What is the official website of M Social Auckland ?

The official website of M Social Auckland is http://www.millenniumhotels.com.

What is M Social Auckland's cybersecurity risk score?

M Social Auckland has an AI-generated cybersecurity risk score of 772 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has M Social Auckland experienced?

According to Rankiteo, M Social Auckland currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has M Social Auckland been affected by any supply chain cyber incidents ?

According to Rankiteo, M Social Auckland has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does M Social Auckland have SOC 2 Type 1 certification ?

According to Rankiteo, M Social Auckland is not certified under SOC 2 Type 1.

Does M Social Auckland have SOC 2 Type 2 certification ?

According to Rankiteo, M Social Auckland does not hold a SOC 2 Type 2 certification.

Does M Social Auckland comply with GDPR ?

According to Rankiteo, M Social Auckland is not listed as GDPR compliant.

Does M Social Auckland have PCI DSS certification ?

According to Rankiteo, M Social Auckland does not currently maintain PCI DSS compliance.

Does M Social Auckland comply with HIPAA ?

According to Rankiteo, M Social Auckland is not compliant with HIPAA regulations.

Does M Social Auckland have ISO 27001 certification ?

According to Rankiteo,M Social Auckland is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does M Social Auckland operate in ?

M Social Auckland operates primarily in the Hospitality industry.

How many employees does M Social Auckland have ?

M Social Auckland employs approximately 32 people worldwide.

Does M Social Auckland own any subsidiaries ?

M Social Auckland presently has no subsidiaries across any sectors.

How many LinkedIn followers does M Social Auckland have ?

M Social Auckland's official LinkedIn profile has approximately 819 followers.

What is the NAICS classification code for M Social Auckland ?

M Social Auckland is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does M Social Auckland have a Crunchbase profile ?

No, M Social Auckland does not have a profile on Crunchbase.

Does M Social Auckland have a LinkedIn profile ?

Yes, M Social Auckland maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/msocialauckland.

How many cybersecurity incidents has M Social Auckland experienced ?

As of October 20, 2026, Rankiteo reports that M Social Auckland has not experienced any cybersecurity incidents.

How many peer or competitor companies does M Social Auckland have ?

M Social Auckland has an estimated 14,512 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

772

/1000

Fair

797

/1000

Fair

M Social Auckland Vendor Cyber Rating & Cyber Score

millenniumhotels.com

Add Your Compliance Badge

M Social Auckland. A new contemporary lifestyle hotel for the curious, the explorers, and those who thrive on new experiences. Work doesn't have to feel like work. Let's get Social! Want to work at M Social Auckland? Send through proof that you have what it takes to [email protected]

M Social Auckland CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

SA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SA

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for M Social Auckland in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for M Social Auckland in 2026.

Incident Types SA vs Hospitality Industry Avg (This Year)

No incidents recorded for M Social Auckland in 2026.

