What is the official website of U.S. Consulate General Hamilton, Bermuda ?

The official website of U.S. Consulate General Hamilton, Bermuda is https://bm.usconsulate.gov.

What is U.S. Consulate General Hamilton, Bermuda's cybersecurity risk score?

U.S. Consulate General Hamilton, Bermuda has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has U.S. Consulate General Hamilton, Bermuda experienced?

According to Rankiteo, U.S. Consulate General Hamilton, Bermuda currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has U.S. Consulate General Hamilton, Bermuda been affected by any supply chain cyber incidents ?

According to Rankiteo, U.S. Consulate General Hamilton, Bermuda has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does U.S. Consulate General Hamilton, Bermuda have SOC 2 Type 1 certification ?

According to Rankiteo, U.S. Consulate General Hamilton, Bermuda is not certified under SOC 2 Type 1.

Does U.S. Consulate General Hamilton, Bermuda have SOC 2 Type 2 certification ?

According to Rankiteo, U.S. Consulate General Hamilton, Bermuda does not hold a SOC 2 Type 2 certification.

Does U.S. Consulate General Hamilton, Bermuda comply with GDPR ?

According to Rankiteo, U.S. Consulate General Hamilton, Bermuda is not listed as GDPR compliant.

Does U.S. Consulate General Hamilton, Bermuda have PCI DSS certification ?

According to Rankiteo, U.S. Consulate General Hamilton, Bermuda does not currently maintain PCI DSS compliance.

Does U.S. Consulate General Hamilton, Bermuda comply with HIPAA ?

According to Rankiteo, U.S. Consulate General Hamilton, Bermuda is not compliant with HIPAA regulations.

Does U.S. Consulate General Hamilton, Bermuda have ISO 27001 certification ?

According to Rankiteo,U.S. Consulate General Hamilton, Bermuda is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does U.S. Consulate General Hamilton, Bermuda operate in ?

U.S. Consulate General Hamilton, Bermuda operates primarily in the Government Administration industry.

How many employees does U.S. Consulate General Hamilton, Bermuda have ?

U.S. Consulate General Hamilton, Bermuda employs approximately 3 people worldwide.

Does U.S. Consulate General Hamilton, Bermuda own any subsidiaries ?

U.S. Consulate General Hamilton, Bermuda presently has no subsidiaries across any sectors.

How many LinkedIn followers does U.S. Consulate General Hamilton, Bermuda have ?

U.S. Consulate General Hamilton, Bermuda's official LinkedIn profile has approximately 840 followers.

What is the NAICS classification code for U.S. Consulate General Hamilton, Bermuda ?

U.S. Consulate General Hamilton, Bermuda is classified under the NAICS code 92, which corresponds to Public Administration.

Does U.S. Consulate General Hamilton, Bermuda have a Crunchbase profile ?

No, U.S. Consulate General Hamilton, Bermuda does not have a profile on Crunchbase.

Does U.S. Consulate General Hamilton, Bermuda have a LinkedIn profile ?

Yes, U.S. Consulate General Hamilton, Bermuda maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/u-s-consulate-general-hamilton-bermuda.

How many cybersecurity incidents has U.S. Consulate General Hamilton, Bermuda experienced ?

As of August 10, 2026, Rankiteo reports that U.S. Consulate General Hamilton, Bermuda has experienced 1 cybersecurity incidents.

How many peer or competitor companies does U.S. Consulate General Hamilton, Bermuda have ?

U.S. Consulate General Hamilton, Bermuda has an estimated 13,156 peer or competitor companies worldwide.

What types of cybersecurity incidents has U.S. Consulate General Hamilton, Bermuda faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UCGHB

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

U.S. Consulate General Hamilton, Bermuda Vendor Cyber Rating & Cyber Score

usconsulate.gov

Add Your Compliance Badge

The United States Consulate General in Hamilton, Bermuda engages with Bermuda’s political, social and cultural communities to maintain the strong ties between the people of Bermuda and the people of the United States. The main office is located at “Crown Hill,” a historic property, just outside the city of Hamilton, that is owned by the U.S. Government. Approximately 40 employees, including the Consul General, Deputy Principal Officer, Consul, U.S. Customs and Border Protection Port Director and officers are assigned to the Consulate General.

UCGHB A.I CyberSecurity Scoring

Scoring History

UCGHB

U.S. Consulate General Hamilton, Bermuda CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Consulate Gene...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

UCGHB Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UCGHB

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Consulate General Hamilton, Bermuda in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for U.S. Consulate General Hamilton, Bermuda in 2026.

Incident Types UCGHB vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Consulate General Hamilton, Bermuda in 2026.

Incident History - UCGHB (X = Date, Y = Severity)

Loading…

SUBSIDIARY

U.S. Consulate General Hamilton, Bermuda Subsidiaries

UCGHB

Government Administration

Website: https://bm.usconsulate.gov

Company Size: 3

U.S. Department of StateInternational Affairs

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

The Fulbright ProgramInternational Affairs

Foreign Service InstituteInternational Affairs

U.S. Embassy in San SalvadorGovernment Administration

U.S. Consulate General MumbaiGovernment Administration

U.S. Embassy South AfricaGovernment Relations Services

U.S. Embassy and Consulates in BrazilGovernment Administration

U.S. Embassy Amman, JordanGovernment Relations Services

U.S. Embassy in AustraliaInternational Affairs

U.S. Embassy ManaguaGovernment Relations Services

U.S. Embassy ZambiaInternational Affairs

Office of the Under Secretary of State for Economic Growth, Energy, and the Environment (E)International Affairs

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

U.S. Department of State - Bureau of Energy ResourcesGovernment Administration

The Office of Commercial and Business AffairsGovernment Administration

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

U.S. Embassy in the PhilippinesGovernment Administration

U.S. Embassy TunisGovernment Administration

U.S. Embassy in the Dominican RepublicGovernment Administration

Embassy of the United States of America, LondonGovernment Relations

U.S. Embassy Montevideo, UruguayGovernment Administration

Bureau of Cyberspace and Digital PolicyInternational Affairs

US Embassy Bucharest, RomaniaGovernment Administration

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Consulate General MontréalGovernment Administration

U.S. Embassy OsloGovernment Administration

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

U.S. Embassy PanamaGovernment Administration

US Embassy ParisGovernment Administration

U.S. Mission to the European UnionGovernment Administration

U.S. Embassy in MexicoGovernment Administration

U.S. Department of State Industry LiaisonGovernment Administration

U.S. Embassy MadridGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

US BotschaftGovernment Administration

U.S. Consulate General MilanGovernment Administration

U.S. Mission to the UAEGovernment Administration

U.S. Consulate General BarcelonaGovernment Administration

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Embassy LuxembourgInternational Affairs

U.S. Consulate General FrankfurtGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

US Mission to the UN Agencies in RomeGovernment Administration

U.S. Mission, GenevaGovernment Administration

U.S. Mission ThailandGovernment Administration

U.S. Embassy JerusalemGovernment Administration

U.S. Consulate General - StrasbourgGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

National Museum of American DiplomacyGovernment Administration

Department of State - Office of the Science & Technology AdviserGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

U.S. Embassy in BulgariaGovernment Administration

U.S. Embassy TegucigalpaGovernment Administration

U.S. Embassy Gaborone, BotswanaGovernment Administration

U.S. Embassy Dar es SalaamGovernment Relations Services

U.S. Embassy JakartaGovernment Administration

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

Virtual Student Federal Service (VSFS)Government Administration

World Expo USA PavilionEvents Services

U.S. Embassy Islamabad, PakistanExecutive Offices

U.S. Embassy ViennaInternational Affairs

American-Austrian Entrepreneurship NetworkInternational Affairs

U.S. Embassy SwedenGovernment Relations Services

U.S. Mission to the OECDGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

US-BotschaftGovernment Administration

U.S. Embassy WarsawGovernment Administration

U.S. Embassy in BelgiumGovernment Administration

Bureau of Educational and Cultural Affairs (ECA) of the U.S. Department of StateGovernment Administration

U.S. Embassy YerevanGovernment Administration

U.S. Embassy to Bosnia and HerzegovinaGovernment Administration

U.S. Mission to the UN Agencies for Food and Agriculture in RomeGovernment Administration

U.S. Embassy in the Kingdom of DenmarkGovernment Relations Services

U.S. Consulate General DuesseldorfGovernment Administration

U.S. Embassy RigaGovernment Administration

U.S. Mission to ASEANGovernment Administration

U.S. Consulate General HamburgGovernment Administration

Embajada de los Estados Unidos en ArgentinaGovernment Relations

US Embassy The HagueGovernment Administration

International Visitor Leadership Program (IVLP)Government Administration

US Embassy LisbonGovernment Relations Services

U.S. Embassy in FinlandInternational Affairs

Diplomatic Security ServiceLaw Enforcement

DT - Diplomatic Technology at StateInternational Affairs

Under Secretary for Foreign Assistance, Humanitarian Affairs, and Religious FreedomGovernment Administration

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Embassy Santiago, ChileGovernment Relations Services

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

Loading…

U.S. Consulate General Hamilton, Bermuda Similar Companies

FDA

fda.gov

The Food and Drug Administration is an agency within the Department of Health and Human Services. The FDA is responsible for protecting the public health by ensuring the safety, efficacy, and security of human and veterinary drugs, biological products, and medical devices; and by ensuring the safety of our nation's food supply, cosmetics, and products that emit radiation. FDA also has responsibility for regulating the manufacturing, marketing, and distribution of tobacco products to protect the public health and to reduce tobacco use by minors. FDA is responsible for advancing the public health by helping to speed innovations that make medical products more effective, safer, and more affordable and by helping the public get the accurate, science-based information they need to use medical products and foods to maintain and improve their health. FDA also plays a significant role in the Nation's counterterrorism capability. FDA fulfills this responsibility by ensuring the security of the food supply and by fostering development of medical products to respond to deliberate and naturally emerging public health threats.

US Environmental Protection Agency (EPA)

cb epa.gov

U.S. Environmental Protection Agency’s (EPA) mission is to protect human health and the environment. EPA works to ensure that: - Americans have clean air, land and water; - National efforts to reduce environmental risks are based on the best available scientific information; - Federal laws protecting human health and the environment are administered and enforced fairly, effectively and as Congress intended; - Environmental stewardship is integral to U.S. policies concerning natural resources, human health, economic growth, energy, transportation, agriculture, industry, and international trade, and these factors are similarly considered in establishing environmental policy; - All parts of society--communities, individuals, businesses, and state, local and tribal governments--have access to accurate information sufficient to effectively participate in managing human health and environmental risks; - Contaminated lands and toxic sites are cleaned up by potentially responsible parties and revitalized; and - Chemicals in the marketplace are reviewed for safety. The agency was founded in 1970 and is headquartered in Washington, District of Columbia with ten additional regional headquarters offices (Boston, New York, Philadelphia, Atlanta, Chicago, Dallas, Kansas City, Denver, San Francisco, and Seattle) as well as more than a dozen laboratories, and other regional and programmatic offices.

U.S. Department of Homeland Security

dhs.gov

The Department of Homeland Security (DHS) has a vital mission: to secure the nation from the many threats we face. This requires the hard work of more than 260,000 employees in jobs that range from aviation and border security to emergency response, from cybersecurity analyst to chemical facility inspector. Our duties are wide-ranging, and our goal is clear - keeping America safe. Mission 1: Counter Terrorism and Homeland Security Threats Mission 2: Secure U.S. Borders and Approaches Mission 3: Secure Cyberspace and Critical Infrastructure Mission 4: Preserve and Uphold the Nation's Prosperity and Economic Security Mission 5: Strengthen Preparedness and Resilience Mission 6: Champion the DHS Workforce and Strengthen the Department We continually strengthen our partnerships with communities, first responders, law enforcement and government agencies - at the state, local, tribal, federal and international levels. We are accelerating the deployment of science, technology, and innovation in order to make America more secure. And we are becoming leaner, smarter, and more efficient, ensuring that every security resource is used as effectively as possible. Together, we are committed to relentless resilience, striving to prevent future attacks against the United States and our allies, responding decisively to natural and man-made disasters, and advancing American prosperity and economic security long into the future.

Etat de Vaud

vd.ch

Le canton de Vaud, c’est plus de 800 000 personnes vivant dans plus de 300 communes ! Rejoindre l’Administration cantonale vaudoise, c’est s’engager aux côtés de près de 40’000 personnes unies dans un même but : servir la population. Pourquoi nous suivre ? Dédiez votre quart d’heure vaudois aux opportunités de carrière et à l’info du canton ! Retrouvez les actualités vaudoises, les décisions du Grand Conseil et du Conseil d’Etat qui orientent les politiques publiques, les infos pratiques et les chiffres clés. Découvrez aussi des portraits des collaboratrices et collaborateurs au cœur de l’action et des offres d’emploi variées. Pourquoi nous rejoindre ? Nous rejoindre, c’est s’engager auprès d’un employeur fiable, éthique, équitable et tourné vers la durabilité. Parce que les envies, les attentes et les besoins évoluent tout au long d’une carrière, nous proposons des formations, des opportunités de développement de carrière ainsi qu’un équilibre entre vie privée et vie professionnelle. Vous aussi contribuez à l’actualité et à l’avenir du canton ! Retrouvez toutes nos offres d’emploi sur www.vd.ch/offres-demploi

INSS

inss.gov.br

O Instituto Nacional do Seguro Social (INSS) é uma autarquia do Governo Federal do Brasil que recebe as contribuições para a manutenção do Regime Geral da Previdência Social, sendo responsável pelo pagamento da aposentadoria, pensão por morte, auxílio-doença, auxílio-acidente, entre outros benefícios previstos em lei. O INSS trabalha junto com a Dataprev, empresa de tecnologia que faz o processamento de todos os dados da Previdência. Está vinculado ao Ministério da Previdência Social.

City of Los Angeles

linkpages.pro

The City of Los Angeles employs more than 45,000 people in a wide range of careers. Visit our website for information on current openings, including regular civil service positions, exempt and emergency appointment opportunities, in addition to internships! The City of Los Angeles is a Mayor-Council-Commission form of government, as originally adopted by voters of the City of Los Angeles, effective July 1, 1925, and reaffirmed by a new Charter effective July 1, 2000. A Mayor, City Controller, and City Attorney are elected by City residents every four years. Fifteen City Council members representing fifteen districts are elected by the people for four-year terms, for a maximum of two terms. Members of Commissions are generally appointed by the Mayor, subject to the approval of the City Council. General Managers of the various City departments are also appointed by the Mayor, subject to confirmation by the City Council. Most employees of the City are subject to the civil service provisions of the City Charter.

U.S. Department of Education

ed.gov

Our mission is to promote student achievement and preparation for global competitiveness by fostering educational excellence and ensuring equal access. ED is dedicated to: • Establishing policies on federal financial aid for education, and distributing as well as monitoring those funds. • Collecting data on America's schools and disseminating research. • Focusing national attention on key educational issues. • Prohibiting discrimination and ensuring equal access to education.

City of Amsterdam

amsterdam.nl

Working for Amsterdam means working for the most beautiful city in the world. Think of its rich history, the role Amsterdam plays internationally, and events such as Sail, Gay Pride and King’s Day. Of course everybody wants to visit Amsterdam, or work or live here. As you can probably imagine, working for Amsterdam is a challenge every day. How do we handle the growing bustle in the inner city? Or the high demand for new homes? Or obesity among young children? At the municipality of Amsterdam we work daily on challenging projects like these. Good for Amsterdam, good for you Each field of work, ranging from social affairs, customer and information services to environmental planning and economy, has its own challenges. You have to deal with the interests of many parties, often conflicting. Each day you will be looking for solutions that suit the needs of residents, entrepreneurs and visitors. This can make working for the city difficult sometimes, but it is what characterises the job. We work in an open, active, honest, ethical and fair manner, so that is what we would expect from you as well.

Västra Götalandsregionen

vgregion.se

Region Västra Götaland is governed by democratically elected politicians and with just over 50,000 employees is one of Sweden’s biggest employers. It is tasked with offering good healthcare and dental care and providing the prerequisites for good public health, a rich cultural life, a good environment, jobs, research, education and good communications. All together, these provide a foundation for sustainable growth in Västra Götaland. Koncernen Västra Götalandsregionen finns till för människorna i Västra Götaland och för allt som ligger invånarna nära: jobb, utbildning, hälso- och sjukvård, kultur och kommunikationer. Västra Götalandsregionen ska bidra till hälsa och trygghet i vardagen och för ett livskraftigt Västra Götaland nu och i framtiden. Vi har ett gemensamt ansvar att se till den enskilda människans behov och till regionmedborgarnas samlade behov för att uppnå visionen Det goda livet. Det gör vi inom våra tre ansvarsområden: Hälso- och sjukvård, tillväxt och utveckling och kollektivtrafik. Koncernen har drygt 50 000 medarbetare som arbetar inom framförallt hälso-och sjukvård men även inom kollektivtrafik, kulturverksamhet, skolor, folktandvård, lokal- och fastighetsförvaltning och folkhälsofrågor. Att arbeta i Västra Götalandsregionen gör avtryck – hos människor, i samhället och för framtiden. Lediga tjänster finns på: www.vgregion.se/jobb

Loading…

NEWS

U.S. Consulate General Hamilton, Bermuda CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 08, 2018 07:00 AM

Dembosky To Speak At Cyber Risk Conference

Luke Dembosky will headline the International Cyber Risk Management Conference which is set to take place from December 6-7 in Bermuda.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…