classification code for Labour Program ?

Labour Program is classified under the NAICS code 92, which corresponds to Public Administration.

Does Labour Program have a Crunchbase profile ?

No, Labour Program does not have a profile on Crunchbase.

Does Labour Program have a LinkedIn profile ?

Yes, Labour Program maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/labour-program.

How many cybersecurity incidents has Labour Program experienced ?

As of August 10, 2026, Rankiteo reports that Labour Program has experienced 8 cybersecurity incidents.

How many peer or competitor companies does Labour Program have ?

Labour Program has an estimated 13,158 peer or competitor companies worldwide.

What types of cybersecurity incidents has Labour Program faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Data Leak, Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Labour Program

Boost Score +25 with badge (5 left)

761

/1000

Fair

786

/1000

Fair

Labour Program Vendor Cyber Rating & Cyber Score

ow.ly

Add Your Compliance Badge

Welcome to the Labour Program page. The Labour Program is part of the Employment and Social Development Canada portfolio and is responsible for protecting the rights and well-being of both workers and employers in federally regulated workplaces. We work closely with provincial and territorial governments, unions, employers, international partners and other stakeholders to promote fair, safe and productive workplaces, and collaborative workplace relations. FR: https://linkedin.com/showcase/programme-du-travail Please review our terms and conditions, which also include information on interacting with us on social media: http://ow.ly/5SP330qjFMS

Labour Program A.I CyberSecurity Scoring

Scoring History

Labour Program

Labour Program CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Labour Program

Breach

10/2025

TRA270222710182...

Labour Program

Breach

5/2025

OFF100251009182...

Labour Program

Breach

10/2022

CAN206221122

Government of Canad...

Cyber Attack

3/2020

GOV1766174849

Treasury Board of C...

Breach

100

3/2020

TBS1786048347

Labour Program

Data Leak

08/2018

GOV12181122

Labour Program

Breach

06/2018

CAN17246822

Labour Program

Cyber Attack

100

06/2015

GOV192330422

Loading…

A.I.

Labour Program Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Labour Program

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Labour Program in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Labour Program in 2026.

Incident Types Labour Program vs Government Administration Industry Avg (This Year)

No incidents recorded for Labour Program in 2026.

Incident History - Labour Program (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Labour Program Subsidiaries

Labour Program

Government Administration

Website: http://ow.ly/1jxu30qipd8

Company Size: 10,001+ employees

Government of CanadaGovernment Administration

Canada Revenue Agency - Agence du revenu du CanadaGovernment Administration

Health Canada | Santé CanadaGovernment Administration

Service CanadaGovernment Administration

Statistics Canada | Statistique CanadaGovernment Administration

Canada Border Services Agency | Agence des services frontaliers du CanadaGovernment Administration

National Research Council Canada / Conseil national de recherches CanadaResearch Services

Public Health Agency of Canada | Agence de la santé publique du CanadaGovernment Administration

Environment and Climate Change CanadaGovernment Administration

Public Services and Procurement Canada | Services publics et Approvisionnement CanadaGovernment Administration

PSPC Jobs | Emplois SPACGovernment Administration

Real Property Services / Services immobiliersGovernment Administration

Marine Procurement | Approvisionnement MaritimeShipbuilding

Translation Bureau | Bureau de la traductionGovernment Administration

Finance Canada / Finances CanadaGovernment Administration

Transport Canada - Transports CanadaGovernment Administration

Canadian Armed Forces | Forces armées canadiennesArmed Forces

Department of Justice Canada | Ministère de la Justice du CanadaGovernment Administration

Innovation, Science and Economic Development Canada | Innovation, Sciences et Développement économique CanadaGovernment Administration

Innovative Solutions CanadaGovernment Relations Services

Canada Digital Adoption Program | Programme canadien d'adoption du numériqueGovernment Relations Services

Immigration and Refugee Board of Canada | Commission de l'immigration et du statut de réfugiéGovernment Administration

Canada Mortgage and Housing Corporation (CMHC) Société canadienne d'hypothèques et de logement(SCHL)Government Administration

Public Safety Canada | Sécurité publique CanadaPublic Safety

Canadian Food Inspection AgencyGovernment Administration

Trade Commissioner Service | Service des délégués commerciauxInternational Trade and Development

Treasury Board of Canada Secretariat | Secrétariat du Conseil du Trésor du CanadaGovernment Administration

Natural Sciences and Engineering Research Council of Canada (NSERC)Government Administration

Canadian Centre for Occupational Health and SafetyGovernment Administration

Office of the Privacy Commissioner of Canada/Commissariat à la protection de la vie privée du CanadaGovernment Administration

Federal Economic Development Agency for Southern Ontario | Agence fédérale de ...Government Administration

Shared Services Canada | Services partagés CanadaGovernment Administration

SSHRC-CRSHGovernment Administration

Canada School of Public Service | École de la fonction publique du CanadaGovernment Administration

Veterans Affairs Canada / Anciens Combattants CanadaGovernment Administration

Communications Security Establishment Canada | Centre de la sécurité des télécommunications CanadaGovernment Administration

ACOA - APECAGovernment Administration

Prairies Economic Development Canada I Développement économique Canada pour les PrairiesGovernment Administration

Commission de la fonction publique du Canada | Public Service Commission of CanadaGovernment Administration

WAGE / FEGCGovernment Administration

CRTCTelecommunications

Policy Horizons Canada - Horizons de politiques CanadaGovernment Administration

Canada Economic Development for Quebec RegionsGovernment Administration

Get Cyber SafeGovernment Administration

Inside ECCC | Ici à ECCCGovernment Administration

Canadian Armed Forces | Forces armées canadiennesArmed Forces

Bureau de la concurrence CanadaLaw Enforcement

Public Prosecution Service of Canada | Service des poursuites pénales du CanadaGovernment Administration

Competition Bureau CanadaLaw Enforcement

Canadian Intellectual Property Office / Office de la propriété intellectuelle du CanadaGovernment Administration

Pensez cybersécuritéGovernment Administration

My Source | Ma sourceGovernment Administration

Régie de l’énergie du CanadaGovernment Administration

Doing Business with the Government of Canada | Faire affaire avec le gouvernement du CanadaGovernment Administration

Canadian Institutes of Health Research | Instituts de recherche en santé du CanadaGovernment Administration

Centre canadien d'hygiène et de sécurité au travail (CCHST)Government Administration

Programme 2030 CanadaGovernment Administration

Canada 2030 AgendaGovernment Administration

Emploi et Développement social Canada (EDSC) / Employment and Social Development Canada (ESDC)Government Administration

Programme du travailGovernment Administration

Loading…

Labour Program Similar Companies

Government of Alberta

alberta.ca

Work with the Alberta government to build a stronger province for current and future generations. We offer diverse and rewarding employment opportunities in an environment that encourages continuous learning and career growth. We are one of the largest employers in Alberta with over 27,000 employees throughout the province. We are an award winning organization that values respect, accountability, integrity, and excellence. Our employees share a common vision of proudly working together to build a stronger province and make a positive and lasting difference in the lives of Albertans. The people of Alberta enjoy a very high quality of life, including the lowest overall taxes in Canada. www.jobs.alberta.ca Please see our comment policy: https://www.alberta.ca/social-media-comment-policy.aspx

Queensland Government

qld.gov.au

ABOUT US We are the largest and most diverse organisation in our state. We have more than 90 government departments and organisations delivering for Queensland across 4000+ locations, from the Torres Strait to the Gold Coast; Mount Isa to Brisbane. This page is monitored by Queensland Government employees from 8am to 5pm, Monday to Friday. HOUSE RULES — all users must comply with LinkedIn policies and terms of use — please do not post content or comments that could be considered • abusive or obscene, name calling, harassment or personal attacks • defamatory towards a person or people • prejudicial, inflammatory or offensive • deceptive, misleading or false information about an individual, organisation, government or entity • personal or sensitive information about yourself or others • in violation of any intellectual property rights, or any other law or regulation • promotion of a product, business, company or organisation • off-topic or spam, including the same comment posted repeatedly. Any content or comments deemed to fit under these definitions will be deleted. Users found to repeatedly post these types of comments will be banned from this page. You should report any offensive material presented on LinkedIn. Complaints about defamatory digital matter or anything you consider to be offensive should be made to the attention of the Public Sector Commission via our website www.psc.qld.gov.au/contact/customer-compliments-and-complaints. A complaint about defamatory digital matter should contain your name, the matter and where it is located, and that you consider the matter to be defamatory. CURRENT CONDITIONS © The State of Queensland (Public Sector Commission) 2026 Subject to LinkedIn’s Statement of Rights and Responsibilities, all content released on this page is licensed under a Creative Commons Attribution (BY) 2.5 Australia Licence. Permissions may be available beyond the scope of this licence.

Malmö stad

malmo.se

Bli en samhällsbyggare – jobba i Malmö stad! Genom att arbeta i Malmö stad får du möjlighet att arbeta med hållbar samhällsutveckling. Som en samhällsbyggare spelar du en viktig roll i Malmös utveckling och därför ser vi oss som framtidens arbetsplats. Människors lika värde är en förutsättning för demokrati och är också en självklarhet i vår värdegrund. Med 20 000 medarbetare är Malmö stad en av de största arbetsgivarna i Skåne. Vi har över 400 yrkeskategorier representerade inom 22 förvaltningar. Är du intresserad av att jobba hos oss? Se våra lediga tjänster på http://www.malmo.se/jobb

City of Seattle

seattle.gov

Work With Purpose. Shape Seattle. Inspire the World. Seattle is more than a world-class city — it’s a vibrant, evolving community rooted in shared values of sustainability, innovation, and inclusion. As a public employer, the City of Seattle is committed to building a city that works for everyone, where communities thrive, opportunity is accessible, and public service drives real, lasting impact. With more than 12,000 employees across 40+ departments, we’re proud to serve the people of Seattle in every aspect of city life, from transportation and utilities to immigrant and refugee affairs, arts and culture, housing, and environmental stewardship. Whether you're maintaining parks, delivering clean water, strengthening neighborhoods, or shaping policy, your work helps power a city that puts people first. We offer more than 1,100 job titles, from seasonal and entry-level positions to senior leadership roles, across a wide range of fields: skilled trades, technology, finance, urban planning, public health, human services, public safety, and more. Whatever your background or career path, there’s a meaningful place for you here! At the City of Seattle, public service is more than a job; it's a shared purpose. We don’t just serve our community, we strive to be a model of what good government can be: inclusive, innovative, equitable, transparent, collaborative, and visionary. We believe that local leadership, done right, can inspire change far beyond our city limits. Joining the City of Seattle means joining a diverse, dedicated team that believes in the power of community and the possibility of progress. Together, we’re building a city where everyone can live, work, and thrive, and showing what’s possible when government works for the people it serves! Come build your career and community with us! View the City's policies at seattle.gov/digital

Council Careers Victoria

asn.au

Victorian local government jobs offer opportunities for people with diverse skills. The sector delivers more than 100 services and employs staff in the areas of health and community care, corporate and business support, engineering, planning and community development, and environment and emergency management. Local government offers you the opportunity to: • work directly with the community • work in any location across the state • be involved in on-going learning and development • negotiate flexible working arrangements • take part in employee health and recreation programs • undertake further study.

eThekwini Municipality

durban.gov.za

EThekwini Municipality is a Metropolitan Municipality found in the South African province of KwaZulu-Natal. Home to the world-famous city of Durban. EThekwini is the largest City in the province and the third largest city in the country. It is a sophisticated cosmopolitan city of over 3 468 088 people. It is known as the home of Africa's best-managed, busiest port and is also a major centre of tourism because of the city's warm subtropical climate and extensive beaches. The eThekwini Municipality is an employer of choice, with excellent working conditions and competitive salary packages for employees. The Municipality is committed to creating a great place to work by creating development opportunities for employees to grow. Working for eThekwini Municipality will give you a chance to make a difference in people’s lives and become part of our team to make Durban the most caring and liveable city in Africa. Some facts about eThekwini Municipality: 1. Known as South Africa’s Playground – plenty of places to visit and activities to do 2. First African city to host the Commonwealth Games 3. Historically rich with Heritage sites for Nelson Mandela and Mahatma Ghandi 4. Home to the Comrades Marathon – The worlds’ largest ultra-marathon 5. The world’s tallest bungee swing at the Moses Mabhida stadium 6. Durban Aliwal Shoal – a world top diving site 7. Durban harbour - 9th largest harbour in the world - busiest container port in Africa 8. Africa’s first Aerotropolis – Trade Port with direct links globally 9. One of the top surfing destinations in South Africa 10. Ushaka Marine World – Biggest Aquarium in Africa

U.S. Department of the Treasury

treasury.gov

The Treasury Department is the executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. The Department is responsible for a wide range of activities such as advising the President on economic and financial issues, encouraging sustainable economic growth, and fostering improved governance in financial institutions. The Department of the Treasury operates and maintains systems that are critical to the nation's financial infrastructure, such as the production of coin and currency, the disbursement of payments to the American public, revenue collection, and the borrowing of funds necessary to run the federal government. The Department works with other federal agencies, foreign governments, and international financial institutions to encourage global economic growth, raise standards of living, and to the extent possible, predict and prevent economic and financial crises. The Treasury Department also performs a critical and far-reaching role in enhancing national security by implementing economic sanctions against foreign threats to the U.S., identifying and targeting the financial support networks of national security threats, and improving the safeguards of our financial systems.

Department of Education and Youth

www.gov.ie

The Department of Education and Youth is a ministerial department of the Irish State with responsibility for education. Our mission to facilitate children and young people, through learning, to achieve their full potential and contribute to Ireland’s social, economic and cultural development. The current Minister for Education is Hildegarde Naughton TD, and the Minister of State with responsiblity for Special Education and Inclusion is Michael Moynihan TD.

Ontario Government | Gouvernement de l’Ontario

ontario.ca

Ontario Government | Gouvernement de l’Ontario The Ontario Government works to serve the public interest and uphold the public trust by providing Ministers with objective advice and expert guidance. The Ontario Public Service carries out the decisions and policies of the elected government with integrity and accountability and administers public services to the highest professional standards. Le gouvernement de l’Ontario sert l’intérêt public et conserve la confiance du public en fournissant aux ministres des conseils objectifs et spécialisés. La fonction publique de l’Ontario applique les décisions et les politiques du gouvernement élu. En respectant le principe de reddition des comptes et avec intégrité, elle administre les services à la population selon les normes professionnelles les plus rigoureuses.

Loading…

NEWS

Labour Program CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 13, 2026 07:10 AM

National cyber law work program to secure digital future

Acting Minister for ICT, Peter Tsiamalili Jr., has declared that Papua New Guinea's development pathway is now officially "digital," making...

Read Article

January 21, 2026 08:00 AM

Remote Work Is Good for Your Business

A flexible work schedule is valued by many employees. But it also benefits businesses, which save money on office space, utilities and more.

Read Article

November 04, 2025 08:00 AM

UTSA Cyber Range Trains Students in 'Ready to Work' Program

The University of Texas at San Antonio's Cyber Range is part of the city's $200 million Ready to Work program, but only 316 of 741 people...

Read Article

November 04, 2025 08:00 AM

Cyber Security Salaries, Jobs, and Career Growth in 2026

Find out which cyber security jobs pay the most in 2026. Learn about salary trends, in-demand skills, and career paths in the growing field...

Read Article

September 19, 2025 08:55 AM

Cyber security skills in the UK labour market 2025

I am delighted to present the 2025 findings report on cyber security skills in the UK labour market. This report, conducted by Ipsos and Perspective...

Read Article

August 07, 2025 07:00 AM

From vision to reality: SPARK program ignites opportunities for youth at San Bernardino County

The applause filled the room long before the last name was even called. Inside the packed Bear Springs Hotel event center, tables of youth...

Read Article

August 01, 2025 03:30 AM

Early careers

Develop your skills alongside leaders with a global organization that values your growth and encourages you to improve the health care landscape.

Read Article

July 25, 2025 07:00 AM

Trump Administration Issues AI Action Plan and Series of AI Executive Orders

On July 23, the White House released its AI Action Plan, outlining the key priorities of the Trump Administration's AI policy agenda.

Read Article

July 15, 2025 07:00 AM

A Little-Known Microsoft Program Could Expose the Defense Department to Chinese Hackers

The Pentagon bans foreign citizens from accessing highly sensitive data, but Microsoft bypasses this by using engineers in China and...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…