What is the official website of Skills Partner ?

The official website of Skills Partner is https://www.gov.uk/dfe.

What is Skills Partner's cybersecurity risk score?

Skills Partner has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Skills Partner experienced?

According to Rankiteo, Skills Partner currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Skills Partner been affected by any supply chain cyber incidents ?

According to Rankiteo, Skills Partner has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Fortinet (Incident ID: FORGOV1783297461) Kraken Technology Group (Incident ID: UK-KRA1786368391)

Does Skills Partner have SOC 2 Type 1 certification ?

According to Rankiteo, Skills Partner is not certified under SOC 2 Type 1.

Does Skills Partner have SOC 2 Type 2 certification ?

According to Rankiteo, Skills Partner does not hold a SOC 2 Type 2 certification.

Does Skills Partner comply with GDPR ?

According to Rankiteo, Skills Partner is not listed as GDPR compliant.

Does Skills Partner have PCI DSS certification ?

According to Rankiteo, Skills Partner does not currently maintain PCI DSS compliance.

Does Skills Partner comply with HIPAA ?

According to Rankiteo, Skills Partner is not compliant with HIPAA regulations.

Does Skills Partner have ISO 27001 certification ?

According to Rankiteo,Skills Partner is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Skills Partner operate in ?

Skills Partner operates primarily in the Government Administration industry.

How many employees does Skills Partner have ?

Skills Partner employs approximately None employees people worldwide.

Does Skills Partner own any subsidiaries ?

Skills Partner presently has no subsidiaries across any sectors.

How many LinkedIn followers does Skills Partner have ?

Skills Partner's official LinkedIn profile has approximately 1,549 followers.

What is the NAICS classification code for Skills Partner ?

Skills Partner is classified under the NAICS code 92, which corresponds to Public Administration.

Does Skills Partner have a Crunchbase profile ?

No, Skills Partner does not have a profile on Crunchbase.

Does Skills Partner have a LinkedIn profile ?

Yes, Skills Partner maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/skills-partner.

How many cybersecurity incidents has Skills Partner experienced ?

As of August 10, 2026, Rankiteo reports that Skills Partner has experienced 30 cybersecurity incidents.

How many peer or competitor companies does Skills Partner have ?

Skills Partner has an estimated 13,158 peer or competitor companies worldwide.

What types of cybersecurity incidents has Skills Partner faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach, Vulnerability and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Skills Partner

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

Skills Partner Vendor Cyber Rating & Cyber Score

www.gov.uk

Add Your Compliance Badge

The Department for Education is hosting a Skills Summit on 30 November, which will see the launch of a new partnership between employers and government to deliver a skills revolution. The Skills Partner programme will see employers working with government to design and deliver reforms to technical and vocational education, so that British businesses have the home-grown skills they need to compete globally

Skills Partner A.I CyberSecurity Scoring

Scoring History

Skills Partner

Skills Partner CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UK Ministry of Defe...

Breach

8/2026

UK-HER178591219...

UK Ministry of Defe...

Breach

100

8/2026

UK-1785709637

UK Ministry of Defe...

Breach

100

7/2026

UK-1785371161

Foreign and Commonw...

Cyber Attack

100

7/2026

Fortinet

FORGOV178329746...

Cabinet Office

Breach

5/2026

CAB1777832879

UK Ministry of Defe...

Vulnerability

4/2026

Kraken Technolo...

UK-KRA178636839...

Skills Partner

Vulnerability

12/2025

DCM1765433387

Skills Partner

Breach

11/2025

UK-523475211042...

Skills Partner

Cyber Attack

100

10/2025

UK-556215510202...

Foreign and Commonw...

Breach

10/2025

FOR1766412101

Skills Partner

Ransomware

100

9/2025

DCM1764770468

Skills Partner

Breach

100

8/2025

UK-841081625

Skills Partner

Breach

6/2025

HMR745060625

UK Home Office

Breach

4/2025

UK-1777581082

Skills Partner

Breach

100

7/2024

UK-421016421104...

Skills Partner

Breach

100

6/2024

UK-169221610212...

Skills Partner

Breach

100

4/2024

UK-493314910132...

Skills Partner

Breach

100

8/2023

UK-707072025

Skills Partner

Breach

100

7/2023

UK-221002221104...

Skills Partner

Cyber Attack

100

01/2023

DEP225811123

Skills Partner

Breach

100

6/2022

UK-289342811142...

Skills Partner

Breach

100

2/2022

UK-503305010202...

Skills Partner

Breach

1/2022

UK-559215509112...

Skills Partner

Breach

11/2021

GOV1527121122

Skills Partner

Breach

100

10/2021

UK-576295710232...

HM Revenue & Custom...

Cyber Attack

9/2021

HMR1782752907

Skills Partner

Breach

100

8/2021

UK-552175511242...

Skills Partner

Breach

100

6/2021

UK-089380810032...

Skills Partner

Cyber Attack

100

09/2015

NAT233920422

Skills Partner

Breach

100

6/2010

UK-069420609202...

Loading…

A.I.

Skills Partner Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Skills Partner

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Skills Partner in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Skills Partner in 2026.

Incident Types Skills Partner vs Government Administration Industry Avg (This Year)

No incidents recorded for Skills Partner in 2026.

Incident History - Skills Partner (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Skills Partner Subsidiaries

Skills Partner

Government Administration

Website: https://www.gov.uk/dfe

Company Size: 1,001-5,000 employees

Department for EducationGovernment Administration

UK Civil ServiceGovernment Administration

UK Ministry of DefenceDefense and Space Manufacturing

Defence Equipment & Support (DE&S)Defense and Space Manufacturing

Defence ProcurementDefense & Space

National Crime Agency (NCA)Law Enforcement

UK Financial Intelligence Unit (UKFIU)Law Enforcement

Department of Health and Social CareGovernment Relations Services

HM Revenue & CustomsGovernment Administration

UK Home OfficeGovernment Administration

OfstedGovernment Administration

Department for Business and TradeGovernment Administration

Business SupportGovernment Relations

GREAT Trade and InvestmentWholesale Import and Export

UK Business and Trade - North AmericaGovernment Relations Services

Department for Work and Pensions (DWP)Government Administration

Disability ConfidentGovernment Administration

See PotentialGovernment Administration

Department for Science, Innovation and TechnologyGovernment Administration

Careers at the Department for Science, Innovation and TechnologyGovernment Administration

Department for Transport (DfT), United KingdomGovernment Administration

Foreign and Commonwealth OfficeGovernment Administration

Cabinet OfficeGovernment Administration

GOV.UKGovernment Relations Services

HM Government Public AppointmentsGovernment Administration

Department for Environment, Food and Rural AffairsGovernment Administration

Defra Public AppointmentsGovernment Administration

Defra digital, data, technology and securityIT Services and IT Consulting

Department for International Development (DFID)Government Administration

UK-Africa Investment Summit 2020Government Administration

Crown Prosecution ServiceLaw Practice

Department for Culture, Media and SportGovernment Administration

Forestry CommissionGovernment Administration

OfgemUtilities

HM TreasuryPublic Policy Offices

Office of Financial Sanctions Implementation (OFSI)Government Administration

Food Standards AgencyGovernment Administration

Starting a Food BusinessFood & Beverages

Government Legal DepartmentLegal Services

Office for National StatisticsGovernment Administration

Government Statistical ServiceGovernment Administration

Civil Service Fast Stream Statisticians' OutreachGovernment Administration

Census2021Government Administration

DstlDefense and Space Manufacturing

Data Science ChallengeGovernment Administration

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Northern PowerhouseCivic and Social Organizations

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Office of Rail and Road (ORR)Truck Transportation

Competition and Markets AuthorityGovernment Administration

UK Export FinanceFinancial Services

OfqualGovernment Administration

HM Land RegistryGovernment Administration

Charity Commission for England and WalesGovernment Administration

Attorney General's Office (UK)Government Administration

Infrastructure and Projects Authority (IPA)Government Administration

Northern Ireland OfficeGovernment Administration

Scotland OfficeGovernment Administration

Valuation Office AgencyGovernment Administration

UK Government Wales/Llywodraeth DU CymruGovernment Administration

OfwatUtilities

Regulators’ Alliance for Progressing Infrastructure Development (RAPID)Utilities

NS&IFinancial Services

NS&I Government Payment ServicesGovernment Administration

Government Actuary's DepartmentGovernment Administration

UK Statistics Authority Government Administration

TeachingPrimary and Secondary Education

Buying for SchoolsGovernment Administration

DfE Digital, Data and TechnologyGovernment Relations Services

Loading…

Skills Partner Similar Companies

United States Postal Service

usps.com

As the United States Postal Service continues its evolution as a forward-thinking, fast-acting company capable of providing quality products and services for its customers, it continues to remember and celebrate its roots as the first national network of communications that literally bound a nation together. Ours is a proud heritage built on a simple yet profound mission: Bind the nation together. Connect every American, every door, every business, everywhere through the simple act of delivering mail and packages. This idea of universal service is at the heart of the $1.4 trillion industry that employs more than 7.5 million people and drives commerce, plays an integral part in every American community and remains the greatest value of any post in the world. The Postal Service delivers more mail to more addresses in a larger geographical area than any other post in the world. The Postal Service delivers to more than 157 million addresses in every state, city and town in this country. Everyone living in the United States and its territories has access to postal products and services and pays the same postage regardless of their location. The Postal Service receives no tax dollars for operating expenses and relies on the sale of postage, products and services to fund its operations. Facebook: www.facebook.com/usps Twitter: www.twitter.com/usps Instagram: www.instagram.com/uspostalservice Pinterest: www.pinterest.com/uspsstamps YouTube: www.youtube.com/usps Corporate Blog: www.uspsblog.com This profile, while affiliated with the U.S. Postal Service®, is not an official customer service page. Please use one of the methods described below to receive assistance. Get help on twitter @USPSHelp or call 800-275-8777or go to go.usa.gov/help Thank you

State of Minnesota

mn.gov

Minnesota State Government is the third largest employer in the state of Minnesota, employing over 50,000 diverse and talented employees in more than 100 state agencies, boards, commissions, colleges, and universities. Our workplaces can be found across the state in 86 out of 87 Minnesota counties and a small share of employees work in out-of-state locations. When you bring your career to the State of Minnesota, the work you do affects the quality of life of millions of Minnesotans. From those who shape policy, to those who keep us safe, preserve our environment, or take care of our most vulnerable populations, we take our responsibilities to the public seriously. Join us as we continue to serve our great state and build a better Minnesota. To learn more about our career opportunities and comprehensive benefits, visit www.mn.gov/careers. To learn more about our state agencies, boards, commissions, colleges, and universities, visit http://mn.gov/portal/government/state/agencies-boards-commissions.

Region Stockholm

regionstockholm.se

Är du beredd att tänka nytt och hitta framtidens lösningar? För vårt framtida uppdrag behöver vi medarbetare med hög kompetens, stort engagemang och som strävar efter ständig förbättring. Vid din sida kan du få engagerade kollegor inom hundratals kvalificerade yrken – ekonomer, sjuksköterskor, jurister, radiologer, ingenjörer och kirurger. Stockholms läns landsting är en av landets största arbetsgivare med ett livsviktigt uppdrag. Vi ger två miljoner invånare en effektiv kollektivtrafik och en god hälso- och sjukvård i landets snabbast växande region. Varje dag, dygnet runt.

US Government Accountability Office

gao.gov

For more information about GAO, please visit www.gao.gov. General Information The U.S. Government Accountability Office (GAO) is an independent, nonpartisan agency that works for Congress. Often called the "congressional watchdog," GAO investigates how the federal government spends taxpayer dollars. Mission Our Mission is to support the Congress in meeting its constitutional responsibilities and to help improve the performance and ensure the accountability of the federal government for the benefit of the American people. We provide Congress with timely information that is objective, fact-based, nonpartisan, non-ideological, fair, and balanced. GAO Social Media Terms of Use: https://www.facebook.com/usgao/app/250336418365488/

Workingfor.be

workingfor.be

Workingfor.be is the job platform of the federal administration. Here, you will find a wide variety of jobs in different fields of profession. Every day thousands of our employees help build tomorrow's society. When you choose the federal administration, you choose an employer who embraces your talent and individuality and gives you the opportunity to develop yourself and your skills further every single day. Moreover, we offer you a job where you can easily find the balance between your professional and personal life. Do you want to contribute to the Belgium of tomorrow? Feel like making a difference and developing your talents? Discover our wide range of vacancies at www.workingfor.be

Council Careers Victoria

asn.au

Victorian local government jobs offer opportunities for people with diverse skills. The sector delivers more than 100 services and employs staff in the areas of health and community care, corporate and business support, engineering, planning and community development, and environment and emergency management. Local government offers you the opportunity to: • work directly with the community • work in any location across the state • be involved in on-going learning and development • negotiate flexible working arrangements • take part in employee health and recreation programs • undertake further study.

City of Cape Town

capetown.gov.za

Cape Town, or the Mother City, is South Africa’s oldest city, its second-most populous and the legislative capital. It is made up of a diverse population, a rich history, world-famous tourist attractions and an exciting calendar of international and local events. More than 231 councillors and 26 225 staff serve 4 million residents across a sprawling and cosmopolitan metro of 2 500 square kilometres. The City provides all the services normally associated with a full-service municipality, such as water, electricity, waste removal, sanitation, new infrastructure, roads, public spaces, facilities, housing developments, the upgrade of informal settlements and existing infrastructure, clinics and more. To meet the current and future needs of its residents, the City of Cape Town has formulated strategies and policies to guide development and growth. Central to these is the Integrated Development Plan (IDP), which is a five-year plan that informs the City’s policy and budget decisions. The City’s strong sense of community makes it one of the best places to live, work and raise a family. We offer rewarding career opportunities, great benefits and competitive salaries. New opportunities are posted at www.capetown.gov.za/careers.

Comunidad de Madrid

comunidad.madrid

Si necesitas información general y especializada sobre los servicios públicos madrileños puedes llamar al teléfono de Atención al Ciudadano 012. En la Comunidad de Madrid estamos encantados de recibir comentarios y favorecer el diálogo, por eso te proponemos unas normas básicas de participación: - Respeta a los demás usuarios y haz un uso adecuado de la red al publicar un comentario. Se eliminará cualquier mensaje difamatorio, ofensivo, amenazador, grosero o que esté penado por las leyes españolas. - Haz comentarios relacionados con lo publicado, sé lo más breve posible y evita las mayúsculas. Se borrarán aquellos comentarios que se consideren fuera de tema. - No están permitidos los mensajes que contengan spam o publicidad intrusiva. - La Comunidad de Madrid no se hace responsable del contenido de las opiniones que los participantes dejan en los comentarios, ni se identifica con ellas. ¡Esperamos tu participación! Síguenos también en www.twitter.com/ComunidadMadrid y www.facebook.com/ComunidadeMadrid.

Department of Health (Philippines)

doh.gov.ph

The Philippine Department of Health (abbreviated as DOH; Filipino: Kagawaran ng Kalusugan) is the executive department of the Philippine government responsible for ensuring access to basic public health services by all Filipinos through the provision of quality health care and the regulation of all health services and products. It is the government's over-all technical authority on health. It has its headquarters at the San Lazaro Compound, along Rizal Avenue in Manila. The department is led by the Secretary of Health, nominated by the President of the Philippines and confirmed by the Commission on Appointments. The Secretary is a member of the Cabinet. The current Secretary of Health is Francisco Duque.

Loading…

NEWS

Skills Partner CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 27, 2026 08:15 PM

NJIT to Launch Expanded AI and Cybersecurity Workforce Training in Partnership with Verizon

Newark, N.J., Feb. 27, 2026 (GLOBE NEWSWIRE) -- New Jersey Institute of Technology (NJIT) today announced applications are open for an...

Read Article

February 27, 2026 04:06 PM

Bell, McKenna Institute announce cybersecurity skills partnership

Bell Canada is investing CAD 1 million in the McKenna Institute at the University of New Brunswick to support development of the...

Read Article

February 17, 2026 12:46 PM

Morocco Ministries Partner with AXA Group to Elevate Digital Skills in AI, Cybersecurity

Moroccan ministries and AXA Group signed a partnership agreement, aiming to strengthen national expertise in artificial intelligence.

Read Article

February 07, 2026 08:00 AM

OpenClaw Partners with VirusTotal to Secure AI Agent Skill Marketplace

OpenClaw announced today a partnership with VirusTotal, Google's threat intelligence platform, to implement automated security scanning for...

Read Article

February 03, 2026 08:00 AM

Cisco’s "End of Gold": A High-Stakes Pivot to Skills-First Architecture

Cisco 360 Partner Program reshapes partner incentives, designations, and tools to support AI-ready infrastructure and outcome-based...

Read Article

January 27, 2026 08:00 AM

Check Point & CompTIA Partner to Bridge Cyber Skills Gap

Discover how Check Point and CompTIA join forces to deliver hands-on training and certifications, empowering cyber security professionals...

Read Article

January 16, 2026 05:00 PM

Cyberspark and CybExer Announce Strategic Partnership to Strengthen Cybersecurity Skills and Education

This is News article profile page. Cyberspark is pleased to announce a formal partnership with CybExer, a global cyber range provider...

Read Article

January 09, 2026 11:35 PM

KSU, Google Expand Partnership to Foster National AI and Cybersecurity Skills

Riyadh, October 28, 2025, SPA -- Minister of Education and Chairman of the Council of King Saud University (KSU) Affairs Yousef Al-Benyan received President...

Read Article

December 09, 2025 08:00 AM

Cisco partners CII to set-up CoE in Mumbai; aims to skill over 2.7 mn individuals in AI, cybersecurity

Cisco partners CII to set-up CoE in Mumbai; aims to skill over 2.7 mn individuals in AI, cybersecurity · ETTelecom Desk · ETTelecom. Published...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…