What is the official website of Qatar Duty Free ?

The official website of Qatar Duty Free is https://www.qatardutyfree.com.

What is Qatar Duty Free's cybersecurity risk score?

Qatar Duty Free has an AI-generated cybersecurity risk score of 778 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Qatar Duty Free experienced?

According to Rankiteo, Qatar Duty Free currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Qatar Duty Free been affected by any supply chain cyber incidents ?

According to Rankiteo, Qatar Duty Free has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Qatar Duty Free have SOC 2 Type 1 certification ?

According to Rankiteo, Qatar Duty Free is not certified under SOC 2 Type 1.

Does Qatar Duty Free have SOC 2 Type 2 certification ?

According to Rankiteo, Qatar Duty Free does not hold a SOC 2 Type 2 certification.

Does Qatar Duty Free comply with GDPR ?

According to Rankiteo, Qatar Duty Free is not listed as GDPR compliant.

Does Qatar Duty Free have PCI DSS certification ?

According to Rankiteo, Qatar Duty Free does not currently maintain PCI DSS compliance.

Does Qatar Duty Free comply with HIPAA ?

According to Rankiteo, Qatar Duty Free is not compliant with HIPAA regulations.

Does Qatar Duty Free have ISO 27001 certification ?

According to Rankiteo,Qatar Duty Free is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Qatar Duty Free operate in ?

Qatar Duty Free operates primarily in the Retail industry.

How many employees does Qatar Duty Free have ?

Qatar Duty Free employs approximately 1,491 people worldwide.

Does Qatar Duty Free own any subsidiaries ?

Qatar Duty Free presently has no subsidiaries across any sectors.

How many LinkedIn followers does Qatar Duty Free have ?

Qatar Duty Free's official LinkedIn profile has approximately 92,904 followers.

What is the NAICS classification code for Qatar Duty Free ?

Qatar Duty Free is classified under the NAICS code 43, which corresponds to Retail Trade.

Does Qatar Duty Free have a Crunchbase profile ?

No, Qatar Duty Free does not have a profile on Crunchbase.

Does Qatar Duty Free have a LinkedIn profile ?

Yes, Qatar Duty Free maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/qatardutyfree.

How many cybersecurity incidents has Qatar Duty Free experienced ?

As of October 20, 2026, Rankiteo reports that Qatar Duty Free has not experienced any cybersecurity incidents.

How many peer or competitor companies does Qatar Duty Free have ?

Qatar Duty Free has an estimated 16,097 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

QDF

Boost Score +25 with badge (5 left)

778

/1000

Fair

803

/1000

Good

Qatar Duty Free Vendor Cyber Rating & Cyber Score

qatardutyfree.com

Add Your Compliance Badge

Welcome to Qatar Duty Free at Hamad International Airport, where a world of exclusives awaits you. One of the largest duty free areas in the world, this shopping emporium boasts more than 70 elegant boutiques and luxury stores, as well as more than 30 restaurants and cafés. A visionary retail experience, Qatar Duty Free offers an unprecedented selection of bespoke shopping concepts to appeal to every need and every budget. You will be spoilt for choice with one of the largest airport perfumes and cosmetics store in the world, the latest fashion trends, jewellery, electronics, toys and confectionery. We have crafted together a hand-picked portfolio of affordable and luxury brands that make shopping in Hamad International Airport an

QDF

Qatar Duty Free CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

QDF Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for QDF

Incidents vs Retail Industry Avg (This Year)

No incidents recorded for Qatar Duty Free in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Qatar Duty Free in 2026.

Incident Types QDF vs Retail Industry Avg (This Year)

No incidents recorded for Qatar Duty Free in 2026.

Incident History - QDF (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Qatar Duty Free Subsidiaries

QDF

Retail

Website: https://www.qatardutyfree.com

Company Size: 1,001-5,000 employees

Qatar AirwaysAirlines and Aviation

Hamad International AirportAirlines and Aviation

Qatar Airways CargoAirlines and Aviation

Qatar Aviation ServicesAirlines and Aviation

Qatar Executiveالخطوط الجوية والطيران

Discover QatarTravel Arrangements

Qatar Aircraft Catering CompanyAirlines and Aviation

Qatar Airways Holidaysترتيبات السفر

Loading…

Qatar Duty Free Similar Companies

S-ryhmä / S Group

s-ryhma.fi

S-ryhmä on suomalainen vähittäiskaupan ja palvelualan yritysverkosto, jolla on Suomessa yli 1 800 toimipaikkaa. S-ryhmä muodostuu 19 itsenäisestä alueosuuskaupasta ja niiden omistamasta Suomen Osuuskauppojen Keskuskunnasta (SOK) tytäryhtiöineen. Alueellisten ja valtakunnallisten tytäryhtiöidensä lisäksi SOK harjoittaa Baltian alueella marketkauppaa sekä matkailu- ja ravitsemiskauppaa. Lisäksi S-ryhmään kuuluu kuusi paikallisosuuskauppaa. S-ryhmä tarjoaa marketkaupan, tavaratalo- ja erikoisliikekaupan, liikennemyymälä- ja polttonestekaupan, matkailu- ja ravitsemiskaupan sekä rautakaupan palveluita. Lisäksi autokaupan ja maatalouskaupan toimipaikkoja löytyy joidenkin osuuskauppojen alueelta, ja S-Pankki tarjoaa kaikille asiakasomistajille kattavat pankkipalvelut. Osuuskaupat ovat osuustoiminnallisia yrityksiä. Niiden omistajat ovat myös asiakkaita, S-ryhmän kielellä asiakasomistajia. S-ryhmän toiminnan tarkoituksena on tuottaa kilpailukykyisiä palveluja ja etuja asiakasomistajille kannattavasti. ----- S Group is a Finnish network of companies operating in the retail and service sectors. It has more than 1,800 outlets in Finland. S Group consists of nineteen independent regional and six local cooperatives and SOK Corporation, which is owned by the cooperatives, and its subsidiaries. Cooperatives are enterprises operating in accordance with the principles of cooperative activities. Their owners are also their customers. The owners of S Group are called co-op members.

Pick n Pay

picknpay.co.za

Welcome to Pick n Pay, where family values and customer-centricity converge to create an unparalleled shopping experience. Since 1967, when the visionary Raymond Ackerman championed the cause of consumers by acquiring the first few stores, the Ackerman family's dedication has steered our journey of growth and expansion. Today, Pick n Pay stands tall across South Africa, Botswana, Zambia, and Lesotho, embodying our commitment to serving communities far and wide. Additionally, we proudly hold a 49% share in TM Supermarkets, a Zimbabwean retail giant, further extending our reach and impact. Our core offering spans groceries, clothing, and general merchandise, tailored to meet the diverse needs of our customers. But our dedication doesn't stop there. We go beyond the ordinary, offering value-added services that align with the evolving expectations of our patrons. The Group strives to address socio-economic challenges through the supply of high-quality, affordable food for all customers, while providing significant employment and economic opportunities across its value chain. To ensure utmost convenience and accessibility, Pick n Pay operates through various store formats, including both franchised and owned establishments. Whether you step into our stores for a quick grocery run or a leisurely shopping spree, expect nothing less than a seamless and enriching experience at Pick n Pay—the quintessential family store focused on you, our valued customer.

Mr Price Group

mrpricegroup.com

Mr Price Group Limited is an omni-channel, fashion value retailer. The Group retails apparel, homeware and sportswear and is one of the fastest growing retailers in South Africa. Our History: 1885 - The first John Orrs store opens 1934 - The first Hub store opens 1952 - John Orrs is listed on the JSE 1967 - Acquisition of two Miladys stores 1986 - Laurie Chiappini and Stewart Cohen, together with BOE, acquire a major shareholding in John Orr Holdings 1987 - The first Mr Price store opens 1991 - Laurie Chiappini and Stewart Cohen acquire control of the Group from BOE 1993 - Launch of the Mr Price Group Share Partnership Initiative 1996 - Acquisition of Galaxy & Co. and Sheet Street 1997 - Alastair McArthur is appointed as CEO 1998 - Mr Price Home launched 2000 - Mr Price opens stores in Botswana and Namibia 2001 - Specialty Stores becomes MR Price Group 2005 - Over 100 million units are sold across the group 2006 - Sale of the Hub and Galaxy divisions 2007 - Launch of Mr Price Sport stores and Mr Price Franchising 2008 - Miladys wins the Orange Index award for excellence in customer service 2008 - Mr Price Apparel is voted the most loved and most frequented retail apparel brand for the first time 2008 - This year Mr Price Home is voted the most loved and most frequented homeware retailer 2011 - Retail sales exceed R10 billion and profit attributable to shareholders exceeds R1 billion for the first time 2011 - The group celebrates the 25th anniversary of change in control, recording a CAGR share of 25.3% and headline earnings per share of 23.5% over this period 2012 - First Corporate owned Mr Price store opens in Lagos, Nigeria 2013 - Mr Price launches its online store

Advance Auto Parts

advanceautoparts.com

Advance Auto Parts, Inc. is a leading automotive aftermarket parts provider that serves both professional installers and do-it-yourself customers. As of October 5, 2024, Advance operated 4,781 stores primarily within the United States, with additional locations in Canada, Puerto Rico and the U.S. Virgin Islands. The company also served 1,125 independently owned Carquest branded stores across these locations in addition to Mexico and various Caribbean islands. Additional information about Advance, including employment opportunities, customer services and online shopping for parts, accessories and other offerings can be found at www.AdvanceAutoParts.com.

Circle K

circlek.com

Our mission at Circle K is to make our customers' lives a little easier every day. We are part of communities across North America, Europe, Asia, and the Middle East, helping us grow into one of the world’s leading convenience and fuel retail businesses. Our parent company, Alimentation Couche-Tard (“Couche-Tard”), is a leader in the Canadian convenience store industry. Together, we are brightening journeys across more than 14,200 stores in 26 countries worldwide. We’re all about Growing Together. Learn how you can join our team today: https://workwithus.circlek.com. Work with us, and we’ll make it work for you. Find out more at https://www.circlek.com/ or connect with us on Facebook, Instagram, or Twitter.

Landmark Group

landmarkgroup.com

For over five decades, Landmark Group has shaped the region’s retail and hospitality landscape-growing from a single store in Bahrain to one of the largest and most successful omnichannel and hospitality groups across the Middle East, Asia and Africa. Rooted in purpose and powered by innovation, we bring together 21 trusted brands — including own brands like Centrepoint, Max, Home Centre, Babyshop, Splash, Shoemart, Lifestyle, VIVA, Citymax and more- spanning fashion, home, fitness, and hospitality. With over 2,500 stores across 15 countries, we live our purpose every day: creating exceptional value for all the lives we touch. Driven by a customer-first philosophy, we place strong emphasis on enriching every interaction. Through our portfolio of loyalty programmes, Shukran and Landmark Rewards, we connect with over 35 million active members, offering exclusive rewards and meaningful experiences across our brands and partners. At Landmark, we believe our greatest strength lies in our people. Our success is powered by talented and passionate Landmarkers who bring diverse perspectives, creativity, and expertise to everything they do. With over 53,000 employees from almost 100 nationalities, we continue to build a culture of growth, innovation, and shared purpose, living the group's values collectively of listening, empowering, adapting and delivering with integrity.

The Shoprite Group of Companies

shopriteholdings.co.za

The Shoprite Group is the largest retailer in Africa, known for its iconic supermarket brands Shoprite, Checkers and Usave. Starting with just eight stores and 400 employees in 1979, our business is now the continent’s industry leader by market capitalisation, sales, profit, and number of employees and customers. The Group’s core business is food retailing, complemented by value-added retail services and offering across a range of industries including technology, financial, pharmaceutical, furniture, telecommunication as well as ticketing businesses. The Group’s almost 163 000 employees are constantly finding solutions, driving innovation and technological advancements to reshape the retail industry. With the use of data science and artificial intelligence, our diverse mix of talent has transformed the retail landscape from traditional brick-and-mortar shops to multi-channel platforms where customers can experience frictionless and more personalised shopping. In addition to our commercial ventures, the Group is committed to sustainability and being a responsible citizen. The Group’s extensive sustainability initiatives reduce the environmental impact of our operations, improve the lives of the communities we operate in and help develop small suppliers. Since our inception, our purpose has always been to uplift lives every day by pioneering access to the most affordable goods and services, creating economic opportunity and protecting our planet. Join the leaders in retail innovation.

Zalando

zalando.com

Welcome to Zalando. Here’s some key info about us: Our position and vision: - We’re Europe’s leading online platform for fashion and lifestyle. - Founded in Berlin in 2008, we bring head-to-toe fashion to more than 50 million active customers in 25 markets; offering clothes, footwear, accessories, and beauty. - We're building the ecosystem for fashion and lifestyle ecommerce. Our offering: - Our assortment of international brands ranges from world-famous names to local labels - Our platform is a one-stop fashion destination for inspiration, innovation, and interaction - As Europe’s most fashionable tech company, we work hard to find digital solutions for every aspect of the fashion journey: for our customers, partners, and friends of our brand. - Our logistics network with 12 centrally located fulfillment centers allows us to efficiently serve our customers throughout Europe, supported by warehouses in Italy, France, Poland, and Sweden with a focus on local customer needs. Our beliefs: - Our ambition is to combine our passion for self-expression through fashion with our unwavering commitments to sustainability and D&I - We promote an inclusive corporate culture that welcomes different perspectives and brings together people from diverse backgrounds. We want to ensure a non-discriminatory and supportive working environment for each of our employees to thrive. It’s a journey that all teams are on together, centered around the values we uphold. - We believe that our integration of fashion, operations, and online technology gives us the capability to deliver a compelling value proposition to both our customers and fashion brand partners.

Walmart

bit.ly

More than 60 years ago, Sam Walton opened the first Walmart in Rogers, Arkansas. Today, we’re a people-led, tech-powered omnichannel retailer dedicated to helping people save money and live better all around the world. Our 2.1 million associates are the engine behind what we do — serving customers and members in communities spanning 19 countries, in stores and clubs, online and through a supply chain built for speed and scale. We’re committed to creating clear pathways for associates to learn, grow and advance. Whether you’re starting your first job or bringing years of experience, you’ll find room to grow, learn new skills and build a career with purpose. We’re proud to invest in our people and foster a culture grounded in respect, integrity, service and striving for excellence. Recognized as a Fortune 100 Best Companies to Work For® (2025) and Great Place To Work®-Certified™ , we’re proud of what we’re building together.

Loading…

NEWS

Qatar Duty Free CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 28, 2026 08:00 AM

Qatar Duty Free Steps Up Ramadan Activities For Expected 4 Million Travelers

Qatar Duty Free (QDF), the retail operator at Doha's Hamad International Airport (DOH), has put together a series of experiences based...

Read Article

November 24, 2025 08:00 AM

Qatar Airways Increases Winter Flights to Key Destinations

Qatar Airways has increased flight frequencies to several key international destinations as part of its winter schedule expansion.

Read Article

November 15, 2025 08:00 AM

Stone Island Debut Shows Why Qatar Duty Free Is A Travel Retail Leader

After bringing Labubu into travel retail, Hamad International Airport's Qatar Duty Free is first with another rising star—Stone Island.

Read Article

September 26, 2025 07:00 AM

Qatar Duty Free Lands First Labubu Store In The Middle East

Qatar Duty Free (QDF), a Qatar Airways division, will open the first-ever Pop Mart store in the Middle East in October at Hamad...

Read Article

September 24, 2025 07:00 AM

Indian travellers can now use UPI at Qatar Duty Free outlets and tourist attractions

NPCI and QNB have enabled UPI QR payments in Qatar, starting with Qatar Duty Free, easing cash-free travel for Indians.

Read Article

September 24, 2025 07:00 AM

UPI Goes Live In Qatar: NPCI In Partnership With QNB Enables Instant Payments

NPCI International and Qatar National Bank enable QR-based UPI payments across Qatar, starting with Qatar Duty Free, boosting convenience...

Read Article

May 19, 2025 07:00 AM

Retail Nears $1 Billion For Qatar Airways In Historic Year

The airline has praised its 100%-owned shopping business, Qatar Duty Free.

Read Article

May 09, 2025 07:00 AM

Qatar Duty Free Marks Its 25th Anniversary with “25 Has Arrived” Campaign by BBD Perfect Storm

A bold new brand tagline and airport-wide campaign marks the start of a year-long celebration of the World's Best Airport Shopping, Qatar Duty Free.

Read Article

April 14, 2025 07:00 AM

Qatar’s Hamad Airport Holds Firm In New Rankings As Duty-Free Expands

The Middle East gateway has put the last pieces of its 2018 development plan in place and retail arm, Qatar Duty Free, hopes to leverage...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Qatar Duty Free Vendor Cyber Rating & Cyber Score

QDF A.I CyberSecurity Scoring

Qatar Duty Free CyberSecurity News & History

QDF Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for QDF

Incidents vs Retail Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types QDF vs Retail Industry Avg (This Year)

Incident History - QDF (X = Date, Y = Severity)

Qatar Duty Free Subsidiaries

QDF

Qatar Duty Free Similar Companies

S-ryhmä / S Group

Pick n Pay

Mr Price Group

Advance Auto Parts

Circle K

Landmark Group

The Shoprite Group of Companies

Zalando

Walmart

Qatar Duty Free CyberSecurity News

Qatar Duty Free Steps Up Ramadan Activities For Expected 4 Million Travelers

Qatar Airways Increases Winter Flights to Key Destinations

Stone Island Debut Shows Why Qatar Duty Free Is A Travel Retail Leader

Qatar Duty Free Lands First Labubu Store In The Middle East

Indian travellers can now use UPI at Qatar Duty Free outlets and tourist attractions

UPI Goes Live In Qatar: NPCI In Partnership With QNB Enables Instant Payments

Retail Nears $1 Billion For Qatar Airways In Historic Year

Qatar Duty Free Marks Its 25th Anniversary with “25 Has Arrived” Campaign by BBD Perfect Storm

Qatar’s Hamad Airport Holds Firm In New Rankings As Duty-Free Expands

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Qatar Duty Free CyberSecurity News & History

QDF Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for QDF

Incidents vs Retail Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types QDF vs Retail Industry Avg (This Year)

Incident History - QDF (X = Date, Y = Severity)

Qatar Duty Free Subsidiaries

QDF

Qatar Duty Free Similar Companies

S-ryhmä / S Group

Pick n Pay

Mr Price Group

Advance Auto Parts

Circle K

Landmark Group

The Shoprite Group of Companies

Zalando

Walmart

Qatar Duty Free CyberSecurity News

Qatar Duty Free Steps Up Ramadan Activities For Expected 4 Million Travelers

Qatar Airways Increases Winter Flights to Key Destinations

Stone Island Debut Shows Why Qatar Duty Free Is A Travel Retail Leader

Qatar Duty Free Lands First Labubu Store In The Middle East

Indian travellers can now use UPI at Qatar Duty Free outlets and tourist attractions

UPI Goes Live In Qatar: NPCI In Partnership With QNB Enables Instant Payments

Retail Nears $1 Billion For Qatar Airways In Historic Year

Qatar Duty Free Marks Its 25th Anniversary with “25 Has Arrived” Campaign by BBD Perfect Storm

Qatar’s Hamad Airport Holds Firm In New Rankings As Duty-Free Expands

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo