What is the official website of Rosewood São Paulo ?

The official website of Rosewood São Paulo is https://www.rosewoodhotels.com/en/sao-paulo.

What is Rosewood São Paulo's cybersecurity risk score?

Rosewood São Paulo has an AI-generated cybersecurity risk score of 776 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Rosewood São Paulo experienced?

According to Rankiteo, Rosewood São Paulo currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Rosewood São Paulo been affected by any supply chain cyber incidents ?

According to Rankiteo, Rosewood São Paulo has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Rosewood São Paulo have SOC 2 Type 1 certification ?

According to Rankiteo, Rosewood São Paulo is not certified under SOC 2 Type 1.

Does Rosewood São Paulo have SOC 2 Type 2 certification ?

According to Rankiteo, Rosewood São Paulo does not hold a SOC 2 Type 2 certification.

Does Rosewood São Paulo comply with GDPR ?

According to Rankiteo, Rosewood São Paulo is not listed as GDPR compliant.

Does Rosewood São Paulo have PCI DSS certification ?

According to Rankiteo, Rosewood São Paulo does not currently maintain PCI DSS compliance.

Does Rosewood São Paulo comply with HIPAA ?

According to Rankiteo, Rosewood São Paulo is not compliant with HIPAA regulations.

Does Rosewood São Paulo have ISO 27001 certification ?

According to Rankiteo,Rosewood São Paulo is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Rosewood São Paulo operate in ?

Rosewood São Paulo operates primarily in the Hospitality industry.

How many employees does Rosewood São Paulo have ?

Rosewood São Paulo employs approximately 413 people worldwide.

Does Rosewood São Paulo own any subsidiaries ?

Rosewood São Paulo presently has no subsidiaries across any sectors.

How many LinkedIn followers does Rosewood São Paulo have ?

Rosewood São Paulo's official LinkedIn profile has approximately 41,524 followers.

What is the NAICS classification code for Rosewood São Paulo ?

Rosewood São Paulo is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does Rosewood São Paulo have a Crunchbase profile ?

No, Rosewood São Paulo does not have a profile on Crunchbase.

Does Rosewood São Paulo have a LinkedIn profile ?

Yes, Rosewood São Paulo maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/rosewoodsaopaulo.

How many cybersecurity incidents has Rosewood São Paulo experienced ?

As of August 16, 2026, Rankiteo reports that Rosewood São Paulo has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Rosewood São Paulo have ?

Rosewood São Paulo has an estimated 14,351 peer or competitor companies worldwide.

What types of cybersecurity incidents has Rosewood São Paulo faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

RSP

Boost Score +25 with badge (5 left)

776

/1000

Fair

801

/1000

Good

Rosewood São Paulo Vendor Cyber Rating & Cyber Score

rosewoodhotels.com

Add Your Compliance Badge

Rosewood São Paulo is located in an historic 1904 building that was formerly a maternity hospital and lies at the centre of Cidade Matarazzo, a complex of elegant, preserved buildings that were built in the early 20th century. The project is a mix of international figures such as the Pritzker Prize-winning architect Jean Nouvel, the designer Philippe Starck, as well as the renowned Brazilian artists Vik Muniz and Arthur Letcher. Rosewood São Paulo features 183 guest-rooms and 100 owners' residences, situated within a vertical park created by Nouvel. Two restaurants, including one located on a veranda overlooking the lush hotel gardens, are complemented by a bar and lounge. Recreational facilities will include two swimming pools (one

RSP A.I CyberSecurity Scoring

Scoring History

RSP

Rosewood São Paulo CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Rosewood São Paulo

Breach

5/2016

ROS309072625

Rosewood São Paulo

Breach

6/2012

ROS612072925

Loading…

A.I.

RSP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for RSP

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for Rosewood São Paulo in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Rosewood São Paulo in 2026.

Incident Types RSP vs Hospitality Industry Avg (This Year)

No incidents recorded for Rosewood São Paulo in 2026.

Incident History - RSP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Rosewood São Paulo Subsidiaries

RSP

Hospitality

Website: https://www.rosewoodhotels.com/en/sao-paulo

Company Size: 413

Rosewood Hotel GroupHospitality

Rosewood Hotels & ResortsHospitality

Rosewood Abu DhabiHospitality

Hôtel de Crillon, A Rosewood HotelHospitality

Rosewood DohaHospitality

Rosewood MayakobaHospitality

Rosewood LondonHospitality

Rosewood Hong KongHospitality

New World Makati HotelHospitality

Las Ventanas Al Paraiso, A Rosewood ResortHospitality

Rosewood Castiglion del BoscoHospitality

Rosewood BangkokHospitality

Rosewood JeddahHospitality

Rosewood MunichHospitality

Rosewood Villa MagnaHospitality

New World Saigon HotelHospitality

Rosewood Phnom PenhHospitality

Rosewood BeijingHospitality

Rosewood San Miguel de AllendeHospitality

The Carlyle, A Rosewood HotelHospitality

Rosewood AmsterdamHospitality

Rosewood PhuketHospitality

Carlyle & Co.Hospitality

New World Phu Quoc ResortHospitality

New World Hotels & ResortsHospitality

Rosewood Miramar BeachHospitality

Rosewood Baha MarHospitality

Rosewood MandarinaHospitality

Rosewood GuangzhouHospitality

Rosewood ViennaHospitality

The Chancery RosewoodHospitality

Rosewood Le Guanahani St BarthHospitality

Rosewood BermudaHospitality

Rosewood Washington, D.C.Hospitality

Rosewood Luang PrabangHospitality

Rosewood SanyaHospitality

Rosewood Little Dix BayHospitality

New World Shenyang HotelHospitality

Rosewood Inn of the AnasaziHospitality

Rosewood RomeHospitality

New World Hoiana HotelHospitality

Rosewood Kauri CliffsHospitality

Rosewood VeniceHospitality

Rosewood Cape KidnappersHospitality

NW Jaipur ResortHospitality

Rosewood Hoi AnHospitality

New World Langfang HotelHospitality

Rosewood Porto CervoHospitality

Rosewood ShanghaiHospitality

New World Qingyuan HotelHospitality

New World Shunde HotelRestaurants

Rosewood HoustonHospitality

Rosewood Hermana MayorHospitality

Rosewood TaipeiHospitality

Rosewood ShenzhenHospitality

Rosewood NingboHospitality

Rosewood San FranciscoHospitality

New World Nha Trang HotelHospitality

Rosewood ChengduHospitality

Rosewood Half Moon BayHospitality

Rosewood Mansion on Turtle CreekHospitality

New World Dalian HotelHospitality

New World Beijing HotelHospitality

Rosewood Hotel GeorgiaHospitality

New World Wuhan HotelHospitality

Loading…

Rosewood São Paulo Similar Companies

IHG Hotels & Resorts

ihgplc.com

IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. With a family of 19 hotel brands and IHG One Rewards, one of the world's largest hotel loyalty programmes, IHG has over 6,300 open hotels in more than 100 countries, and a development pipeline of over 2,000 properties. Luxury & Lifestyle: Six Senses Hotels Resorts Spas, Regent Hotels & Resorts, InterContinental Hotels & Resorts, Vignette Collection, Kimpton Hotels & Restaurants, Hotel Indigo Premium: voco hotels, HUALUXE Hotels & Resorts, Crowne Plaza Hotels & Resorts, EVEN Hotels Essentials: Holiday Inn Express, Holiday Inn Hotels & Resorts, Garner hotels, avid hotels Suites: Atwell Suites, Staybridge Suites, Holiday Inn Club Vacations, Candlewood Suites Exclusive Partners: Iberostar Beachfront Resorts InterContinental Hotels Group PLC is the Group's holding company and is incorporated and registered in England and Wales. Approximately 345,000 people work across IHG's hotels and corporate offices globally. Visit us online for more about our hotels and reservations and IHG One Rewards. To download the IHG One Rewards app, visit the Apple App or Google Play stores.

Hampton

hampton.com

The Hampton brand, including Hampton Inn, Hampton Inn & Suites and Hampton by Hilton, is an award-winning leader in the upper-midscale hotel segment. With more than 2,700 properties in 32 countries globally, Hampton is part of Hilton Worldwide, the leading global hospitality company. All Hampton Hotels offer warm surroundings and a friendly service culture and personality, defined as “Hamptonality,” supported by its 100% Satisfaction Guarantee. High-quality accommodations, in-room conveniences and the latest technology, combined with numerous locations and consistent offerings, have made Hampton a leader in its segment and one of the fastest growing hotel brands. For more information please visit: www.hampton.com www.hamptonfranchise.com news.hampton.com www.hiltonworldwide.com/careers/ To connect with us on social please visit: www.facebook.com/hampton www.twitter.com/hampton www.youtube.com/hampton

Hilton

cb hilton.com

Hilton (NYSE: HLT) is a leading global hospitality company with a portfolio of 24 world-class brands comprising more than 8,400 properties and over 1.25 million rooms, in 140 countries and territories. Dedicated to fulfilling its founding vision to fill the earth with the light and warmth of hospitality, Hilton has welcomed over 3 billion guests in its more than 100-year history, was named the No. 1 World’s Best Workplace by Great Place to Work and Fortune and has been recognized as a global leader on the Dow Jones Sustainability Indices. Hilton has introduced industry-leading technology enhancements to improve the guest experience, including Digital Key Share, automated complimentary room upgrades and the ability to book confirmed connecting rooms. Through the award-winning guest loyalty program Hilton Honors, the more than 210 million Hilton Honors members who book directly with Hilton can earn Points for hotel stays and experiences money can't buy. With the free Hilton Honors app, guests can book their stay, select their room, check in, unlock their door with a Digital Key and check out, all from their smartphone. Visit stories.hilton.com for more information, and connect with Hilton on Facebook, X, LinkedIn, Instagram and YouTube.

ITC Hotels Limited

itchotels.com

Established in 1975, ITC Hotels Limited has grown to encompass over 140+ hotels across 90+ destinations, solidifying its presence in the Indian subcontinent ITC Hotels seamlessly blends India’s rich tradition of hospitality with globally benchmarked services, offering a collection of hotels and resorts that reflect the unique culture and ethos of each destination. The group operates under six vibrant brands: ITC Hotels and Mementos in the luxury segment, Storii in the boutique premium segment, Welcomhotel in the upper upscale category, Fortune in the midscale segment, and WelcomHeritage in the heritage leisure space

Landry's

landrysinc.com

Landry's is a multinational, diversified restaurant, hospitality, gaming, and entertainment leader based in Houston, Texas. The company operates more than 600 establishments around the world, including well-known concepts, such as Landry’s Seafood House, Bubba Gump Shrimp Co., Rainforest Cafe, Morton’s The Steakhouse, The Oceanaire Seafood Room, McCormick & Schmick’s, Chart House, Saltgrass Steak House, Del Frisco’s Double Eagle Steakhouse, Palm Restaurants, and Mastro’s Restaurants. The company also operates a group of signature restaurants, including Vic & Anthony’s Steakhouse, Grotto, Willie G’s, and others. The gaming division includes the renowned Golden Nugget Hotel and Casino concept, with locations in Las Vegas and Laughlin, NV, Atlantic City, NJ, Biloxi, MS, and Lake Charles, LA. The entertainment and hospitality divisions encompass popular destinations, including the Galveston Island Historic Pleasure Pier, Kemah Boardwalk, Aquarium Restaurants, and other exciting attractions, coupled with deluxe accommodations throughout the Houston and Galveston area, including The Post Oak Hotel at Uptown Houston, Westin Houston Downtown, Kemah Boardwalk Inn and The San Luis Resort, including the Hilton Galveston Island Resort and Holiday Inn Galveston on the Beach located on Galveston Island.

Travel + Leisure Co.

travelandleisureco.com

Travel + Leisure Co., the world's leading vacation ownership and membership travel company, provides more than six million vacations to travelers every year. The company’s extensive Vacation Ownership portfolio includes trusted and iconic vacation club brands with a combined 270+ resorts worldwide, offering quality, flexibility, and value to more than 800,000 timeshare owners. Through its Travel and Membership business line, the company unlocks even more travel inspiration and opportunities via its signature subscription travel club, Travel + Leisure GO, and pioneering timeshare exchange network, RCI. With hospitality and responsible tourism at its heart, the company’s 19,000+ dedicated associates around the globe help the company achieve its mission to put the world on vacation.

Mandarin Oriental

mandarinoriental.com

Mandarin Oriental Hotel Group is the award-winning owner and operator of some of the world’s most luxurious hotels, resorts and residences. Having grown from its Asian roots into a global brand, the Group now operates 43 hotels, 12 residences and 23 exclusive homes in 26 countries and territories, with each property reflecting the Group’s oriental heritage, local culture and unique design. Mandarin Oriental has a strong pipeline of hotels and residences under development and is a member of the Jardine Matheson Group. Mandarin Oriental’s aim is to be recognised widely as the best global luxury hotel group, providing 21st-century luxury with oriental charm in each of its hotels. This will be achieved by investing in the Group’s exceptional facilities and people while maximizing profitability and long-term shareholder value. The Group regularly receives recognition and awards for outstanding service and quality management. The strategy of the Group is to open the hotels currently under development while continuing to seek further selective opportunities for expansion around the world. The parent company, Mandarin Oriental International Limited, is incorporated in Bermuda and has a premium listing on the London Stock Exchange, with secondary listings in Bermuda and Singapore. Mandarin Oriental Hotel Group International Limited, which operates from Hong Kong, manages the activities of the Group’s hotels. Mandarin Oriental is a member of the Jardine Matheson Group.

Marriott International

marriott.com

Marriott International, Inc. is based in Bethesda, Maryland, USA, and encompasses a portfolio of approximately 9,000 properties across more than 30 leading brands in 141 countries and territories. Its heritage can be traced to a root beer stand opened in Washington, D.C., in 1927 by J. Willard and Alice S. Marriott. Marriott International is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture. Marriott International does not discriminate on the basis of disability, veteran status or any other basis protected under federal, state or local laws. Community Guidelines: We reserve the right to remove without any notice content that we determine in our sole discretion is offensive or illegal, contains personally identifiable information, trademarks or copyrights belonging to a third party, advertises a third party’s products or services, or is otherwise inappropriate. Application Tips: We encourage job seekers to protect themselves from email and recruiting scams. Please note: 1) We do not accept applications via email or fax; 2) We never ask for money as part of the application process; 3) We only contact job applicants from approved email domains. Please find more information about Marriott International’s job application process and approved email address domains here: http://www.careers.marriott.com/tips-for-applying/

DoubleTree by Hilton

cb doubletree.com

DoubleTree by Hilton hotels are distinctively designed properties that provide true comfort to today’s business and leisure travelers. From the millions of delighted hotel guests who are welcomed with the brand’s legendary, warm chocolate chip cookies at check-in to the advantages of the award-winning Hilton HHonors® guest reward program, each DoubleTree by Hilton guest receives a satisfying stay wherever their travels take them. With a growing collection of contemporary, upscale accommodations in more than 375+ gateway cities, metropolitan areas and vacation destinations worldwide. DoubleTree by Hilton is part of Hilton Worldwide (NYSE: HLT), a leading global hospitality company spanning the lodging sector from luxury and full-service hotels and resorts to extended-stay suites and focused-service hotels. For 95 years, Hilton Worldwide has been dedicated to continuing its tradition of providing exceptional guest experiences. The company’s portfolio of eleven world-class global brands is comprised of more than 4,100 managed, franchised, owned and leased hotels and timeshare properties, with more than 685,000 rooms in 92 countries and territories, including Hilton Hotels & Resorts, Waldorf Astoria Hotels & Resorts, Conrad Hotels & Resorts, Curio – A Collection by Hilton, DoubleTree by Hilton, Embassy Suites Hotels, Hilton Garden Inn, Hampton Hotels, Homewood Suites by Hilton, Home2 Suites by Hilton and Hilton Grand Vacations. The company also manages an award-winning customer loyalty program, Hilton Honors.

Loading…

NEWS

Rosewood São Paulo CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 28, 2025 07:00 AM

LACCA São Paulo 2025: in pictures

LACCA's biggest conference in São Paulo to date was held in May and saw lawyers from Brazil's largest companies and law firms come together for a day of...

Read Article

February 28, 2025 08:00 AM

LACCA reveals shortlists for GC and legal team awards

LACCA is delighted to announce the general counsel and legal departments that have been shortlisted for an award at this year's Latin Lawyer charity ceremony.

Read Article

October 21, 2024 07:00 AM

Don't miss ACI conference in São Paulo this week!

Vale's director of corporate integrity and a director from US technology group Cisco will speak on panels at Latin Lawyer and Global...

Read Article

February 02, 2022 08:00 AM

Natural wonder — the leafy luxury of São Paulo’s newest hotel

At the top of the new Rosewood hotel in São Paulo is the penthouse that Tarzan would have built had he turned rubber baron.

Read Article

December 22, 2021 08:00 AM

Rosewood Sao Paulo: From Maternity Hospital To Magnificent Hotel

Rosewood Sao Paulo, Brazil is scheduled to officially open its doors on January 10, 2022, transforming a historic building that once housed...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…