Incident History - SA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

M Social Auckland Subsidiaries

SA

Hospitality

Website: http://www.millenniumhotels.com

Company Size: 11-50 employees

Millennium Hotels and ResortsHospitality

Millennium Downtown Abu DhabiHospitality

Millennium Airport Hotel DubaiHospitality

Grand Millennium Al WahdaHospitality

City Developments LimitedReal Estate

City Serviced Offices Pte LtdExecutive Offices

Bab Al Qasr Hotel - Abu DhabiHospitality

Grand Millennium DubaiHospitality

Studio M Hotel Arabian PlazaHospitality

Millennium Hotel & Convention Centre KuwaitHospitality

New World Millennium Hong Kong HotelHospitality

Grand Millennium Tabuk HotelHospitality

Grand Millennium Business BayHospitality

Millennium Plaza DohaHospitality

Millennium Madinah Airport HotelHospitality

Grand Millennium Gizan HotelHospitality

Millennium Hotel HailHospitality

Copthorne Hotel Dubai UAEHospitality

Millennium Al BarshaHospitality

Orchard Hotel SingaporeHospitality

Millennium Hotel DohaHospitality

M Hotel SingaporeHospitality

Grand Millennium AucklandHospitality

The Lowry HotelHospitality

The Lowry SpaHealth, Wellness & Fitness

Grand Millennium Al Seef BasraHospitality

M Hotel Al Dana Makkah By MillenniumHospitality

Millennium Central Kuwait Downtown HotelHospitality

M Social Hotel New York DowntownHospitality

Grand Copthorne Waterfront Hotel SingaporeHospitality

Copthorne Tara Hotel London KensingtonHospitality

Millennium Atria Business BayHospitality

Millennium Al Barsha HotelHospitality

The Chelsea Harbour Hotel & SpaHospitality

Copthorne Hotel SharjahHospitality

Millennium Gloucester Hotel London KensingtonHospitality

The Heritage Hotel Manila PhilippinesHospitality

The Biltmore Hotel TbilisiHospitality

Millennium Al Aqeeq Hotel MadinahHospitality

M Social PhuketHospitality

Millennium Hotel RotoruaHospitality

Millennium Resort SalalahHospitality

M Social Hotel New York Times SquareHospitality

M Social SingaporeHospitality

Millennium Istanbul Golden HornHospitality

Grand Millennium MuscatHospitality

Grand Millennium Hotel SulaimaniHospitality

Kingsgate Hotel Abu Dhabi by MillenniumHospitality

Studio M Hotel Al BarshaHospitality

GrandMillenniumKonyaLeisure, Travel & Tourism

Millennium Taiba Hotel MadinahHospitality

Millennium Resort HangzhouHospitality

Millennium Hotel London KnightsbridgeHospitality

Studio M Hotel - A Millennium & Copthorne HotelHospitality

Millennium Hotels and Resorts AsiaHospitality

Copthorne Hotel Cameron HighlandsHospitality

Loading…

M Social Auckland Similar Companies

Aramark

aramark.com

Aramark (NYSE: ARMK) proudly serves the world’s leading educational institutions, Fortune 500 companies, world champion sports teams, prominent healthcare providers, iconic destinations and cultural attractions, and numerous municipalities in 16 countries around the world with food and facilities management. Because of our hospitality culture, our employees strive to do great things for each other, our partners, our communities, and the planet.

Shangri-La Group

cb shangri-la.com

Headquartered in Hong Kong SAR, the Shangri-La Group has grown from a single hotel business to a diverse and integrated global portfolio comprising quality real estate and investment properties, wellness and lifestyle facilities. Today, the Group owns, operates and manages 100+ hotels under our family of five brands: Shangri-La, Shangri-La Signatures, Kerry Hotels, JEN by Shangri-La, and Traders. We are part of the Kuok Group, one of Asia's most dynamic multinational conglomerates and a leader in properties, logistics, agribusiness, maritime and hospitality. From our strong base in Asia, we have expanded into key gateway cities and markets around the world. Our properties sit on some of the world’s most prestigious addresses and exotic destinations. Through the environments we have created, we enable people to come together to live, work, play, eat, and rest well.

Hilton

hilton.com

Hilton (NYSE: HLT) is a leading global hospitality company with a portfolio of 27 world-class brands comprising more than 9,100 properties and over 1.3 million rooms, in 143 countries and territories. Dedicated to fulfilling its founding vision to fill the earth with the light and warmth of hospitality, Hilton has welcomed over 4 billion guests in its more than 100-year history. Named as the No. 1 World’s Best Workplace by Great Place to Work and Fortune, Hilton aims to create the best culture for its 500,000 team members around the world. Hilton has introduced industry-leading technology enhancements to improve the guest experience, including Digital Key Share, automated complimentary room upgrades and the ability to book confirmed connecting rooms. Through the award-winning guest loyalty program Hilton Honors, the nearly 250 million Hilton Honors members who book directly with Hilton can earn Points for hotel stays and experiences money can't buy. With the free Hilton Honors app, guests can book their stay, select their room, check in, unlock their door with a Digital Key and check out, all from their smartphone. Visit stories.hilton.com for more information, and connect with Hilton on Facebook, X, LinkedIn, Instagram and YouTube.

Rotana Hotels

rotana.com

Since inception, Rotana has grown to be the region’s largest hospitality management company, and a brand that is widely recognized and admired. Rotana currently manages a portfolio of over 100 properties throughout the Middle East, Africa, Eastern Europe and Türkiye offering a wide range of services and products through its 6 sub brands; Rotana Hotels & Resorts for the 4 and 5 star properties, Arjaan Hotel Apartments for the long term stays, Rayhaan Hotels & Resorts, Rotana’s alcohol free 4 and 5 star properties, Centro Hotels, a 3 star plus affordable lifestyle brand, Edge by Rotana our collection of independent hotels and The Residences by Rotana, a brand developed for guests that are looking for a permanent home. If you are interested to join Rotana, kindly log on to www.rotanacareers.com and proceed with the online application and our Human Resources Team will look into your respective application.

J D Wetherspoon

jdwetherspooncareers.com

J D Wetherspoon is a leading pub operator in the UK and Ireland. Back in 1979, founder chairman Tim Martin opened the very first Wetherspoon – in Muswell Hill, north London. Today, Tim and the company run over 850 pubs and hotels, spread right across the UK and, more recently, Ireland. During its history of over 40 years, Wetherspoon has repeatedly led the way with ground-breaking initiatives, picked up hundreds of awards (covering all aspects of pub life) and grown from a handful of staff to over 40,000 employees. The company seeks to develop its staff through effective and award-winning training and development, through a positive working environment and, of course, by means of a competitive pay packet. Every year, thousands of staff complete one or more of our award-winning training courses, not only preparing them to work safely and to the best of their ability, but also inspiring them to pursue positive career development. The company prides itself in offering, at all levels, excellent training and support.

Club Med

cb clubmed.com

Since it was founded in 1950 and it created the all-inclusive vacation concept, Club Med has been the world leader on its market, and has developed a resolutely upscale, friendly and multicultural spirit. Club Med boasts 70 resorts located in the most beautiful sites in the world, a cruise ship and Luxury Villas & Chalets and, now more than ever, is associated with dreams and happiness. There are 20,000 Gentle Organizers (G.Os) and Gentle Employees (G.Es) at Club Med, who work in the villages, but also at the Paris, Lyon, Singapore, Shanghai, Rio de Janeiro and Miami headquarters, in the sales offices situated in dozens of countries and in travel agencies.

Rosewood Hotel Group

rosewoodhotelgroup.com

Rosewood Hotel Group is one of the world’s leading global lifestyle and hospitality management groups. It encompasses four brands: ultra-luxury Rosewood; upper-upscale New World Hotels & Resorts; Asaya, an integrated well-being concept; and Carlyle & Co., a modern and progressive private members club. Its combined hotel portfolio consists of 59 properties in 26 countries with more than 30 new properties currently under development. OUR PURPOSE AND CULTURE We are driven to create a future where people and place enrich one another. We are wholly committed to rooting ourselves more deeply in every place we are in while setting new benchmarks for positive impact. As a pioneering collective with a common purpose, we curate extraordinary moments and honor the soul of every place along our journey. At Rosewood Hotel Group, we answer The Calling. Together, we Make the Place. OUR GUIDING PHILOSOPHY We believe in and are guided by Relationship Hospitality. We are all about heartfelt interactions. A desire to build genuine, rewarding and lasting relationships with everyone we meet comes naturally to us. OUR COMMITMENT At Rosewood Hotel Group, your voice is heard – and valued. We’re a community that encourages associates to be themselves, not fit into a fixed culture, and this philosophy shines through in our commitments to reflect and honor the history, culture and geography of our destinations. We’re not only committed to building and nurturing genuine, long-lasting relationships but to transforming them – and our Diversity, Equity and Inclusion (DEI) strategy helps put these principles into practice.

Wyndham Hotels & Resorts

wyndhamhotels.com

We are Wyndham Hotels & Resorts. We are the world’s largest hotel franchising company by the number of franchised properties, with approximately 8,300 hotels across approximately 100 countries on six continents. We operate a portfolio of 25 hotel brands: Whether choosing Wyndham Grand®, Dolce Hotels & Resorts by Wyndham®, Esplendor Boutique Hotels by Wyndham®, Dazzler by Wyndham®, Wyndham Hotels & Resorts®, TRYP by Wyndham®, Vienna House by Wyndham®, The Trademark Collection by Wyndham®, La Quinta® by Wyndham, Wingate by Wyndham®, Wyndham Garden®, Hawthorn Suites by Wyndham®, AmericInn by Wyndham®, Ramada by Wyndham®, Ramada Encore by Wyndham®, Baymont by Wyndham®, Microtel by Wyndham®, Days Inn by Wyndham®, Super 8 by Wyndham®, Howard Johnson by Wyndham®, Travelodge by Wyndham®, ECHO Suites Extended Stay by Wyndham® or WaterWalk by Wyndham®, our incomparable diversity of hotel brands deliver the experience the everyday traveler wants. Our Mission: We make hotel travel possible for all. Wherever people go, Wyndham will be there to welcome them. Our Values: The Wyndham values guide our behaviors in support of the company mission. They represent those deeply held principles that we believe to be right and true: Integrity, Accountability, Inclusivity, Caring, and Fun. Our Culture: Our ”Count on Me” and “Wyndham Welcome” philosophies put our values into action every day. Together, they epitomize our unique culture.

Radisson Hotel Group

radissonhotels.com

Radisson Hotel Group is an international hotel group, operating in EMEA and APAC with over 1,320 hotels in operation and under development in +95 countries. The international hotel group is rapidly expanding with a plan to significantly grow the portfolio. The Group’s overarching brand promise is Every Moment Matters with a signature Yes I Can! service ethos. The Radisson family of brands portfolio includes Radisson Collection, art’otel, Radisson Blu, Radisson, Radisson RED, Radisson Individuals, Park Plaza, Park Inn by Radisson, Country Inn & Suites by Radisson, and prizeotel brought together under one commercial umbrella brand Radisson Hotels. Radisson Rewards is Radisson Hotel Group’s loyalty program, which delivers an elevated experience that makes Every Moment Matter. As the most streamlined program in the sector, members enjoy exceptional advantages and can access their benefits from day one across a wide range of hotels in Europe, Middle East, Africa, and Asia Pacific. Radisson Meetings provides tailored solutions for any event or meeting, including hybrid solutions placing guests and their needs at the heart of its offer. Radisson Meetings is built around three strong service commitments: Personal, Professional and Memorable, while delivering on the brilliant basics and being uniquely 100% Carbon Neutral. At Radisson Hotel Group we care for people, communities and planet and aim to be Net Zero by 2050 based on the approved near-term Science Based Targets. With unique solutions such as 100% carbon neutral Radisson Meetings, we make sustainable hotel stays easy. To facilitate sustainable travel choices, all our hotels are becoming verified on Hotel Sustainability Basics.

Loading…

NEWS

M Social Auckland CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 04, 2026 08:00 AM

What is Moltbook, the social networking site for AI bots – and should we be scared?

So far, results from Moltbook are equal parts fascinating and concerning, according to AI and cybersecurity experts.

Read Article

November 04, 2025 08:00 AM

Sexual images flood social media of Kiwi Fifa Club World Cup team following cyberattack

An Auckland-based football team, who made headlines earlier this year as the only semi-professional football club at the Fifa Club World Cup...

Read Article

August 09, 2025 07:00 AM

'Quite stressful' Kiwis stung by wrongful Facebook and Instagram bans

A tech expert said there had been an uptick in the number of wrongful suspensions in recent months, which Meta denies.

Read Article

June 10, 2025 07:00 AM

M&S cyber attack: What we know about it and its impact

Online orders limited, some customer data stolen - here's what we know about the chaos at M&S.

Read Article

April 02, 2025 07:00 AM

Health NZ reveals scrapped digital projects, says they're unrelated to staff data breach

The agency has stopped or delayed 136 initiatives, including a much-lauded patient information system.

Read Article

October 08, 2020 06:43 PM

Cybersecurity company RedShield's $14m raise finds a local backer

Wellington-based cybersecurity company RedShield has raised $14 million at a $64m post-money valuation, co-founder and chief executive Andy Prow says. The.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

M Social Auckland Vendor Cyber Rating & Cyber Score

SA A.I CyberSecurity Scoring

M Social Auckland CyberSecurity News & History

SA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SA

Incidents vs Hospitality Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SA vs Hospitality Industry Avg (This Year)

Incident History - SA (X = Date, Y = Severity)

M Social Auckland Subsidiaries

SA

M Social Auckland Similar Companies

Aramark

Shangri-La Group

Hilton

Rotana Hotels

J D Wetherspoon

Club Med

Rosewood Hotel Group

Wyndham Hotels & Resorts

Radisson Hotel Group

M Social Auckland CyberSecurity News

What is Moltbook, the social networking site for AI bots – and should we be scared?

Sexual images flood social media of Kiwi Fifa Club World Cup team following cyberattack

'Quite stressful' Kiwis stung by wrongful Facebook and Instagram bans

M&S cyber attack: What we know about it and its impact

Health NZ reveals scrapped digital projects, says they're unrelated to staff data breach

Cybersecurity company RedShield's $14m raise finds a local backer

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

M Social Auckland CyberSecurity News & History

SA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for SA

Incidents vs Hospitality Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types SA vs Hospitality Industry Avg (This Year)

Incident History - SA (X = Date, Y = Severity)

M Social Auckland Subsidiaries

SA

M Social Auckland Similar Companies

Aramark

Shangri-La Group

Hilton

Rotana Hotels

J D Wetherspoon

Club Med

Rosewood Hotel Group

Wyndham Hotels & Resorts

Radisson Hotel Group

M Social Auckland CyberSecurity News

What is Moltbook, the social networking site for AI bots – and should we be scared?

Sexual images flood social media of Kiwi Fifa Club World Cup team following cyberattack

'Quite stressful' Kiwis stung by wrongful Facebook and Instagram bans

M&S cyber attack: What we know about it and its impact

Health NZ reveals scrapped digital projects, says they're unrelated to staff data breach

Cybersecurity company RedShield's $14m raise finds a local backer

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo