What is the official website of New World Hotels & Resorts ?

The official website of New World Hotels & Resorts is http://www.newworldhotels.com.

What is New World Hotels & Resorts's cybersecurity risk score?

New World Hotels & Resorts has an AI-generated cybersecurity risk score of 774 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has New World Hotels & Resorts experienced?

According to Rankiteo, New World Hotels & Resorts currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has New World Hotels & Resorts been affected by any supply chain cyber incidents ?

According to Rankiteo, New World Hotels & Resorts has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does New World Hotels & Resorts have SOC 2 Type 1 certification ?

According to Rankiteo, New World Hotels & Resorts is not certified under SOC 2 Type 1.

Does New World Hotels & Resorts have SOC 2 Type 2 certification ?

According to Rankiteo, New World Hotels & Resorts does not hold a SOC 2 Type 2 certification.

Does New World Hotels & Resorts comply with GDPR ?

According to Rankiteo, New World Hotels & Resorts is not listed as GDPR compliant.

Does New World Hotels & Resorts have PCI DSS certification ?

According to Rankiteo, New World Hotels & Resorts does not currently maintain PCI DSS compliance.

Does New World Hotels & Resorts comply with HIPAA ?

According to Rankiteo, New World Hotels & Resorts is not compliant with HIPAA regulations.

Does New World Hotels & Resorts have ISO 27001 certification ?

According to Rankiteo,New World Hotels & Resorts is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does New World Hotels & Resorts operate in ?

New World Hotels & Resorts operates primarily in the Hospitality industry.

How many employees does New World Hotels & Resorts have ?

New World Hotels & Resorts employs approximately 192 people worldwide.

Does New World Hotels & Resorts own any subsidiaries ?

New World Hotels & Resorts presently has no subsidiaries across any sectors.

How many LinkedIn followers does New World Hotels & Resorts have ?

New World Hotels & Resorts's official LinkedIn profile has approximately followers.

What is the NAICS classification code for New World Hotels & Resorts ?

New World Hotels & Resorts is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does New World Hotels & Resorts have a Crunchbase profile ?

No, New World Hotels & Resorts does not have a profile on Crunchbase.

Does New World Hotels & Resorts have a LinkedIn profile ?

Yes, New World Hotels & Resorts maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/new-world-hotels.

How many cybersecurity incidents has New World Hotels & Resorts experienced ?

As of October 20, 2026, Rankiteo reports that New World Hotels & Resorts has experienced 2 cybersecurity incidents.

How many peer or competitor companies does New World Hotels & Resorts have ?

New World Hotels & Resorts has an estimated 14,512 peer or competitor companies worldwide.

What types of cybersecurity incidents has New World Hotels & Resorts faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

NWHR

Boost Score +25 with badge (5 left)

774

/1000

Fair

799

/1000

Fair

New World Hotels & Resorts Vendor Cyber Rating & Cyber Score

newworldhotels.com

Add Your Compliance Badge

New World Hotels & Resorts are deluxe properties favoured by business travellers and meeting planners, located in Hong Kong, Beijing, Dalian, Guiyang, Shanghai, Wuhan, Ho Chi Minh City and Manila, with an affiliated hotel in Shunde. The hotels offer a full range of relevant amenities and services, including multiple restaurants, business services, extensive meeting facilities, Residence Club executive floors and recreational options. The New World Hotels & Resorts collection is targeted to more than triple in size in next five years.

NWHR

New World Hotels & Resorts CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

New World Hotels & ...

Breach

5/2016

ROS309072625

New World Hotels & ...

Breach

6/2012

ROS612072925

Loading…

A.I.

NWHR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for NWHR

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for New World Hotels & Resorts in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for New World Hotels & Resorts in 2026.

Incident Types NWHR vs Hospitality Industry Avg (This Year)

No incidents recorded for New World Hotels & Resorts in 2026.

Incident History - NWHR (X = Date, Y = Severity)

Loading…

SUBSIDIARY

New World Hotels & Resorts Subsidiaries

NWHR

Hospitality

Website: http://www.newworldhotels.com

Company Size: 1,001-5,000 employees

Rosewood Hotel GroupHospitality

Rosewood Hotels & ResortsHospitality

Rosewood Abu DhabiHospitality

Rosewood BangkokHospitality

Rosewood MayakobaHospitality

Carlyle & Co.Hospitality

New World Phu Quoc ResortHospitality

Rosewood Miramar BeachHospitality

Rosewood Castiglion del BoscoHospitality

Rosewood Le Guanahani St BarthHospitality

Rosewood DohaHospitality

Hôtel de Crillon, A Rosewood HotelHospitality

Rosewood ViennaHospitality

Rosewood Baha MarHospitality

The Chancery RosewoodHospitality

Rosewood MandarinaHospitality

Rosewood GuangzhouHospitality

Rosewood Little Dix BayHospitality

Rosewood Washington, D.C.Hospitality

Rosewood BermudaHospitality

Rosewood SanyaHospitality

New World Makati HotelHospitality

New World Hoiana HotelHospitality

Rosewood Luang PrabangHospitality

Rosewood JeddahHospitality

Rosewood MunichHospitality

New World Shenyang HotelHospitality

Rosewood BeijingHospitality

Rosewood VeniceHospitality

Rosewood Inn of the AnasaziHospitality

Rosewood LondonHospitality

The Carlyle, A Rosewood HotelHospitality

Rosewood RomeHospitality

Rosewood Cape KidnappersHospitality

New World Langfang HotelHospitality

Rosewood Kauri CliffsHospitality

Rosewood Hoi AnHospitality

New World Qingyuan HotelHospitality

NW Jaipur ResortHospitality

Rosewood Porto CervoHospitality

Rosewood Hotel GeorgiaHospitality

New World Shunde HotelRestaurants

Rosewood ShanghaiHospitality

Rosewood HoustonHospitality

Rosewood TaipeiHospitality

Rosewood Hermana MayorHospitality

Rosewood ShenzhenHospitality

Rosewood Mansion on Turtle CreekHospitality

Rosewood NingboHospitality

New World Nha Trang HotelHospitality

Rosewood Half Moon BayHospitality

Rosewood ChengduHospitality

Rosewood PhuketHospitality

Rosewood San FranciscoHospitality

Las Ventanas Al Paraiso, A Rosewood ResortHospitality

Rosewood São PauloHospitality

Rosewood Villa MagnaHospitality

New World Beijing HotelHospitality

Rosewood Phnom PenhHospitality

New World Saigon HotelHospitality

Rosewood San Miguel de AllendeHospitality

Rosewood AmsterdamHospitality

Rosewood Hong KongHospitality

New World Dalian HotelHospitality

New World Wuhan HotelHospitality

Loading…

New World Hotels & Resorts Similar Companies

Aramark

aramark.com

Aramark (NYSE: ARMK) proudly serves the world’s leading educational institutions, Fortune 500 companies, world champion sports teams, prominent healthcare providers, iconic destinations and cultural attractions, and numerous municipalities in 16 countries around the world with food and facilities management. Because of our hospitality culture, our employees strive to do great things for each other, our partners, our communities, and the planet.

Fairmont Hotels & Resorts

fairmont.com

Located in the heart of each destination we call home, a stay at any Fairmont hotel is truly unforgettable. Known for grand and awe-inspiring properties and thoughtful and engaging colleagues who aim to make each and every stay a cherished and memorable experience, we have been the stage for some of the most significant moments in global history. As a part of ALL - the Accor Live Limitless Lifestyle Loyalty Program, with 90 exceptional addresses in 32 countries, we are as favored by world leaders and business travelers as we are by families and those with a penchant for luxurious travels. Fairmont Hotels stand at the intersection of elegance and culture, where significant occasions are honored and pivotal global events unfold. Wherever we are situated, our hotels become the cultural and social heart of the community; so immersed in local traditions and so deeply connected to our surroundings, Fairmont Hotels are seen as an essential part of their respective destinations.

Delaware North

cb DelawareNorth.com

Delaware North is a global leader in the hospitality and entertainment industry. The company annually serves more than a half-billion guests across three continents, including at high-profile sports venues, airports, national and state parks, restaurants, resorts, hotels and casinos. Building on more than a century of enduring partnerships and a commitment to local communities and sustainability, Delaware North’s vision is to delight guests by creating the world’s best experiences today while reimagining tomorrow.

J D Wetherspoon

jdwetherspooncareers.com

J D Wetherspoon is a leading pub operator in the UK and Ireland. Back in 1979, founder chairman Tim Martin opened the very first Wetherspoon – in Muswell Hill, north London. Today, Tim and the company run over 850 pubs and hotels, spread right across the UK and, more recently, Ireland. During its history of over 40 years, Wetherspoon has repeatedly led the way with ground-breaking initiatives, picked up hundreds of awards (covering all aspects of pub life) and grown from a handful of staff to over 40,000 employees. The company seeks to develop its staff through effective and award-winning training and development, through a positive working environment and, of course, by means of a competitive pay packet. Every year, thousands of staff complete one or more of our award-winning training courses, not only preparing them to work safely and to the best of their ability, but also inspiring them to pursue positive career development. The company prides itself in offering, at all levels, excellent training and support.

TUI

tuigroup.com

We’re adventure seekers. Smile givers. Impact makers. We believe in the power of travel. It broadens horizons for our customers, and for our people too. New places to live, new roles to explore, new communities to join. It’s yours for the taking. We’re TUI, a leading global travel and leisure experience company that makes holiday dreams come true for people around the world. We are one of the world’s leading tourism groups counting 1200 travel agencies and online portals, five airlines with around 130 aircraft, over 400 hotels, 16 cruise liners, digital platforms for tours and activities and most importantly over 60 000 colleagues around the world. What unites us is creating moments that enrich the lives of our 21 million customers. Beside the unforgettable experience we provide our customers, we also believe in the good that tourism can bring and we care deeply about our environmental impact. The TUI Care foundation has projects in over 30 countries worldwide, building on the potential of tourism as a global force for development. The Foundation opens up new perspectives through education and training, empowers local communities to benefit from the success of tourism and engages in the protection of nature and the environment. At TUI we simply say “Let’s TUI it”. For us, that means creating happiness. Tackling challenges every day together, with a positive, can-do attitude, and finding solutions even for the most unexpected situations. Our teams across TUI are just as diverse as our destinations. So whether you have lots of experience or none at all. If you want to work in an office or feel best in the field. No matter if you’re an accomplished tech whizz, an aspiring entertainer, or simply in love with flying. There’s a place for you here.

Minor Hotels

minorhotels.com

Minor Hotels is a global hospitality leader with over 560 hotels and resorts across six continents, a diverse portfolio of F&B businesses and a selection of luxury transportation services. With over four decades of experience, we build stronger brands, foster lasting partnerships, and drive business success by staying focused on what matters most to our guests, team members and partners. Our diverse hotel brands - from the luxury of Anantara and Tivoli to the vibrant style of Avani and nhow - bring our guests to the most desirable hotel and resort destinations around the world. We also own a collection of related hospitality businesses, including luxury residences, private jets, restaurants and bars, spa and wellness, and river cruises and rail journeys. #MinorHotels

Four Seasons Hotels and Resorts

cb fourseasons.com

Four Seasons Hotels and Resorts opened its first hotel in 1961, and since that time has been dedicated to perfecting the travel experience through continual innovation and the highest standards of hospitality. Currently operating more than 130 hotels and resorts, and more than 55 residential properties in major city centers and resort destinations in 47 countries, and with more than 50 projects under planning or development, Four Seasons consistently ranks among the world's best hotels and most prestigious brands in reader polls, traveler reviews and industry awards. To learn more about our career opportunities, visit fourseasons.com/careers. For more information and reservations, visit fourseasons.com. For the latest news, visit press.fourseasons.com.

Meliá Hotels International

ow.ly

Welcome to Meliá Hotels International! From Mallorca to the world, our story is an exciting journey that began more than six decades ago and has led us to become one of the largest hotel chains on the planet and the most sustainable in Europe (S&P Global). With more than 400 hotels across the world, our passion for hospitality drives us to deliver unique and memorable experiences through our nine brands: Gran Meliá Hotels & Resorts, ME by Meliá, The Meliá Collection, Paradisus by Meliá, Meliá Hotels & Resorts, ZEL, INNSiDE by Meliá, Sol by Meliá and Affiliated by Meliá. If you are looking for a place where your talent can shine and contribute to a more sustainable future, Meliá Hotels International is your destination. We are a family of more than 45,000 people, where every one of us is a VIP (Very Inspiring People) and we are proud to be a Top Employer in multiple countries. Being part of Meliá is to undertake a journey without borders, because the possibilities for development and learning are endless. Here, we enjoy a passionate and familiar environment, full of opportunities where inspiration will always be with you. Join us and feel like a true VIP!

Club Med

cb clubmed.com

Since it was founded in 1950 and it created the all-inclusive vacation concept, Club Med has been the world leader on its market, and has developed a resolutely upscale, friendly and multicultural spirit. Club Med boasts 70 resorts located in the most beautiful sites in the world, a cruise ship and Luxury Villas & Chalets and, now more than ever, is associated with dreams and happiness. There are 20,000 Gentle Organizers (G.Os) and Gentle Employees (G.Es) at Club Med, who work in the villages, but also at the Paris, Lyon, Singapore, Shanghai, Rio de Janeiro and Miami headquarters, in the sales offices situated in dozens of countries and in travel agencies.

Loading…

NEWS

New World Hotels & Resorts CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

August 18, 2025 07:00 AM

WorldHotels heads for Phu Quoc’s Sunset Boulevard

Next stop for WorldHotels, part of the BWH Group, is the shores of Vietnam's “Pearl Island”, with the signing of the WorldHotels Long Beach...

Read Article

July 01, 2025 07:00 AM

Ayala Land acquires New World Makati Hotel

Ayala Land Inc. has acquired the iconic New World Makati Hotel in a bid to expand its hospitality portfolio in Metro Manila's central business district.

Read Article

July 01, 2025 07:00 AM

ALI beefs up hotel group, buys New World Makati

The purchase of New World Hotel beefs up ALH's portfolio to 4,862 rooms, which are under several brands such as its own Seda, Fairmont Hotels...

Read Article

June 30, 2025 07:00 AM

Ayala Land Buys Philippine Hotel From Cash-Strapped New World

The 578-room New World Hotel Makati will be operated by Ayala Land's hospitality and resort unit, the builder, a unit of the Zobel de Ayala...

Read Article

June 30, 2025 07:00 AM

Ayala Land buys New World Hotel Makati

Ayala Land Inc (ALI) has acquired the New World Hotel Makati, the property firm said on Monday. ALI said the five star hotel will now be part of its subsidiary...

Read Article

June 19, 2025 07:00 AM

New World Converting Kowloon Office Plans to Hotel

New World has lodged an application with the Town Planning Board to rework the eight office floors planned for the development at 43-49A Hankow Road into a 99-...

Read Article

June 06, 2025 07:00 AM

Laos Strengthens Its Hospitality Sector With Four New H World Hotels As China Fuels Record Tourist Arrivals And Singapore Sets The Blueprint For Regional Growth

Laos is expanding its hospitality sector with four new H World hotels to meet surging demand from record-breaking Chinese tourism, while drawing...

Read Article

May 06, 2025 07:00 AM

Accor Signs Landmark Multi-Hotel Deal with Bayview International Hotels & Resorts

Accor, the largest hotel operator in Australia and New Zealand, is set to strengthen its footprint in Australia and New Zealand with the...

Read Article

April 28, 2025 07:00 AM

The Best New Affordable Hotels in the World: 2025 Hot List

These are the 2025 Hot List winners for the best new affordable hotels in the world, with options starting at under-$300 per night in low season.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

New World Hotels & Resorts Vendor Cyber Rating & Cyber Score

NWHR A.I CyberSecurity Scoring

New World Hotels & Resorts CyberSecurity News & History

NWHR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for NWHR

Incidents vs Hospitality Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types NWHR vs Hospitality Industry Avg (This Year)

Incident History - NWHR (X = Date, Y = Severity)

New World Hotels & Resorts Subsidiaries

NWHR

New World Hotels & Resorts Similar Companies

Aramark

Fairmont Hotels & Resorts

Delaware North

J D Wetherspoon

TUI

Minor Hotels

Four Seasons Hotels and Resorts

Meliá Hotels International

Club Med

New World Hotels & Resorts CyberSecurity News

WorldHotels heads for Phu Quoc’s Sunset Boulevard

Ayala Land acquires New World Makati Hotel

ALI beefs up hotel group, buys New World Makati

Ayala Land Buys Philippine Hotel From Cash-Strapped New World

Ayala Land buys New World Hotel Makati

New World Converting Kowloon Office Plans to Hotel

Laos Strengthens Its Hospitality Sector With Four New H World Hotels As China Fuels Record Tourist Arrivals And Singapore Sets The Blueprint For Regional Growth

Accor Signs Landmark Multi-Hotel Deal with Bayview International Hotels & Resorts

The Best New Affordable Hotels in the World: 2025 Hot List

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

New World Hotels & Resorts CyberSecurity News & History

NWHR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for NWHR

Incidents vs Hospitality Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types NWHR vs Hospitality Industry Avg (This Year)

Incident History - NWHR (X = Date, Y = Severity)

New World Hotels & Resorts Subsidiaries

NWHR

New World Hotels & Resorts Similar Companies

Aramark

Fairmont Hotels & Resorts

Delaware North

J D Wetherspoon

TUI

Minor Hotels

Four Seasons Hotels and Resorts

Meliá Hotels International

Club Med

New World Hotels & Resorts CyberSecurity News

WorldHotels heads for Phu Quoc’s Sunset Boulevard

Ayala Land acquires New World Makati Hotel

ALI beefs up hotel group, buys New World Makati

Ayala Land Buys Philippine Hotel From Cash-Strapped New World

Ayala Land buys New World Hotel Makati

New World Converting Kowloon Office Plans to Hotel

Laos Strengthens Its Hospitality Sector With Four New H World Hotels As China Fuels Record Tourist Arrivals And Singapore Sets The Blueprint For Regional Growth

Accor Signs Landmark Multi-Hotel Deal with Bayview International Hotels & Resorts

The Best New Affordable Hotels in the World: 2025 Hot List

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo