What is the official website of NVIDIA for Startups ?

The official website of NVIDIA for Startups is https://www.nvidia.com/startups/.

What is NVIDIA for Startups's cybersecurity risk score?

NVIDIA for Startups has an AI-generated cybersecurity risk score of 774 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has NVIDIA for Startups experienced?

According to Rankiteo, NVIDIA for Startups currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has NVIDIA for Startups been affected by any supply chain cyber incidents ?

According to Rankiteo, NVIDIA for Startups has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: ServiceNow (Incident ID: SER1781072827) GFN Cloud Internet Servies (Incident ID: NVI1777818242) GFN Cloud Internet Servies (Incident ID: GFN1778300632) LUXSHARE-ICT (Incident ID: GEENVILUX1769153015) LUXSHARE-ICT (Incident ID: NVILUX1768977485) LUXSHARE-ICT Taiwan (Incident ID: LUX1769023968) LUXSHARE-ICT Taiwan (Incident ID: LUXNVITES1769024668) LUXSHARE-ICT Taiwan (Incident ID: LUXNVI1769024063)

Does NVIDIA for Startups have SOC 2 Type 1 certification ?

According to Rankiteo, NVIDIA for Startups is not certified under SOC 2 Type 1.

Does NVIDIA for Startups have SOC 2 Type 2 certification ?

According to Rankiteo, NVIDIA for Startups does not hold a SOC 2 Type 2 certification.

Does NVIDIA for Startups comply with GDPR ?

According to Rankiteo, NVIDIA for Startups is not listed as GDPR compliant.

Does NVIDIA for Startups have PCI DSS certification ?

According to Rankiteo, NVIDIA for Startups does not currently maintain PCI DSS compliance.

Does NVIDIA for Startups comply with HIPAA ?

According to Rankiteo, NVIDIA for Startups is not compliant with HIPAA regulations.

Does NVIDIA for Startups have ISO 27001 certification ?

According to Rankiteo,NVIDIA for Startups is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does NVIDIA for Startups operate in ?

NVIDIA for Startups operates primarily in the Technology, Information and Internet industry.

How many employees does NVIDIA for Startups have ?

NVIDIA for Startups employs approximately None employees people worldwide.

Does NVIDIA for Startups own any subsidiaries ?

NVIDIA for Startups presently has no subsidiaries across any sectors.

How many LinkedIn followers does NVIDIA for Startups have ?

NVIDIA for Startups's official LinkedIn profile has approximately 30,296 followers.

What is the NAICS classification code for NVIDIA for Startups ?

NVIDIA for Startups is classified under the NAICS code 513, which corresponds to Others.

Does NVIDIA for Startups have a Crunchbase profile ?

No, NVIDIA for Startups does not have a profile on Crunchbase.

Does NVIDIA for Startups have a LinkedIn profile ?

Yes, NVIDIA for Startups maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/nvidia-for-startups.

How many cybersecurity incidents has NVIDIA for Startups experienced ?

As of August 10, 2026, Rankiteo reports that NVIDIA for Startups has experienced 23 cybersecurity incidents.

How many peer or competitor companies does NVIDIA for Startups have ?

NVIDIA for Startups has an estimated 15,148 peer or competitor companies worldwide.

What types of cybersecurity incidents has NVIDIA for Startups faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

774

/1000

Fair

799

/1000

Fair

NVIDIA for Startups Vendor Cyber Rating & Cyber Score

nvidia.com

Add Your Compliance Badge

Explore and engage with the NVIDIA Inception startup ecosystem, a program that has supported 20,000+ startups. The NVIDIA Inception Program is designed to help startups accelerate innovation and growth. Program members get access to the latest developer resources and training, exclusive NVIDIA hardware and software pricing, and exposure to the venture capital community. The program is free and available to tech startups of all stages.

NS A.I CyberSecurity Scoring

Scoring History

NVIDIA for Startups CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

NVIDIA

Vulnerability

100

7/2026

NVI1785342276

NVIDIA

Vulnerability

6/2026

NVI1781685010

NVIDIA

Vulnerability

6/2026

ServiceNow

SER1781072827

NVIDIA

Cyber Attack

100

5/2026

OKTMICATTNVI178...

NVIDIA

Vulnerability

5/2026

NVI1779301531

NVIDIA

Breach

5/2026

GFN Cloud Inter...

NVI1777818242

NVIDIA

Breach

3/2026

GFN Cloud Inter...

GFN1778300632

NVIDIA

Vulnerability

1/2026

NVI1769776911

NVIDIA

Cyber Attack

100

12/2025

KUBNVITENALIAMA...

NVIDIA for Startups

Vulnerability

7/2025

NVI556071425

NVIDIA

Vulnerability

6/2025

NVI1769009245

NVIDIA

Vulnerability

6/2025

NVI1769095320

NVIDIA for Startups

Vulnerability

100

6/2025

NVI251080925

NVIDIA

Vulnerability

1/2025

NVI1769023427

NVIDIA for Startups

Vulnerability

100

6/2024

NVI108041225

NVIDIA

Cyber Attack

100

10/2022

SAMNVI177578132...

NVIDIA for Startups

Cyber Attack

02/2022

NVI202626222

NVIDIA

Cyber Attack

6/2019

LUXSHARE-ICT

GEENVILUX176915...

NVIDIA

Cyber Attack

6/2019

LUXSHARE-ICT

NVILUX176897748...

NVIDIA

Ransomware

100

6/2019

LUXSHARE-ICT Ta...

LUX1769023968

NVIDIA

Ransomware

100

6/2019

LUXSHARE-ICT Ta...

LUXNVITES176902...

NVIDIA

Ransomware

100

6/2019

LUXSHARE-ICT Ta...

LUXNVI176902406...

NVIDIA for Startups

Breach

10/2014

NVI431072925

Loading…

A.I.

NS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for NS

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for NVIDIA for Startups in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for NVIDIA for Startups in 2026.

Incident Types NS vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for NVIDIA for Startups in 2026.

Incident History - NS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

NVIDIA for Startups Subsidiaries

NS

Technology, Information and Internet

Website: https://www.nvidia.com/startups/

Company Size: None employees

NVIDIAComputer Hardware Manufacturing

NVIDIA Data CenterComputer Hardware Manufacturing

NVIDIA Design and VisualizationDesign Services

NVIDIA University RecruitingComputer Hardware Manufacturing

NVIDIA for StartupsTechnology, Information and Internet

NVIDIA WorkstationDesktop Computing Software Products

NVIDIA OmniverseSoftware Development

Loading…

NVIDIA for Startups Similar Companies

OYO

cb oyorooms.com

OYO is a global platform that aims to empower entrepreneurs and small businesses with hotels and homes by providing full-stack technology products and services that aims to increase revenue and ease operations; bringing easy-to-book, affordable, and trusted accommodation to customers around the world. OYO offers 40+ integrated products and solutions to patrons who operate over 157K hotel and home storefronts in more than 35 countries including India, Europe, and Southeast Asia. OYO was founded by 27-year-old Ritesh Agarwal, the first Asian resident to be accepted to the Thiel Fellowship (started by Paypal founder Peter Thiel). OYO operates a unique business model that helps its patrons transform fragmented, unbranded and underutilized hospitality assets into branded, digitally-enabled storefronts with higher revenue generation potential and provides its customers with access to a broad range of high-quality storefronts at compelling price points. Owners and operators of over 157K storefronts use the OYO platform to manage all mission-critical aspects of their business operations. OYO’s comprehensive, full-stack technology suite integrates more than 40 products and services across digital sign-up and onboarding, revenue management, daily business management and D2C stacks into two flagship patron applications, Co-OYO and OYO OS. OYO customers can book storefronts through OYO’s own D2C channels and through indirect channels with third-party OTAs. The OYO App offers a variety of digital tools to guide customers throughout their journey, including discovery, seamless booking, pre-stay assistance, cancellations, digital check-ins as well as in-stay and post-stay services. With over 100 mn downloads, the OYO App was the 3rd most downloaded travel app in 2020. OYO Wizard, OYO’s loyalty program, has 9.2 million members and is the second largest loyalty program run by a travel or food brand in India, by subscriber base.

Primary School

primaryschool.com.au

www.primaryschool.com.au is a directory of sites for students and lesson plans and reference material for teachers and parents. It is currently averaging up to 350,000 unique visitors a month and has over 44,000 subscribers to its free weekly newsletter which showcases the latest internet based resources. The site ranks first in results for primary school related searches in Google. It is popular because it is simple, safe and relevant.

Flipkart

flipkart.com

At Flipkart, we're driven by our purpose of empowering every Indian's dream by delivering value through innovation in technology and commerce. With a customer base of over 350 million, product coverage of over 150 million across 80+ categories, a focus on generating direct and indirect employment and a commitment to empowering generations of entrepreneurs and MSMEs, all driven by a sustainable growth strategy – Flipkart is maximising for customers, stakeholders, and the planet at large! At Flipkart, our promise to every Flipster is - getting an opportunity to leave a mark and create their own legacy, the freedom to experiment, learn and grow, work with the industry’s brightest minds as part of a diverse team and we will extend our culture of care to them to ensure that they can focus on doing their best work. Driven by audacity, bias for action, customer first, integrity and inclusion – Flipsters have pioneered solutions that have transformed digital commerce in India. From the industry-first introduction of cash-on-delivery in 2010 to the launch of voice search and multiple vernacular interfaces in 2021 that have made e-commerce a very inclusive experience, Flipkart continues the exciting journey of solving for the Indian customer. We understand that your own aspirations and journeys are unique. So you choose what you want to maximise, and we provide you the platform for it - because when you maximise, we maximise. Flipkart is a part of the Walmart-owned Flipkart Group, which also includes group companies Flipkart Wholesale, Flipkart Health+, Cleartrip, and Myntra. Get in touch with our experts for support with your orders here: https://www.flipkart.com/helpcentre

IndiaMART InterMESH Limited

cb indiamart.com

IndiaMART is India's largest online B2B marketplace, connecting buyers with suppliers across a wide array of industries. IndiaMART provides a platform for Small & Medium Enterprises (SMEs), large enterprises, and individual buyers, helping them access diverse portfolios of quality products. Since 1999, IndiaMART’s mission has been to make doing business easy. Today, over 21.9 Crore buyers can explore and choose from 12.4 Crore products, sourced from 86 Lakh suppliers, creating a one-stop platform for all business needs. IndiaMART offers enhanced business visibility and credibility for suppliers, with tools designed to support business growth and operational efficiency. With a dedicated workforce of over 5000 employees across India, IndiaMART continues to facilitate seamless connections and provide a trusted marketplace for businesses to thrive.

Independiente / Freelance

wikipedia.org

La etimología de la palabra deriva del término medieval inglés usado para un mercenario (free-independiente o lance-lanza), es decir, un caballero que no servía a ningún señor en concreto y cuyos servicios podían ser alquilados por cualquiera. El término fue acuñado inicialmente por Sir Walter Scott (1771-1832) en su reconocido romance histórico Ivanhoe para describir a un "guerrero medieval mercenario". La frase en inglés luego hizo la transición a un sustantivo figurativo alrededor de 1860 y fue luego reconocido como un verbo oficialmente en 1903 por varias autoridades en lingüística tales como el Diccionario Oxford de Inglés. Solamente en tiempos modernos ha mutado el término de un sustantivo (un freelance o un freelancer) y un adverbio (un periodista que trabaja freelance). Esta palabra es empleada como anglicismo en castellano como dos palabras separadas "free lance" (del inglés) o autónomo pero no tiene aplicación como verbo. Fuente: Wikipedia. https://es.wikipedia.org/wiki/Freelance Acerca de Independiente / Freelance Somos una de las comunidades de habla hispana más grandes en LinkedIn para profesionales que eligen trabajar de forma independiente. Un espacio para conectar, compartir recursos y encontrar oportunidades. Publicaciones para Empresas y Reclutadores. Para publicar una búsqueda de talento, por favor envíe los detalles de la oferta a: [email protected] El proceso es simple y asincrónico.

Taobao Marketplace

cb taobao.com

Launched in May 2003, Taobao Marketplace (www.taobao.com) is the online shopping destination of choice for Chinese consumers looking for wide selection, value and convenience. Shoppers choose from a wide range of products and services on Taobao Marketplace, which features hundreds of millions of product and service listings. Taobao Marketplace was China's largest online shopping destination in terms of gross merchandise volume in 2013, according to iResearch. In addition, the Mobile Taobao App was the most popular mobile commerce app in China from August 2012 to July 2014 in terms of mobile monthly active users, according to iResearch. Taobao Marketplace is a business within Alibaba Group.

Fanatics

fanaticsinc.com

Fanatics is a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

Synechron

synechron.com

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 14,000+, and has 55 offices in 20 countries within key global markets. For more information on the company, please visit our website:www.synechron.com.

Mynet

mynet.com

Türk internet kullanıcılarının en çok tercih ettiği dijital platform olan Mynet, 1999 yılından bugüne liderliğini koruyor. Kendi alanında sayısız ilki gerçekleştiren öncü internet devi Mynet, Türkiye'nin dijital ekosisteminin kalkınmasına ve gelişmesine destek olmayı sürdürüyor. Her ay ortalama 42 milyon internet kullanıcısına erişen Mynet'in sosyal ağlardaki toplam kitlesi ise 10 milyonu geride bırakmış bulunuyor. Mynet, ziyaretçilerine her ay 100 milyondan fazla video izletiyor. 1 milyonun üzerinde kullanıcısı olan Türkiye’nin en büyük online video eğitim platformu Vidobu ile Türkçe bilen tüm coğrafyanın ihtiyacı olan eğitimleri, alanında uzman eğitmenler ile veriyor. Böylece yüksek kalitedeki eğitimlerin herkes tarafından, her yerden ve düşük maliyetle erişilebilir olmasını sağlıyor. Ayrıca Vidobu, eğitim sektöründeki Global SAAS projesi olan Corviq ile kurumların kendi özel video öğrenme platformlarını oluşturmasını sağlayan bir altyapı da sunuyor. En büyük oyun stüdyolarından biri olan Mynet Games adı altında yayınladığı oyunlarla 10 milyondan fazla oyuncuyla buluşuyor. Kelime Savaşı oyunu Apple tarafından PubG ve Subway Surfers ile birlikte 2019’un en çok indirilen 3 oyunundan biri olarak açıklandı. ABD pazarına sunduğumuz Homer City, HR Master ve Racing Wheels adlı oyunlarımız dünya sıralamasında zirvede yer almıştır. ABD pazarına hybrid-casual’dan mid-core oyunlara kadar oyun geliştiren CASUAL MONSTER ve RARE FORGE şirketlerimiz ile de oyun sektöründe büyümeye devam ediyoruz.

Loading…

NEWS

NVIDIA for Startups CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 02, 2025 04:44 AM

Pakistan Unlocks AI Potential with Local Data Centre

Pakistan AI data centre launches to boost artificial intelligence adoption in healthcare, finance, agriculture, and public safety.

Read Article

November 26, 2025 08:00 AM

A comprehensive list of 2025 tech layoffs

A complete list of all the known layoffs in tech, from Big Tech to startups, broken down by month throughout 2024 and 2025.

Read Article

November 09, 2025 08:00 AM

CrowdStrike, AWS, And Nvidia Launch Third Annual Global Accelerator: 59 Startups Raised $730M – Apply By November 15 For AI Security Boost

CrowdStrike (NASDAQ:CRWD) announced on Monday that it will launch the third annual Cybersecurity Startup Accelerator alongside Amazon Web...

Read Article

November 05, 2025 08:00 AM

CrowdStrike, AWS, and NVIDIA Expand Cybersecurity Startup Accelerator Globally

Together with AWS and NVIDIA, we're building a global ecosystem of innovators driving the future of cybersecurity. The impact of our past...

Read Article

November 05, 2025 08:00 AM

Nvidia Backs Startups in India Deep Tech Alliance

Nvidia joins U.S. and Indian investors in the India Deep Tech Alliance, committing capital and resources to support startups in AI,...

Read Article

November 04, 2025 08:00 AM

CrowdStrike, AWS, NVIDIA back AI security startups

CrowdStrike, Amazon Web Services, and NVIDIA have expanded their Cybersecurity Startup Accelerator globally to support early-stage companies...

Read Article

November 04, 2025 08:00 AM

CrowdStrike, AWS & NVIDIA expand global accelerator for AI security

CrowdStrike, AWS and NVIDIA expand a global accelerator to support early-stage AI-driven cybersecurity startups with mentorship,...

Read Article

November 04, 2025 08:00 AM

CrowdStrike, AWS, NVIDIA Expand Cybersecurity Startup Accelerator Globally

CrowdStrike, AWS, NVIDIA launch global Cybersecurity Startup Accelerator, empowering AI-driven cloud security startups with mentorship,...

Read Article

November 03, 2025 08:00 AM

CrowdStrike, AWS, and NVIDIA Expand Global Cybersecurity Startup Accelerator to Drive Cloud and Agentic AI Innovation

CrowdStrike, AWS, and NVIDIA Expand Global Cybersecurity Startup Accelerator to Drive Cloud and Agentic AI Innovation · Contacts · CrowdStrike...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…