What is the official website of Thompson Hotels ?

The official website of Thompson Hotels is https://www.hyatt.com/hotel/thompson-hotels.

What is Thompson Hotels's cybersecurity risk score?

Thompson Hotels has an AI-generated cybersecurity risk score of 775 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Thompson Hotels experienced?

According to Rankiteo, Thompson Hotels currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Thompson Hotels been affected by any supply chain cyber incidents ?

According to Rankiteo, Thompson Hotels has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Klue Inc. (Incident ID: KLUHUNAPP1781864958) foh&boh (Incident ID: NORKFCFOHTACHYA1769001351) foh&boh (Incident ID: FOHNORHYAOMN1769001286) foh&boh (Incident ID: FOHKFCNORHYAOMN1769001235)

Does Thompson Hotels have SOC 2 Type 1 certification ?

According to Rankiteo, Thompson Hotels is not certified under SOC 2 Type 1.

Does Thompson Hotels have SOC 2 Type 2 certification ?

According to Rankiteo, Thompson Hotels does not hold a SOC 2 Type 2 certification.

Does Thompson Hotels comply with GDPR ?

According to Rankiteo, Thompson Hotels is not listed as GDPR compliant.

Does Thompson Hotels have PCI DSS certification ?

According to Rankiteo, Thompson Hotels does not currently maintain PCI DSS compliance.

Does Thompson Hotels comply with HIPAA ?

According to Rankiteo, Thompson Hotels is not compliant with HIPAA regulations.

Does Thompson Hotels have ISO 27001 certification ?

According to Rankiteo,Thompson Hotels is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Thompson Hotels operate in ?

Thompson Hotels operates primarily in the Hospitality industry.

How many employees does Thompson Hotels have ?

Thompson Hotels employs approximately 427 people worldwide.

Does Thompson Hotels own any subsidiaries ?

Thompson Hotels presently has no subsidiaries across any sectors.

How many LinkedIn followers does Thompson Hotels have ?

Thompson Hotels's official LinkedIn profile has approximately 17,605 followers.

What is the NAICS classification code for Thompson Hotels ?

Thompson Hotels is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does Thompson Hotels have a Crunchbase profile ?

No, Thompson Hotels does not have a profile on Crunchbase.

Does Thompson Hotels have a LinkedIn profile ?

Yes, Thompson Hotels maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/thompson-hotels.

How many cybersecurity incidents has Thompson Hotels experienced ?

As of August 3, 2026, Rankiteo reports that Thompson Hotels has experienced 10 cybersecurity incidents.

How many peer or competitor companies does Thompson Hotels have ?

Thompson Hotels has an estimated 14,327 peer or competitor companies worldwide.

What types of cybersecurity incidents has Thompson Hotels faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Thompson Hotels

Boost Score +25 with badge (5 left)

775

/1000

Fair

800

/1000

Good

Thompson Hotels Vendor Cyber Rating & Cyber Score

hyatt.com

Add Your Compliance Badge

A True Original Welcome to the new Golden Age — where we celebrate what lasts and what moves the world forward. From our unapologetic design that melds the classics with the contemporary to our dynamic spaces that serve as an inspiring home base for guests and creatives alike, Thompson Hotels are where culture lives.

Thompson Hotels A.I CyberSecurity Scoring

Scoring History

Thompson Hotels

Thompson Hotels CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Apple Leisure Group

Breach

5/2026

Klue Inc.

KLUHUNAPP178186...

Hyatt

Breach

2/2025

foh&boh

NORKFCFOHTACHYA...

Hyatt

Breach

2/2025

foh&boh

FOHNORHYAOMN176...

HYATT Hotels

Breach

2/2025

foh&boh

FOHKFCNORHYAOMN...

Hyatt

Ransomware

100

1/2025

HYA1768842036

Hyatt

Ransomware

100

6/2021

HYAHIL176944683...

Thompson Hotels

Breach

3/2017

HYA456072525

Thompson Hotels

Ransomware

1/2016

HYA1348522

Thompson Hotels

Breach

8/2015

HYA550072525

Hyatt

Ransomware

100

6/2015

HYA1768948645

Loading…

A.I.

Thompson Hotels Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Thompson Hotels

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for Thompson Hotels in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Thompson Hotels in 2026.

Incident Types Thompson Hotels vs Hospitality Industry Avg (This Year)

No incidents recorded for Thompson Hotels in 2026.

Incident History - Thompson Hotels (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Thompson Hotels Subsidiaries

Thompson Hotels

Hospitality

Website: https://www.hyatt.com/hotel/thompson-hotels

Company Size: 427

Hyatt Hotels CorporationHospitality

Hyatt RegencyHospitality

Hyatt Regency London – The ChurchillHospitality

Hyatt Regency KathmanduHospitality

Hyatt Regency Istanbul AtaköyOtelcilik

Hyatt Regency St. Louis at The ArchHospitality

Hyatt Regency BelgradeHospitality

Hyatt Regency New BrunswickHospitality

Hyatt Regency San AntonioHospitality

Hyatt Regency EkaterinburgГостиничное дело

Alila HotelsHospitality

Hyatt PlaceHospitality

Grand HyattHospitality

Grand Hyatt IstanbulOtelcilik

Apple Leisure GroupHospitality

Apple VacationsTravel Arrangements

Travel ImpressionsLeisure, Travel & Tourism

CheapCaribbean.comTravel Arrangements

Park HyattHospitality

Park Hyatt Istanbul - Maçka PalasOtelcilik

HYATT HotelsHospitality

Hyatt Regency IndianapolisHospitality

AMResortsTravel Arrangements

Hyatt Hotels Development EAMEImmobilien

ALG Vacations®Hospitality

Hyatt HouseHospitality

Amstar DMCTravel Arrangements

Miraval Resorts & SpasHospitality

Miraval Berkshires CareersHospitality

Miraval Austin Resort & SpaHospitality

Miraval Arizona CareersHospitality

Unlimited Vacation ClubTravel Arrangements

JdV by HyattHospitality

Secrets ResortsHospitality

Hyatt Regency CalgaryHospitality

Trisept SolutionsIT Services and IT Consulting

VAX VacationAccess by Trisept SolutionsIT Services and IT Consulting

Hyatt ZivaHospitality

UrCove by HyattHospitality

Caption by HyattHospitality

Hyatt Vacation OwnershipHospitality

The Unbound Collection by HyattHospitality

Hyatt ZilaraHospitality

tommie HotelsHospitality

Hyatt CentricHospitality

ANdAZHospitality

Destination by HyattHospitality

Loading…

Thompson Hotels Similar Companies

Meliá Hotels International

ow.ly

Welcome to Meliá Hotels International! From Mallorca to the world, our story is an exciting journey that began more than six decades ago and has led us to become one of the largest hotel chains on the planet and the most sustainable in Europe (S&P Global). With more than 400 hotels across the world, our passion for hospitality drives us to deliver unique and memorable experiences through our nine brands: Gran Meliá Hotels & Resorts, ME by Meliá, The Meliá Collection, Paradisus by Meliá, Meliá Hotels & Resorts, ZEL, INNSiDE by Meliá, Sol by Meliá and Affiliated by Meliá. If you are looking for a place where your talent can shine and contribute to a more sustainable future, Meliá Hotels International is your destination. We are a family of more than 45,000 people, where every one of us is a VIP (Very Inspiring People) and we are proud to be a Top Employer in multiple countries. Being part of Meliá is to undertake a journey without borders, because the possibilities for development and learning are endless. Here, we enjoy a passionate and familiar environment, full of opportunities where inspiration will always be with you. Join us and feel like a true VIP!

MGM Resorts International

cb mgmresorts.com

The resorts and casinos of MGM Resorts International™ are some of the most famous in the world. Our 28 destinations are renowned for their winning combination of quality entertainment, luxurious facilities, and exceptional customer service. We are actively expanding our presence globally, with potential developments in a number of domestic and international markets. At MGM Resorts International, we are all striving together to deliver an enticing blend of entertainment to every corner of the world. Many of our resorts are located in Las Vegas. Las Vegas features three of the largest convention centers in the U.S., spectacular entertainment, attractions, shopping, and world-famous resorts. Whether dancing fountains, incredible stage productions, casino action, museums or natural attractions such as Lake Mead, Vegas offers something for everyone. A stroll down our streets takes you around the globe, with recreations like climbing to the top of the Eiffel Tower or taking a Venetian gondola ride. From shimmering resort pools and spa rejuvenation to nonstop nightlife, Las Vegas promises an unforgettable career destination. With all of our unique and spectacular resorts and casinos, MGM Resorts International has a world of opportunities for you to discover excitement and rewards as you provide our guests with a wonderful and memorable experience. Take a closer look at our properties. We think you'll find an opportunity that's right for you. The 81,000 global employees of MGM Resorts are proud to be recognized as one of FORTUNE® Magazine’s World’s Most Admired Companies®.

Four Seasons Hotels and Resorts

cb fourseasons.com

Four Seasons Hotels and Resorts opened its first hotel in 1961, and since that time has been dedicated to perfecting the travel experience through continual innovation and the highest standards of hospitality. Currently operating more than 130 hotels and resorts, and more than 55 residential properties in major city centers and resort destinations in 47 countries, and with more than 50 projects under planning or development, Four Seasons consistently ranks among the world's best hotels and most prestigious brands in reader polls, traveler reviews and industry awards. To learn more about our career opportunities, visit fourseasons.com/careers. For more information and reservations, visit fourseasons.com. For the latest news, visit press.fourseasons.com.

Caesars Entertainment

caesars.com

Caesars Entertainment, Inc. is the largest casino-entertainment Company in the U.S. and one of the world's most diversified casino-entertainment providers. Since its beginning in Reno, NV, in 1937, Caesars Entertainment, Inc. has grown through development of new resorts, expansions and acquisitions. Caesars Entertainment, Inc.'s resorts operate primarily under the Caesars®, Harrah's®, Horseshoe®, and Eldorado® brand names. Caesars Entertainment, Inc. offers diversified gaming, entertainment and hospitality amenities, one-of-a-kind destinations, and a full suite of mobile and online gaming and sports betting experiences. All tied to its industry-leading Caesars Rewards loyalty program, the Company focuses on building value with its guests through a unique combination of impeccable service, operational excellence and technology leadership. Caesars is committed to its employees, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework. 21+Gambling Problem? 21+ to gamble. Gambling Problem? Call 1-800-522-4700 or text 800GAM. For more information, please visit. www.caesars.com/corporate. Caesars Entertainment promotes a collaborative culture where accountability, passion, and idea sharing create a foundation for innovation and continuous improvement in the casino entertainment industry. Caesars is always looking for intellectually-curious professionals who are aligned with our values, motivated by meritocracy, and inspired by our commitment to our guests, team members, communities, and environment. Learn what it’s like to join a diverse by design team at Caesars Entertainment and check out our open jobs.

TUI

tuigroup.com

We’re adventure seekers. Smile givers. Impact makers. We believe in the power of travel. It broadens horizons for our customers, and for our people too. New places to live, new roles to explore, new communities to join. It’s yours for the taking. We’re TUI, a leading global travel and leisure experience company that makes holiday dreams come true for people around the world. We are one of the world’s leading tourism groups counting 1200 travel agencies and online portals, five airlines with around 130 aircraft, over 400 hotels, 16 cruise liners, digital platforms for tours and activities and most importantly over 60 000 colleagues around the world. What unites us is creating moments that enrich the lives of our 21 million customers. Beside the unforgettable experience we provide our customers, we also believe in the good that tourism can bring and we care deeply about our environmental impact. The TUI Care foundation has projects in over 30 countries worldwide, building on the potential of tourism as a global force for development. The Foundation opens up new perspectives through education and training, empowers local communities to benefit from the success of tourism and engages in the protection of nature and the environment. At TUI we simply say “Let’s TUI it”. For us, that means creating happiness. Tackling challenges every day together, with a positive, can-do attitude, and finding solutions even for the most unexpected situations. Our teams across TUI are just as diverse as our destinations. So whether you have lots of experience or none at all. If you want to work in an office or feel best in the field. No matter if you’re an accomplished tech whizz, an aspiring entertainer, or simply in love with flying. There’s a place for you here.

DoubleTree by Hilton

cb doubletree.com

DoubleTree by Hilton hotels are distinctively designed properties that provide true comfort to today’s business and leisure travelers. From the millions of delighted hotel guests who are welcomed with the brand’s legendary, warm chocolate chip cookies at check-in to the advantages of the award-winning Hilton HHonors® guest reward program, each DoubleTree by Hilton guest receives a satisfying stay wherever their travels take them. With a growing collection of contemporary, upscale accommodations in more than 375+ gateway cities, metropolitan areas and vacation destinations worldwide. DoubleTree by Hilton is part of Hilton Worldwide (NYSE: HLT), a leading global hospitality company spanning the lodging sector from luxury and full-service hotels and resorts to extended-stay suites and focused-service hotels. For 95 years, Hilton Worldwide has been dedicated to continuing its tradition of providing exceptional guest experiences. The company’s portfolio of eleven world-class global brands is comprised of more than 4,100 managed, franchised, owned and leased hotels and timeshare properties, with more than 685,000 rooms in 92 countries and territories, including Hilton Hotels & Resorts, Waldorf Astoria Hotels & Resorts, Conrad Hotels & Resorts, Curio – A Collection by Hilton, DoubleTree by Hilton, Embassy Suites Hotels, Hilton Garden Inn, Hampton Hotels, Homewood Suites by Hilton, Home2 Suites by Hilton and Hilton Grand Vacations. The company also manages an award-winning customer loyalty program, Hilton Honors.

Landry's

landrysinc.com

Landry's is a multinational, diversified restaurant, hospitality, gaming, and entertainment leader based in Houston, Texas. The company operates more than 600 establishments around the world, including well-known concepts, such as Landry’s Seafood House, Bubba Gump Shrimp Co., Rainforest Cafe, Morton’s The Steakhouse, The Oceanaire Seafood Room, McCormick & Schmick’s, Chart House, Saltgrass Steak House, Del Frisco’s Double Eagle Steakhouse, Palm Restaurants, and Mastro’s Restaurants. The company also operates a group of signature restaurants, including Vic & Anthony’s Steakhouse, Grotto, Willie G’s, and others. The gaming division includes the renowned Golden Nugget Hotel and Casino concept, with locations in Las Vegas and Laughlin, NV, Atlantic City, NJ, Biloxi, MS, and Lake Charles, LA. The entertainment and hospitality divisions encompass popular destinations, including the Galveston Island Historic Pleasure Pier, Kemah Boardwalk, Aquarium Restaurants, and other exciting attractions, coupled with deluxe accommodations throughout the Houston and Galveston area, including The Post Oak Hotel at Uptown Houston, Westin Houston Downtown, Kemah Boardwalk Inn and The San Luis Resort, including the Hilton Galveston Island Resort and Holiday Inn Galveston on the Beach located on Galveston Island.

Marriott Hotels

cb MarriottHotels.com

With over 500 properties worldwide, Marriott Hotels has reimagined hospitality to exceed the expectations of business, group, and leisure travelers. Marriott Hotels, Marriott’s flagship brand of quality-tier, full-service hotels and resorts, provides consistent, dependable and genuinely caring experiences to guests on their terms. Marriott is a brilliant host to guests who effortlessly blend life and work, and who are inspired by how modern travel enhances them both. Our hotels offer warm, professional service; sophisticated yet functional guest room design; lobby spaces that facilitate working, dining and socializing; restaurants and bars serving international cuisine prepared simply and from the freshest ingredients; meeting and event spaces and services that are gold standard; and expansive, 24-hour fitness facilities.

Rotana Hotels

rotana.com

Since inception, Rotana has grown to be the region’s largest hospitality management company, and a brand that is widely recognized and admired. Rotana currently manages a portfolio of over 100 properties throughout the Middle East, Africa, Eastern Europe and Türkiye offering a wide range of services and products through its 6 sub brands; Rotana Hotels & Resorts for the 4 and 5 star properties, Arjaan Hotel Apartments for the long term stays, Rayhaan Hotels & Resorts, Rotana’s alcohol free 4 and 5 star properties, Centro Hotels, a 3 star plus affordable lifestyle brand, Edge by Rotana our collection of independent hotels and The Residences by Rotana, a brand developed for guests that are looking for a permanent home. If you are interested to join Rotana, kindly log on to www.rotanacareers.com and proceed with the online application and our Human Resources Team will look into your respective application.

Loading…

NEWS

Thompson Hotels CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 04, 2025 06:03 PM

Thompson Data Breach Impacts Over 60 Thousand: Lynch Carpenter Investigates Claims

PITTSBURGH, Nov. 04, 2025 (GLOBE NEWSWIRE) -- Thompson & Horton LLP (“Thompson”), a legal practice based in Houston, Texas,1 recently...

Read Article

October 31, 2025 07:00 AM

Hyatt debuts Thompson Hotels brand in Asia Pacific

Hyatt Hotels has introduced the Thompson Hotels brand in the Asia Pacific market for the first time with a property in Shanghai, China.

Read Article

August 04, 2025 07:00 AM

Industry Veterans Christopher Strand and Jason Thompson Launch Factor Cybersecurity

PRNewswire-PRWeb/ -- Today at Black Hat 2025, cybersecurity and compliance leaders Christopher Strand and Jason Thompson officially launched...

Read Article

January 28, 2025 08:00 AM

Cybersecurity poses real consequences for family offices

The killing of UnitedHealthCare CEO Brian Thompson has led family offices to rethink cybersecurity amid risks of online exposure.

Read Article

December 07, 2024 08:00 AM

Brian Thompson's killing prompts corporate, private security overhaul

Several industry executives want enhanced security after the slaying of UnitedHealthcare CEO Brian Thompson, Newsweek has learned.

Read Article

July 24, 2024 10:09 PM

TECHTALK: Cybersecurity + Data Protection

In today's digital age, businesses face an array of threats to their cybersecurity and data integrity. From sophisticated hackers to internal...

Read Article

May 13, 2024 07:00 AM

In healthcare, cybersecurity and digitisation of systems will be key focus areas of CIOs: G Saravanan, Thomson Hospital Group

Thomson Hospital Group: In an exclusive interaction with us, G Saravanan, Group Chief Information Officer of Malaysia based Thomson Hospital...

Read Article

March 10, 2024 08:00 AM

‘Mad Men’ meets Madrid: Thompson Hotels hits Spain

All sleek mid-century design and rooftop cool, the European debut of the brand that's a byword for urban chic is already a scene.

Read Article

July 12, 2020 07:00 AM

Hyatt Pushes Ahead With Thompson Hotels Expansion In Southern United States

Hyatt is expanding the Thompson Hotels portfolio of properties with a half-dozen new properties slated for opening starting later this year.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…