What is the official website of Park Hyatt ?

The official website of Park Hyatt is http://www.park.hyatt.com/.

What is Park Hyatt's cybersecurity risk score?

Park Hyatt has an AI-generated cybersecurity risk score of 784 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Park Hyatt experienced?

According to Rankiteo, Park Hyatt currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Park Hyatt been affected by any supply chain cyber incidents ?

According to Rankiteo, Park Hyatt has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Klue Inc. (Incident ID: KLUHUNAPP1781864958) foh&boh (Incident ID: NORKFCFOHTACHYA1769001351) foh&boh (Incident ID: FOHNORHYAOMN1769001286) foh&boh (Incident ID: FOHKFCNORHYAOMN1769001235)

Does Park Hyatt have SOC 2 Type 1 certification ?

According to Rankiteo, Park Hyatt is not certified under SOC 2 Type 1.

Does Park Hyatt have SOC 2 Type 2 certification ?

According to Rankiteo, Park Hyatt does not hold a SOC 2 Type 2 certification.

Does Park Hyatt comply with GDPR ?

According to Rankiteo, Park Hyatt is not listed as GDPR compliant.

Does Park Hyatt have PCI DSS certification ?

According to Rankiteo, Park Hyatt does not currently maintain PCI DSS compliance.

Does Park Hyatt comply with HIPAA ?

According to Rankiteo, Park Hyatt is not compliant with HIPAA regulations.

Does Park Hyatt have ISO 27001 certification ?

According to Rankiteo,Park Hyatt is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Park Hyatt operate in ?

Park Hyatt operates primarily in the Hospitality industry.

How many employees does Park Hyatt have ?

Park Hyatt employs approximately 2,649 people worldwide.

Does Park Hyatt own any subsidiaries ?

Park Hyatt presently has no subsidiaries across any sectors.

How many LinkedIn followers does Park Hyatt have ?

Park Hyatt's official LinkedIn profile has approximately 74,892 followers.

What is the NAICS classification code for Park Hyatt ?

Park Hyatt is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does Park Hyatt have a Crunchbase profile ?

No, Park Hyatt does not have a profile on Crunchbase.

Does Park Hyatt have a LinkedIn profile ?

Yes, Park Hyatt maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/park-hyatt.

How many cybersecurity incidents has Park Hyatt experienced ?

As of August 11, 2026, Rankiteo reports that Park Hyatt has experienced 10 cybersecurity incidents.

How many peer or competitor companies does Park Hyatt have ?

Park Hyatt has an estimated 14,352 peer or competitor companies worldwide.

What types of cybersecurity incidents has Park Hyatt faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Park Hyatt

Boost Score +25 with badge (5 left)

784

/1000

Fair

809

/1000

Good

Park Hyatt Vendor Cyber Rating & Cyber Score

hyatt.com

Add Your Compliance Badge

Arrive at a Park Hyatt hotel and find yourself on a journey through rare and intimate experiences. Encounter exceptional personal service, grounded in mindfulness and presence in the moment. Experience peerless quality as you surround yourself with contemporary luxury and artistry at its best—from original works of art to the finest in culinary expression.

Park Hyatt A.I CyberSecurity Scoring

Scoring History

Park Hyatt

Park Hyatt CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Apple Leisure Group

Breach

5/2026

Klue Inc.

KLUHUNAPP178186...

Hyatt

Breach

2/2025

foh&boh

NORKFCFOHTACHYA...

Hyatt

Breach

2/2025

foh&boh

FOHNORHYAOMN176...

HYATT Hotels

Breach

2/2025

foh&boh

FOHKFCNORHYAOMN...

Hyatt

Ransomware

100

1/2025

HYA1768842036

Hyatt

Ransomware

100

6/2021

HYAHIL176944683...

Park Hyatt

Breach

3/2017

HYA456072525

Park Hyatt

Ransomware

1/2016

HYA1348522

Park Hyatt

Breach

8/2015

HYA550072525

Hyatt

Ransomware

100

6/2015

HYA1768948645

Loading…

A.I.

Park Hyatt Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Park Hyatt

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for Park Hyatt in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Park Hyatt in 2026.

Incident Types Park Hyatt vs Hospitality Industry Avg (This Year)

No incidents recorded for Park Hyatt in 2026.

Incident History - Park Hyatt (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Park Hyatt Subsidiaries

Park Hyatt

Hospitality

Website: http://www.park.hyatt.com/

Company Size: 2,649

HyattHospitality

Hyatt Regency CalgaryHospitality

Grand HyattHospitality

Grand Hyatt IstanbulOtelcilik

Hyatt RegencyHospitality

Hyatt Regency London – The ChurchillHospitality

Hyatt Regency KathmanduHospitality

Hyatt Regency Istanbul AtaköyOtelcilik

Hyatt Regency St. Louis at The ArchHospitality

Hyatt Regency New BrunswickHospitality

Hyatt Regency BelgradeHospitality

Hyatt Regency San AntonioHospitality

Hyatt Regency EkaterinburgГостиничное дело

Apple Leisure GroupHospitality

ANdAZHospitality

AMResortsTravel Arrangements

HYATT HotelsHospitality

Thompson HotelsHospitality

Hyatt HouseHospitality

Destination by HyattHospitality

Hyatt Vacation OwnershipHospitality

The Unbound Collection by HyattHospitality

ALG Vacations®Hospitality

Secrets ResortsHospitality

Hyatt CentricHospitality

Amstar DMCTravel Arrangements

Miraval Resorts & SpasHospitality

Miraval Berkshires CareersHospitality

Miraval Austin Resort & SpaHospitality

Miraval The Red Seaالضيافة

Miraval Arizona CareersHospitality

Alila HotelsHospitality

UrCove by HyattHospitality

Trisept SolutionsIT Services and IT Consulting

VAX VacationAccess by Trisept SolutionsIT Services and IT Consulting

Hyatt PlaceHospitality

tommie HotelsHospitality

Caption by HyattHospitality

Unlimited Vacation ClubTravel Arrangements

Hyatt ZivaHospitality

Hyatt ZilaraHospitality

JdV by HyattHospitality

Hyatt Hotels Development EAMEImmobilien

Park Hyatt Istanbul - Maçka PalasHospitality

Loading…

Park Hyatt Similar Companies

Hilton

cb hilton.com

Hilton (NYSE: HLT) is a leading global hospitality company with a portfolio of 24 world-class brands comprising more than 8,400 properties and over 1.25 million rooms, in 140 countries and territories. Dedicated to fulfilling its founding vision to fill the earth with the light and warmth of hospitality, Hilton has welcomed over 3 billion guests in its more than 100-year history, was named the No. 1 World’s Best Workplace by Great Place to Work and Fortune and has been recognized as a global leader on the Dow Jones Sustainability Indices. Hilton has introduced industry-leading technology enhancements to improve the guest experience, including Digital Key Share, automated complimentary room upgrades and the ability to book confirmed connecting rooms. Through the award-winning guest loyalty program Hilton Honors, the more than 210 million Hilton Honors members who book directly with Hilton can earn Points for hotel stays and experiences money can't buy. With the free Hilton Honors app, guests can book their stay, select their room, check in, unlock their door with a Digital Key and check out, all from their smartphone. Visit stories.hilton.com for more information, and connect with Hilton on Facebook, X, LinkedIn, Instagram and YouTube.

Kempinski Hotels

kempinski.com

Founded in Germany in 1897, Kempinski Hotels has long reflected the finest traditions of European hospitality. Today, as ever, Kempinski is synonymous with distinctive luxury. Located in many of the world's most well-known cities and resorts, the Kempinski collection includes hotels in a grand manner, pace-setting modern establishments and older hotels of individual charm. All blend gracefully into their surroundings and offer luxurious accommodations, superb cuisine and unrivalled facilities - complemented by impeccable service. For leisure and business guests alike, the name Kempinski has long been synonymous with style, mobility and efficiency. Put simply, they are the first choice for the discerning individual. In addition to operating many of the finest city hotels in the world, Kempinski is a name that can now be found in many exciting resort locations, each combining local flair and ambience with the international standards of service and luxury that Kempinski guests have come to expect. To see all the different Kempinski jobs and apply, please go to https://careers.kempinski.com

Caesars Entertainment

caesars.com

Caesars Entertainment, Inc. is the largest casino-entertainment Company in the U.S. and one of the world's most diversified casino-entertainment providers. Since its beginning in Reno, NV, in 1937, Caesars Entertainment, Inc. has grown through development of new resorts, expansions and acquisitions. Caesars Entertainment, Inc.'s resorts operate primarily under the Caesars®, Harrah's®, Horseshoe®, and Eldorado® brand names. Caesars Entertainment, Inc. offers diversified gaming, entertainment and hospitality amenities, one-of-a-kind destinations, and a full suite of mobile and online gaming and sports betting experiences. All tied to its industry-leading Caesars Rewards loyalty program, the Company focuses on building value with its guests through a unique combination of impeccable service, operational excellence and technology leadership. Caesars is committed to its employees, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework. 21+Gambling Problem? 21+ to gamble. Gambling Problem? Call 1-800-522-4700 or text 800GAM. For more information, please visit. www.caesars.com/corporate. Caesars Entertainment promotes a collaborative culture where accountability, passion, and idea sharing create a foundation for innovation and continuous improvement in the casino entertainment industry. Caesars is always looking for intellectually-curious professionals who are aligned with our values, motivated by meritocracy, and inspired by our commitment to our guests, team members, communities, and environment. Learn what it’s like to join a diverse by design team at Caesars Entertainment and check out our open jobs.

Shangri-La Group

cb shangri-la.com

Headquartered in Hong Kong SAR, the Shangri-La Group has grown from a single hotel business to a diverse and integrated global portfolio comprising quality real estate and investment properties, wellness and lifestyle facilities. Today, the Group owns, operates and manages 100+ hotels under our family of five brands: Shangri-La, Shangri-La Signatures, Kerry Hotels, JEN by Shangri-La, and Traders. We are part of the Kuok Group, one of Asia's most dynamic multinational conglomerates and a leader in properties, logistics, agribusiness, maritime and hospitality. From our strong base in Asia, we have expanded into key gateway cities and markets around the world. Our properties sit on some of the world’s most prestigious addresses and exotic destinations. Through the environments we have created, we enable people to come together to live, work, play, eat, and rest well.

JW Marriott

jwmarriott.com

No loud pretense. No excess formalities. Just understated elegance you’ll feel the moment you walk into one of over 80 worldwide destinations. JW Marriott is part of Marriott International’s luxury portfolio and consists of beautiful properties in gateway cities and distinctive resort locations in 28 countries around the world. These elegant hotels cater to today’s sophisticated, self-assured travelers, offering them the quiet luxury they seek in a warmly authentic, relaxed atmosphere lacking in pretense. JW Marriott properties artfully provide highly crafted, anticipatory experiences that are reflective of their locale so that their guests have the time to focus on what is most important to them.

MGM Resorts International

cb mgmresorts.com

The resorts and casinos of MGM Resorts International™ are some of the most famous in the world. Our 28 destinations are renowned for their winning combination of quality entertainment, luxurious facilities, and exceptional customer service. We are actively expanding our presence globally, with potential developments in a number of domestic and international markets. At MGM Resorts International, we are all striving together to deliver an enticing blend of entertainment to every corner of the world. Many of our resorts are located in Las Vegas. Las Vegas features three of the largest convention centers in the U.S., spectacular entertainment, attractions, shopping, and world-famous resorts. Whether dancing fountains, incredible stage productions, casino action, museums or natural attractions such as Lake Mead, Vegas offers something for everyone. A stroll down our streets takes you around the globe, with recreations like climbing to the top of the Eiffel Tower or taking a Venetian gondola ride. From shimmering resort pools and spa rejuvenation to nonstop nightlife, Las Vegas promises an unforgettable career destination. With all of our unique and spectacular resorts and casinos, MGM Resorts International has a world of opportunities for you to discover excitement and rewards as you provide our guests with a wonderful and memorable experience. Take a closer look at our properties. We think you'll find an opportunity that's right for you. The 81,000 global employees of MGM Resorts are proud to be recognized as one of FORTUNE® Magazine’s World’s Most Admired Companies®.

Hampton

hampton.com

The Hampton brand, including Hampton Inn, Hampton Inn & Suites and Hampton by Hilton, is an award-winning leader in the upper-midscale hotel segment. With more than 2,700 properties in 32 countries globally, Hampton is part of Hilton Worldwide, the leading global hospitality company. All Hampton Hotels offer warm surroundings and a friendly service culture and personality, defined as “Hamptonality,” supported by its 100% Satisfaction Guarantee. High-quality accommodations, in-room conveniences and the latest technology, combined with numerous locations and consistent offerings, have made Hampton a leader in its segment and one of the fastest growing hotel brands. For more information please visit: www.hampton.com www.hamptonfranchise.com news.hampton.com www.hiltonworldwide.com/careers/ To connect with us on social please visit: www.facebook.com/hampton www.twitter.com/hampton www.youtube.com/hampton

Landry's

landrysinc.com

Landry's is a multinational, diversified restaurant, hospitality, gaming, and entertainment leader based in Houston, Texas. The company operates more than 600 establishments around the world, including well-known concepts, such as Landry’s Seafood House, Bubba Gump Shrimp Co., Rainforest Cafe, Morton’s The Steakhouse, The Oceanaire Seafood Room, McCormick & Schmick’s, Chart House, Saltgrass Steak House, Del Frisco’s Double Eagle Steakhouse, Palm Restaurants, and Mastro’s Restaurants. The company also operates a group of signature restaurants, including Vic & Anthony’s Steakhouse, Grotto, Willie G’s, and others. The gaming division includes the renowned Golden Nugget Hotel and Casino concept, with locations in Las Vegas and Laughlin, NV, Atlantic City, NJ, Biloxi, MS, and Lake Charles, LA. The entertainment and hospitality divisions encompass popular destinations, including the Galveston Island Historic Pleasure Pier, Kemah Boardwalk, Aquarium Restaurants, and other exciting attractions, coupled with deluxe accommodations throughout the Houston and Galveston area, including The Post Oak Hotel at Uptown Houston, Westin Houston Downtown, Kemah Boardwalk Inn and The San Luis Resort, including the Hilton Galveston Island Resort and Holiday Inn Galveston on the Beach located on Galveston Island.

Rotana Hotels

rotana.com

Since inception, Rotana has grown to be the region’s largest hospitality management company, and a brand that is widely recognized and admired. Rotana currently manages a portfolio of over 100 properties throughout the Middle East, Africa, Eastern Europe and Türkiye offering a wide range of services and products through its 6 sub brands; Rotana Hotels & Resorts for the 4 and 5 star properties, Arjaan Hotel Apartments for the long term stays, Rayhaan Hotels & Resorts, Rotana’s alcohol free 4 and 5 star properties, Centro Hotels, a 3 star plus affordable lifestyle brand, Edge by Rotana our collection of independent hotels and The Residences by Rotana, a brand developed for guests that are looking for a permanent home. If you are interested to join Rotana, kindly log on to www.rotanacareers.com and proceed with the online application and our Human Resources Team will look into your respective application.

Loading…

NEWS

Park Hyatt CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 14, 2026 03:44 AM

Hyatt Reveals Data Breach Impacted About 250 Hotels: What You Need to Know

A widespread malware attack on Hyatt Hotels last year hit about 250 locations worldwide -- with nearly one hundred of those in the United States.

Read Article

January 19, 2026 11:06 PM

First European Park Hyatt resort opened on Mallorcan ground

Park Hyatt Mallorca, the first Park Hyatt resort in Europe, opened on June 1. The luxury hotel's style resembles a Mallorcan mountain village and cost...

Read Article

January 12, 2026 08:00 AM

Park Hyatt Milan: quiet sophistication on a grand scale

Set in a knockout location, this spacious and elegant outpost of the luxury brand never loses its personal touch.

Read Article

December 10, 2025 08:00 AM

Newly renovated Park Hyatt hotel in Tokyo reopens

Park Hyatt brand hotel in Tokyo, Japan, has reopened its doors following an extensive renewal programme in the hotel's three-decade history.

Read Article

December 10, 2025 08:00 AM

Tokyo’s iconic ‘Lost in Translation’ hotel is back

Park Hyatt Tokyo completes the most extensive renovation in its 30-year history.

Read Article

November 28, 2025 08:00 AM

Park Hyatt Aviara Turns Southern California Into A Winter Wonderland

'Tis the season at the award-winning resort where Thanksgiving kicks off a luxurious month-long holiday celebration highlighted by the...

Read Article

October 16, 2025 07:00 AM

Trump Hotels Names Patricia Galas as Vice President of Marketing

NEW YORK– October 16, 2025 – Trump Hotels – the five star luxury hotel brand that never settles – today announced the appointment of...

Read Article

October 05, 2025 07:00 AM

Hotel Insiders Share Their Tips For 5 New Park Hyatts Around The World

From starring movie roles to dramatic art, Park Hyatt hotels are designed to impress. Experts from five of its newest hotels share their...

Read Article

September 30, 2025 07:00 AM

No translation needed: Park Hyatt Tokyo is back

The Park Hyatt Tokyo, made famous in the movie Lost in Translation, will reopen on 9 December after an 18-month refresh.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8718

SUMMARY

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 8.4)

cvss3

Base Score: 8.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Impact Score

5.8

Exploitability

REFERENCES

CVE-2026-48161

SUMMARY

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/dai-shi/react18-use/security/advisories/GHSA-32xh-vg5f-64fm

CVE-2026-11812

SUMMARY

The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 2.5)

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-11811

SUMMARY

The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2025-30241

SUMMARY

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.tp-link.com/us/support/faq/5239/

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…