What is the official website of Lynx Recruitment ?

The official website of Lynx Recruitment is http://www.lynxrecruitment.co.uk.

What is Lynx Recruitment's cybersecurity risk score?

Lynx Recruitment has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Lynx Recruitment experienced?

According to Rankiteo, Lynx Recruitment currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Lynx Recruitment been affected by any supply chain cyber incidents ?

According to Rankiteo, Lynx Recruitment has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Lynx Recruitment have SOC 2 Type 1 certification ?

According to Rankiteo, Lynx Recruitment is not certified under SOC 2 Type 1.

Does Lynx Recruitment have SOC 2 Type 2 certification ?

According to Rankiteo, Lynx Recruitment does not hold a SOC 2 Type 2 certification.

Does Lynx Recruitment comply with GDPR ?

According to Rankiteo, Lynx Recruitment is not listed as GDPR compliant.

Does Lynx Recruitment have PCI DSS certification ?

According to Rankiteo, Lynx Recruitment does not currently maintain PCI DSS compliance.

Does Lynx Recruitment comply with HIPAA ?

According to Rankiteo, Lynx Recruitment is not compliant with HIPAA regulations.

Does Lynx Recruitment have ISO 27001 certification ?

According to Rankiteo,Lynx Recruitment is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Lynx Recruitment operate in ?

Lynx Recruitment operates primarily in the Staffing and Recruiting industry.

How many employees does Lynx Recruitment have ?

Lynx Recruitment employs approximately 15 people worldwide.

Does Lynx Recruitment own any subsidiaries ?

Lynx Recruitment presently has no subsidiaries across any sectors.

How many LinkedIn followers does Lynx Recruitment have ?

Lynx Recruitment's official LinkedIn profile has approximately 15,251 followers.

What is the NAICS classification code for Lynx Recruitment ?

Lynx Recruitment is classified under the NAICS code 5613, which corresponds to Employment Services.

Does Lynx Recruitment have a Crunchbase profile ?

No, Lynx Recruitment does not have a profile on Crunchbase.

Does Lynx Recruitment have a LinkedIn profile ?

Yes, Lynx Recruitment maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/lynxrecruitmentuk.

How many cybersecurity incidents has Lynx Recruitment experienced ?

As of October 20, 2026, Rankiteo reports that Lynx Recruitment has not experienced any cybersecurity incidents.

How many peer or competitor companies does Lynx Recruitment have ?

Lynx Recruitment has an estimated 12,590 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Lynx Recruitment

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Lynx Recruitment Vendor Cyber Rating & Cyber Score

lynxrecruitment.co.uk

Add Your Compliance Badge

Lynx Recruitment - Your transparent, honest talent solution. We are more than just a staffing agency. We're your trusted partner in building high-performing teams. With our industry expertise and data-driven approach, we help you find the right talent to drive your success. Focusing on sourcing top-tier talent that aligns with your company’s culture and goals. We connect you with the right candidates who can drive your business forward. Specialising in: Tech Support & Cyber Security Data Science & Analytics Software & Development Engineering & Manufacturing Sales & Marketing Accountancy, Financial & Actuarial Business Change With over 20 years of experience and trusted by some of the biggest market-leading companies, let us help you!

Lynx Recruitment

Lynx Recruitment CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Lynx Recruitment Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Lynx Recruitment

Incidents vs Staffing and Recruiting Industry Avg (This Year)

No incidents recorded for Lynx Recruitment in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Lynx Recruitment in 2026.

Incident Types Lynx Recruitment vs Staffing and Recruiting Industry Avg (This Year)

No incidents recorded for Lynx Recruitment in 2026.

Incident History - Lynx Recruitment (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Lynx Recruitment Subsidiaries

Lynx Recruitment

Staffing and Recruiting

Website: http://www.lynxrecruitment.co.uk

Company Size: 15

119

ReplyIT Services and IT Consulting

Open Reply ITIT Services and IT Consulting

Blue Reply ITIT Services and IT Consulting

Airwalk ReplyIT Services and IT Consulting

Concept Reply GmbHInformation Technology & Services

Spike ReplyIT Services and IT Consulting

Machine Learning ReplyIT Services and IT Consulting

Spur ReplyBusiness Consulting and Services

Communication Valley ReplyComputer and Network Security

Concept Quality ReplyIT Services and IT Consulting

Like ReplyAdvertising Services

AIM ReplyIT Services and IT Consulting

Fincon Reply GmbHInformation Services

HERMES REPLYInformation Technology & Services

Glue ReplyIT Services and IT Consulting

Data Reply UKIT Services and IT Consulting

e*finance consulting ReplyFinancial Services

Wemanity Learning CenterDéveloppement professionnel et coaching

Target Reply RomeIT Services and IT Consulting

Sense ReplyIT Services and IT Consulting

Concept Reply USInformation Technology & Services

Sprint Reply ITInformation Technology & Services

Logistics Reply UKSoftware Development

Solidsoft ReplyIT Services and IT Consulting

Business Elements ReplyIT Services and IT Consulting

ARLANIS REPLYIT Services and IT Consulting

Roboverse Reply DEIT Services and IT Consulting

Liquid ReplyIT Services and IT Consulting

Sprint Reply DEIT Services and IT Consulting

Life At ReplyIT Services and IT Consulting

BitmamaAdvertising Services

Avantage ReplyFinancial Services

Valorem ReplyIT Services and IT Consulting

Nexi DigitalFinancial Services

Wemanity MarocIT Services and IT Consulting

Storm ReplyIT Services and IT Consulting

Syskoplan Reply USIT Services and IT Consulting

Threepipe ReplyAdvertising Services

Machine Learning Reply GmbHIT Services and IT Consulting

Technology ReplySoftware Development

Concept Engineering ReplyIT Services and IT Consulting

Wemanity BelgiumInformation Technology & Services

ATLAS REPLYIT Services and IT Consulting

Cloud9 ReplyIT Services and IT Consulting

Cluster Reply DEIT Services and IT Consulting

Go ReplyIT Services and IT Consulting

WM ReplyIT Services and IT Consulting

Xister ReplyAdvertising Services

Mansion House ConsultingBusiness Consulting and Services

Net ReplyIT Services and IT Consulting

Pay ReplyInformation Technology & Services

Connect ReplyIT Services and IT Consulting

TD ReplyBusiness Consulting and Services

Sytel ReplyIT Services and IT Consulting

Data Reply FRInformation Technology & Services

Laife ReplyInformation Technology & Services

Comsysto Reply GmbHIT Services and IT Consulting

Whitehall ReplyIT Services and IT Consulting

Syskoplan Reply DACHInformation Technology & Services

Business ReplySoftware Development

ARLANIS REPLY ITIT Services and IT Consulting

Canvas ReplyIT Services and IT Consulting

Spike Reply DEIT Services and IT Consulting

Wakanda Technologies - We bring African IT Power to EuropeIT-Dienstleistungen und IT-Beratung

Graymatter ReplyAdvertising Services

Graymatter REPLY DigitalAdvertising Services

Light ReplyIT Services and IT Consulting

Triplesense ReplyTechnology, Information and Internet

Aktive ReplyInformation Technology & Services

Everlo Reply GmbHIT Services and IT Consulting

Shield ReplyIT Services and IT Consulting

Technology Reply RomaniaIT Services and IT Consulting

Autonomous Reply FRIT Services and IT Consulting

Blue Reply DEIT Services and IT Consulting

4brands ReplyInformation Technology & Services

Accelerator 365 by ReplySoftware Development

Cortex Reply UKTechnology, Information and Internet

Sprint Reply BEIT Services and IT Consulting

KI ReplyInformation Technology & Services

Open Reply UKInformation Technology & Services

Starbytes.itInformation Technology & Services

Reply ChallengesFornitori di e-learning

Data Reply ITIT Services and IT Consulting

Blockchain ReplyIT Services and IT Consulting

Wemanity NetherlandsProfessional Training and Coaching

Target ReplyData Infrastructure and Analytics

Leadvise ReplyBusiness Consulting and Services

Digital Transformation der Regulatory AffairsUnternehmensberatung

Data Reply DEInformation Technology & Services

Comwrap Reply DACHTechnology, Information and Internet

Live Reply DEIT Services and IT Consulting

Infinity Reply ITIT Services and IT Consulting

Open ReplyInformation Technology & Services

Logistics Reply USSoftware Development

Up ReplyIT Services and IT Consulting

Brick Reply | IT Solutions and Services for ManufacturingSoftware Development

Storm Reply DEIT Services and IT Consulting

Sytel Reply NorthInformation Technology & Services

Net Reply UKIT Services and IT Consulting

Red Reply DEIT Services and IT Consulting

Neo ReplyIT Services and IT Consulting

Live Reply ItalyIT Services and IT Consulting

Sprint Reply UKIT Services and IT Consulting

Arlanis Reply UKIT Services and IT Consulting

Air ReplyIT Services and IT Consulting

Infinity Reply DEIT Services and IT Consulting

Macros Reply GmbHIT Services and IT Consulting

Spike Reply UKTechnology, Information and Internet

Storm Reply, Inc.Professional Services

Eos ReplyIT Services and IT Consulting

Open Reply Benelux - FranceBusiness Consulting and Services

Alpha ReplyIT Services and IT Consulting

Affinity ReplyIT Services and IT Consulting

Ki Reply UKIT Services and IT Consulting

Zest ReplyIT Services and IT Consulting

Nimbus ReplyIT Services and IT Consulting

Cluster Reply PLIT Services and IT Consulting

Industrie Reply USMotor Vehicle Manufacturing

Atomic ReplyBusiness Consulting and Services

Loading…

Lynx Recruitment Similar Companies

Randstad USA

randstadusa.com

Randstad North America, Inc. is a wholly-owned subsidiary of Randstad N.V., the world's largest HR services provider. Driven to become the world's most valued 'working life partner', supporting as many people as possible in realizing their true potential throughout their working life, we provide companies with the high quality, diverse, and agile workforces they need while helping people get rewarding jobs and stay relevant in the ever-changing world of work. In 2021, Randstad had on average 39,530 corporate employees and generated revenue of € 24.6 billion. Randstad's North American operations comprise 5,700+ associates and a deployed workforce of more than 86,000 in the U.S. and Canada. In addition to staffing and recruitment, Randstad offers outsourcing, consulting and workforce management solutions for generalist and specialist disciplines, including technology, engineering, accounting and finance, clinical and non-clinical healthcare, human resources, legal, life sciences, manufacturing and logistics, office and administration and sales and marketing. Global concepts available to North American client companies include RPO, MSP, integrated talent solutions, payrolling and independent contractor management and career transition services. Learn more at www.randstadusa.com or www.randstad.ca.

Robert Half

roberthalf.com

🔒 At Robert Half, we prioritize your security—if you believe you've encountered a scam or fraudulent recruiter, please report it immediately to https://www.roberthalf.com/us/en/fraud-alert. All Robert Half recruiters communicate using their corporate email address, ending in roberthalf.com. 👋 Welcome to Robert Half. We're the world’s first and largest specialized talent solutions firm, connecting opportunities at great companies with highly skilled job seekers. We provide dynamic contract, temporary, and permanent placement solutions across finance, accounting, technology, marketing, creative, legal, and administrative sectors. 🏆 In the last 12 months, Robert Half has been recognized as one of America’s Most Innovative Companies by Fortune, and with Protiviti, has been named one of the Fortune® World's Most Admired Companies™ and 100 Best Companies to Work For. 🏦 Traded on the New York Stock Exchange (symbol: RHI), we’re at the forefront of innovation in talent acquisition.

Express Employment International

ExpressPros.com

Founded in 1983 and corporately headquartered in Oklahoma City, Express Employment International supports the Express Employment Professionals franchise and related brands. The Express franchise brand is an industry-leading, international staffing company with franchise locations across the U.S., Canada, South Africa, Australia and New Zealand. Express International boasts a team of more than 500 professionals in Oklahoma City, and a network of sales and support teams internationally. Express Employment Professionals, our flagship franchise, has more than 870 franchise locations and began franchising in 1985 to deliver staffing support and human resource services through a network of franchise office owners. Express helps people find good jobs and companies find good people, and offers a full range of employment solutions, including evaluation hire, temporary staffing, professional search, and human resources for businesses around the globe. Focusing on a wide range of positions, Express' long-term goal is to put a million people to work annually.

TrueBlue Inc.

trueblue.com

TrueBlue (NYSE: TBI) is a leading provider of specialized workforce solutions. As The People Company®, we put people first—advancing our mission to connect people and work while delivering smart, scalable solutions that help businesses grow and communities thrive. Since our founding, TrueBlue has connected more than 10 million people with work and served over 3 million clients across a variety of industries. Powered by proprietary, digitally enabled platforms and decades of expertise, our brands—PeopleReady, PeopleScout, Staff Management | SMX, Centerline, SIMOS, and Healthcare Staffing Professionals—provide a full spectrum of flexible staffing, workforce management, and recruitment solutions that bring precision, speed, and scale to the changing world of work. Learn more at www.trueblue.com.

ManpowerGroup

manpowergroup.com

ManpowerGroup® (NYSE: MAN), the leading global workforce solutions company, helps organizations transform in a fast-changing world of work by sourcing, assessing, developing and managing the talent that enables them to win. We develop innovative solutions for hundreds of thousands of organizations every year, providing them with skilled talent while finding meaningful, sustainable employment for millions of people across a wide range of industries and skills. Our expert family of brands – Manpower, Experis and Talent Solutions – creates substantially more value for candidates and clients across more than 80 countries and territories and has done so for 75 years. We are recognized consistently for our diversity - as a best place to work for Women, Inclusion, Equality and Disability and in 2023 ManpowerGroup was named one of the World's Most Ethical Companies for the 14th year - all confirming our position as the brand of choice for in-demand talent. See how ManpowerGroup is powering the future of work: www.manpowergroup.com

TeamLease Services Limited

cb teamlease.com

TeamLease Services is one of India’s leading people supply chain companies offering a range of solutions to 3500+ employers for their hiring, productivity and scale challenges. A Fortune India 500 company listed on the NSE & BSE, TeamLease has hired 20 lakhs+ people over the last 20 years. One of India’s fastest growing employers, TeamLease also operates India’s first NAAC Accredited Skill University and India’s fastest growing PPP Degree Apprenticeship Program. The Company offers solutions to large, medium and small clients across the 3Es of Employment (over 2.9 lakhs associates/trainees), Employability (over 5 lakhs students) and Ease-of-doing Business (over 1000 employers). In FY2015, TeamLease rolled out DA (Degree Apprenticeship) to provide on-the-job training to apprentices. The Company, in partnership with the Government of Gujarat, set up TeamLease Skills University (TLSU), India’s first vocational university, at Vadodara. In FY2015, TeamLease rolled out NETAP (National Employability through Apprenticeship Program) to provide on-the-job training to apprentices. For more details, visit http://group.teamlease.com/

Aya Healthcare

ayahealthcare.com

Aya Healthcare is the largest healthcare talent software and staffing company in the United States. Aya operates the world’s largest digital staffing platform delivering every component of healthcare-focused labor services, including travel nursing and allied health, per diem, permanent staff hiring, interim leadership, locum tenens and non-clinical professionals. Aya’s software suite, which includes vendor management, float pool technology, provider services and predictive analytics, provides hospital systems greater efficiencies and superior operating results. While technology drives efficiency and scale, Aya employees power the company to deliver unparalleled accountability and exceptional experiences for our clients and clinicians. Due to our passionate employees coupled with our unique corporate culture, we've been recognized as a top workplace by Fortune, Inc. Magazine, Modern Healthcare and the San Diego Union-Tribune. To learn more about Aya Healthcare, visit www.ayahealthcare.com

Insight Global

insightglobal.com

Insight Global is an international professional services and staffing company specializing in delivering talent and technical solutions to Fortune 1000 companies across the IT, Non-IT, Healthcare, and Engineering industries. Fueled by staffing and talent experts, Evergreen, our professional services brand, brings technical advisors and culture consultants to help customers tackle their biggest challenges. With over 70 locations across North America, Europe, and Asia, and global staffing capabilities in 50+ countries, our teams of tech-enabled recruiters are dedicated to finding the right talent and technical solutions to help our customers thrive. At our core, we are dedicated to empowering people to do great things. That’s why we’re passionate about developing our people personally, professionally, and financially so they can be the light to the world around them. To find out more, visit www.insightglobal.com

Adecco

adecco.com

Perfect placements. Speedy staffing. Tenacious testing. Who’s Adecco, we hear you ask? Only the top provider of first-class HR solutions. Our consultants work with some of the best, and most exciting, companies all over the world. We equip our clients with priceless industry insight and put everything we’ve got into training and mentoring our candidates. We’re here to match talented people with the job opportunities and employers they’re looking for. On any given day we connect over 700,000 people with fulfilling opportunities that make the most of their skills now and enable them to develop new expertise for the future.

Loading…

NEWS

Lynx Recruitment CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 29, 2025 08:00 AM

Lynx Ransomware Framework Revealed: Targeting Windows, Linux, and ESXi Systems

In a recent discovery, cybersecurity experts have shed light on the operational intricacies of the Lynx Ransomware-as-a-Service (RaaS)...

Read Article

November 19, 2024 08:00 AM

Ransomware Gangs on Recruitment Drive for Pen Testers

Threat actors are actively seeing pen testers to join various ransomware affiliate programs, including Apos, Lynx and Rabbit Hole.

Read Article

December 07, 2022 06:30 PM

Careers | Making Possibilities Happen at Metrolinx

Apply now for a job at Metrolinx, one of the top employers in the Greater Golden Horseshoe.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Lynx Recruitment Vendor Cyber Rating & Cyber Score

Lynx Recruitment A.I CyberSecurity Scoring

Lynx Recruitment CyberSecurity News & History

Lynx Recruitment Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Lynx Recruitment

Incidents vs Staffing and Recruiting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Lynx Recruitment vs Staffing and Recruiting Industry Avg (This Year)

Incident History - Lynx Recruitment (X = Date, Y = Severity)

Lynx Recruitment Subsidiaries

Lynx Recruitment

Lynx Recruitment Similar Companies

Randstad USA

Robert Half

Express Employment International

TrueBlue Inc.

ManpowerGroup

TeamLease Services Limited

Aya Healthcare

Insight Global

Adecco

Lynx Recruitment CyberSecurity News

Lynx Ransomware Framework Revealed: Targeting Windows, Linux, and ESXi Systems

Ransomware Gangs on Recruitment Drive for Pen Testers

Careers | Making Possibilities Happen at Metrolinx

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Lynx Recruitment CyberSecurity News & History

Lynx Recruitment Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Lynx Recruitment

Incidents vs Staffing and Recruiting Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Lynx Recruitment vs Staffing and Recruiting Industry Avg (This Year)

Incident History - Lynx Recruitment (X = Date, Y = Severity)

Lynx Recruitment Subsidiaries

Lynx Recruitment

Lynx Recruitment Similar Companies

Randstad USA

Robert Half

Express Employment International

TrueBlue Inc.

ManpowerGroup

TeamLease Services Limited

Aya Healthcare

Insight Global

Adecco

Lynx Recruitment CyberSecurity News

Lynx Ransomware Framework Revealed: Targeting Windows, Linux, and ESXi Systems

Ransomware Gangs on Recruitment Drive for Pen Testers

Careers | Making Possibilities Happen at Metrolinx

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo