What is the official website of U.S. Consulate General Montréal ?

The official website of U.S. Consulate General Montréal is https://www.state.gov/tou.

What is U.S. Consulate General Montréal's cybersecurity risk score?

U.S. Consulate General Montréal has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has U.S. Consulate General Montréal experienced?

According to Rankiteo, U.S. Consulate General Montréal currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has U.S. Consulate General Montréal been affected by any supply chain cyber incidents ?

According to Rankiteo, U.S. Consulate General Montréal has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does U.S. Consulate General Montréal have SOC 2 Type 1 certification ?

According to Rankiteo, U.S. Consulate General Montréal is not certified under SOC 2 Type 1.

Does U.S. Consulate General Montréal have SOC 2 Type 2 certification ?

According to Rankiteo, U.S. Consulate General Montréal does not hold a SOC 2 Type 2 certification.

Does U.S. Consulate General Montréal comply with GDPR ?

According to Rankiteo, U.S. Consulate General Montréal is not listed as GDPR compliant.

Does U.S. Consulate General Montréal have PCI DSS certification ?

According to Rankiteo, U.S. Consulate General Montréal does not currently maintain PCI DSS compliance.

Does U.S. Consulate General Montréal comply with HIPAA ?

According to Rankiteo, U.S. Consulate General Montréal is not compliant with HIPAA regulations.

Does U.S. Consulate General Montréal have ISO 27001 certification ?

According to Rankiteo,U.S. Consulate General Montréal is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does U.S. Consulate General Montréal operate in ?

U.S. Consulate General Montréal operates primarily in the Government Administration industry.

How many employees does U.S. Consulate General Montréal have ?

U.S. Consulate General Montréal employs approximately 12 people worldwide.

Does U.S. Consulate General Montréal own any subsidiaries ?

U.S. Consulate General Montréal presently has no subsidiaries across any sectors.

How many LinkedIn followers does U.S. Consulate General Montréal have ?

U.S. Consulate General Montréal's official LinkedIn profile has approximately 3,359 followers.

What is the NAICS classification code for U.S. Consulate General Montréal ?

U.S. Consulate General Montréal is classified under the NAICS code 92, which corresponds to Public Administration.

Does U.S. Consulate General Montréal have a Crunchbase profile ?

No, U.S. Consulate General Montréal does not have a profile on Crunchbase.

Does U.S. Consulate General Montréal have a LinkedIn profile ?

Yes, U.S. Consulate General Montréal maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/us-consulate-general-montréal.

How many cybersecurity incidents has U.S. Consulate General Montréal experienced ?

As of August 10, 2026, Rankiteo reports that U.S. Consulate General Montréal has experienced 1 cybersecurity incidents.

How many peer or competitor companies does U.S. Consulate General Montréal have ?

U.S. Consulate General Montréal has an estimated 13,156 peer or competitor companies worldwide.

What types of cybersecurity incidents has U.S. Consulate General Montréal faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UCGM

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

U.S. Consulate General Montréal Vendor Cyber Rating & Cyber Score

state.gov

Add Your Compliance Badge

La première Agence consulaire américaine à Montréal fut inaugurée le 29 mai 1854 par l’Agent consulaire Canfield Dorwin du Vermont. Le bureau obtint le statut de Consulat général en juillet 1857, lorsque le bureau du Consul général des États-Unis dans les Provinces britanniques de l’Amérique du Nord fut transféré de Québec à Montréal en reconnaissance de l’importance commerciale croissante de la métropole. À cette époque, près de la moitié des échanges commerciaux entre le Canada et les États-Unis transitaient par le Port de Montréal. La Province de Québec fut l’hôte de nombreux bureaux et agences consulaires, incluant à Coaticook, Gaspé, Rimouski, Saint-Hyacinthe, Sherbrooke et Trois-Rivières. Cependant, la majorité de ces bureaux furent

UCGM A.I CyberSecurity Scoring

Scoring History

UCGM

U.S. Consulate General Montréal CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Consulate Gene...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

UCGM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UCGM

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Consulate General Montréal in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for U.S. Consulate General Montréal in 2026.

Incident Types UCGM vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Consulate General Montréal in 2026.

Incident History - UCGM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

U.S. Consulate General Montréal Subsidiaries

UCGM

Government Administration

Website: https://www.state.gov/tou

Company Size: 12

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Department of StateInternational Affairs

U.S. Embassy and Consulates in Brazil Government Administration

The Fulbright ProgramInternational Affairs

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

Foreign Service InstituteInternational Affairs

Embajada de Estados Unidos en ArgentinaRelaciones gubernamentales

U.S. Embassy Amman, JordanGovernment Relations Services

Ambassador Michael BattleGovernment Relations Services

U.S. Embassy in the Dominican RepublicGovernment Administration

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

U.S. Embassy ZambiaInternational Affairs

U.S. Embassy in the PhilippinesGovernment Administration

U.S. Embassy in AustraliaInternational Affairs

US Embassy ParisGovernment Administration

US Embassy Bucharest, RomaniaGovernment Administration

U.S. Embassy Santiago, ChileServicios de relaciones gubernamentales

U.S. Embassy in MexicoGovernment Administration

U.S. Embassy ManaguaGovernment Relations Services

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

U.S. Mission to the European UnionGovernment Administration

U.S. Embassy MadridGovernment Administration

U.S. Embassy OsloGovernment Administration

Under Secretary Jose W. FernandezInternational Affairs

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

U.S. Department of State - Bureau of Energy ResourcesGovernment Administration

Special Representative Sarah MorgenthauGovernment Administration

U.S. Consulate General MilanGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

U.S. Mission, GenevaGovernment Administration

U.S. Mission to the UAEGovernment Administration

U.S. Consulate General BarcelonaGovernment Administration

US BotschaftGovernment Administration

U.S. Embassy LuxembourgInternational Affairs

US Mission to the UN Agencies in RomeGovernment Administration

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Consulate General FrankfurtGovernment Administration

U.S. Consulate General - StrasbourgGovernment Administration

U.S. Embassy JerusalemGovernment Administration

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

U.S. Embassy in BulgariaGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

National Museum of American DiplomacyGovernment Administration

U.S. Mission ThailandGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

Department of State - Office of the Science & Technology AdviserGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

U.S. Embassy TegucigalpaGovernment Administration

U.S. Embassy JakartaGovernment Administration

U.S. Department of State - Virtual Student Federal Service (VSFS)Government Administration

Bureau of Cyberspace and Digital PolicyInternational Affairs

Diplomatic Security ServiceLaw Enforcement

U.S. Embassy South AfricaGovernment Relations Services

U.S. Embassy TunisGovernment Administration

U.S. Department of State Industry LiaisonGovernment Administration

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

U.S. Consulate General MumbaiGovernment Administration

U.S. Embassy in San SalvadorGovernment Administration

Embassy of the United States of America, LondonGovernment Relations

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

U.S. Embassy Montevideo, UruguayGovernment Administration

DT - Diplomatic Technology at StateInternational Affairs

U.S. Embassy PanamaGovernment Administration

U.S. Consulate General MontréalGovernment Administration

Loading…

U.S. Consulate General Montréal Similar Companies

City of Philadelphia

phila.gov

With a workforce of 30,000 people, and opportunities in 1,000 different job categories, the City of Philadelphia is one of the largest employers in Southeastern Pennsylvania. As an employer, we operate through the guiding principles of service, integrity, respect, accountability, collaboration, diversity and inclusion. We strive to effectively deliver services, to resolve the challenges facing our city, and to make Philadelphia a place where all of our residents have the opportunity to reach their potential. To learn more about job opportunities, visit www.phila.gov or follow #PHLCityJobs.

Helsingin kaupunki – Helsingfors stad – City of Helsinki

hel.fi

#MeTeemmeHelsingin Helsingin kaupunki on Suomen suurin työnantaja, jonka palveluksessa on lähes 39 000 ammattilaista ja asiantuntijaa. Helsingin kaupunki tarjoaa henkilöstölle monipuolisia, mielenkiintoisia ja yhteiskunnallisesti merkittäviä työtehtäviä, hyvät mahdollisuudet kehittymiseen, ammattitaitoiset työkaverit, työaikajoustot sekä kilpailukykyiset henkilöstöedut. Lisää kaupungista työnantajana: https://www.hel.fi/fi/avoimet-tyopaikat/miksi-toihin-kaupungille Helsingin kaupungin kotisivut: www.hel.fi *** Helsingfors stad, Finlands största arbetsgivare, har cirka 39 000 anställda. Dessa yrkesmänniskor och experter, som företräder ett antal olika branscher. Tack vare stadens och sektorernas storlek har de anställda mångsidiga, intressanta och samhälleligt viktiga arbetsuppgifter, goda möjligheter att utbilda sig och utvecklas, yrkeskunniga arbetskamrater, arbetstidsflexibilitet och konkurrenskraftiga personalförmåner. Mer om staden som arbetsgivare: https://www.hel.fi/sv/lediga-jobb/varfor-borja-arbeta-hos-staden Helsinki stad webbplats: www.hel.fi/sv *** The City of Helsinki is Finland’s biggest employer with 39 000 employees, who are professionals and experts of various fields. The large size of the City and the wide scope of the fields of employment give the City personnel versatile and socially important jobs, good opportunities for training and development on the job, skilled colleagues, flexible working hours and competitive personnel benefits. City as an employer: https://www.hel.fi/en/open-jobs/why-work-for-the-city City of Helsinki website: www.hel.fi/en

Council Careers Victoria

asn.au

Victorian local government jobs offer opportunities for people with diverse skills. The sector delivers more than 100 services and employs staff in the areas of health and community care, corporate and business support, engineering, planning and community development, and environment and emergency management. Local government offers you the opportunity to: • work directly with the community • work in any location across the state • be involved in on-going learning and development • negotiate flexible working arrangements • take part in employee health and recreation programs • undertake further study.

Land Niedersachsen

niedersachsen.de

Der Arbeitgeber Niedersachsen vereint über 2000 Dienststellen mit einem gemeinsamen Ziel: Wir gestalten das Leben in Niedersachsen verantwortungsvoll und zukunftsorientiert. Als der größte Arbeitgeber im Land Niedersachsen bieten wir sichere Arbeitsplätze, sinnstiftende Aufgaben und vielfältige Einsatzbereiche - von Verwaltung über Umwelt, Handwerk, Bildung oder IT bis hin zur Polizei. Wir suchen Menschen mit Engagement und dem Wunsch das Land Niedersachsen mitzugestalten. Ob Berufseinstieg, Quereinstieg oder Laufbahnentwicklung - bei uns findest du deine Perspektive. Vielfalt, Vereinbarkeit und Verlässlichkeit stehen bei uns an erster Stelle. Folge uns, um mehr über aktuelle Stellenangebote, Karrierewege und echte Einblicke in den niedersächsischen Landesdienst zu erfahren. Impressum: https://karriere.niedersachsen.de/impressum.html Datenschutz: https://karriere.niedersachsen.de/datenschutz.html

State of Maryland

jobapscloud.com

Maryland is on the path to becoming the best state in the nation. Referred to as “America in Miniature”, Maryland embodies the very spirit of the United States. Maryland is home to ethnic groups of every origin, just about every natural feature, and much like our country, opportunity! If you are interested in a rewarding career in public service, consider the following: Full-time employment Part-time employment Contractual work Internships Seasonal work Maryland, where your work truly matters… Join us! State Jobs: https://www.jobaps.com/md/ State of Maryland homepage: http://www.maryland.gov/Pages/default.aspx

State of Illinois

illinois.gov

The government of Illinois, under the Constitution of Illinois, has three branches of government: executive, legislative and judicial. The executive branch is split into several statewide elected offices, with the Governor as chief executive, and has numerous departments, agencies, boards and commissions. Legislative functions are granted to the General Assembly, composed of the 118-member House of Representatives and the 59-member Senate. The judiciary is composed of the Supreme Court and lower courts. The government of Illinois has numerous departments, agencies, boards and commissions, but the code departments, so called because they're established by the Civil Administrative Code of Illinois, provide most of the state's services: Department on Aging Department of Agriculture Department of Central Management Services Department of Children and Family Services Department of Commerce and Economic Opportunity Department of Corrections Department of Employment Security Department of Financial and Professional Regulation Department of Healthcare and Family Services Department of Human Rights Department of Human Services Department of Juvenile Justice Department of Labor Department of the Lottery Department of Natural Resources Department of Public Health Department of Revenue Department of State Police Department of Transportation Department of Veterans' Affairs

The Singapore Public Service

careers.gov.sg

The Singapore Public Service works with the elected Government and Singaporeans to forge a common vision of Singapore’s future and bring it into reality. We take pride in living out our values of integrity, service and excellence. Follow us for stories on how our public officers are contributing to Public Sector Transformation by: · Innovating to deliver even better policies and services for Singaporeans and Singapore · Planning ahead for future challenges · Building a flourishing public service workforce and resilient, future-ready organisations. Gain insights on how our officers are: · Making an impact and realising their aspirations through access to a diverse range of exciting roles · Growing and learning in their jobs every day through the purposeful work they do and the diverse development opportunities across the public service · Balancing their work-life priorities through flexible work arrangements and employee wellness programmes. Shape Singapore’s future and yours with us. Join us to make a difference today for tomorrow.

Government of Canada

canada.ca

The Government of Canada works on behalf of Canadians, both at home and abroad. Visit www.Canada.ca to learn more. Canada’s professional, non-partisan public service is among the best in the world, and many of its departments and agencies place in Canada’s Top 100 Employers year after year. If you are interested in joining our diverse and innovative team, visit www.jobs.gc.ca for information and opportunities. Terms: https://www.canada.ca/en/transparency/terms.html Le gouvernement du Canada œuvre au nom des Canadiens, tant au pays qu’à l’étranger. Consultez le site www.canada.ca pour en savoir plus. Impartiale et professionnelle, la fonction publique du Canada fait partie de l’élite mondiale. Bon nombre de ses ministères et organismes figurent parmi les 100 meilleurs employeurs du pays année après année. Vous aimeriez intégrer notre équipe diversifiée et innovante? Rendez-vous au www.emplois.gc.ca pour obtenir des informations et connaître les possibilités qui s’offrent à vous. Avis : https://www.canada.ca/fr/transparence/avis.html

U.S. Department of the Treasury

treasury.gov

The Treasury Department is the executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. The Department is responsible for a wide range of activities such as advising the President on economic and financial issues, encouraging sustainable economic growth, and fostering improved governance in financial institutions. The Department of the Treasury operates and maintains systems that are critical to the nation's financial infrastructure, such as the production of coin and currency, the disbursement of payments to the American public, revenue collection, and the borrowing of funds necessary to run the federal government. The Department works with other federal agencies, foreign governments, and international financial institutions to encourage global economic growth, raise standards of living, and to the extent possible, predict and prevent economic and financial crises. The Treasury Department also performs a critical and far-reaching role in enhancing national security by implementing economic sanctions against foreign threats to the U.S., identifying and targeting the financial support networks of national security threats, and improving the safeguards of our financial systems.

Loading…

NEWS

U.S. Consulate General Montréal CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 10, 2025 08:00 AM

Aero India 2025: United States to focus on ties with India, regional security

The United States will showcase advanced aircraft at Aero India, highlighting its growing defence partnership with India.

Read Article

September 03, 2024 07:00 AM

US Consulates in Mexico Halt TCN Visa Processing

All US consulates in Mexico announced that they have stopped accepting visa applications from third country nationals (TCNs) until further notice.

Read Article

July 19, 2024 07:00 AM

Day of disruptions, dashed plans for many Canadians after global tech outage | RCI

Cybersecurity firm CrowdStrike apologizes, assures clients outage is not due to a cyberattack.

Read Article

October 19, 2023 07:00 AM

Internship Spotlight: Eliza Petrean - US Consulate General Montreal

Internship Spotlight: Eliza Petrean - US Consulate General Montreal. Eliza Petrean drafting the cybersecurity event promotional flyer.

Read Article

September 19, 2023 07:00 AM

Marking a milestone: U.S. diplomatic mission to Halifax turns 190

The U.S. consulate in Halifax marks 190 years in the city.

Read Article

February 22, 2019 10:24 PM

News and updates | Manual on International Law Applicable to Military Uses of Outer Space

Since the launch of the MILAMOS Project in May 2016, tremendous progress has been made by the dozens of experts and contributors involved in the Project.

Read Article

December 04, 2018 08:00 AM

Israeli Cybersecurity Firm Accused Of Helping Saudis Spy On Khashoggi

The Israeli company NSO Group is accused of helping Saudi Arabia track dissidents, including slain columnist Jamal Khashoggi.

Read Article

December 03, 2018 08:00 AM

Khashoggi Friend Accuses Cyber Security Firm Of Helping Saudis Spy On Their Messages

A Saudi dissident based in Montreal, Canada, filed a lawsuit this week against the NSO Group, an Israeli cyber security firm.

Read Article

January 20, 2017 08:00 AM

Canadians traveling to inauguration turned away at U.S. border

Several Canadians traveling to attend either the inauguration of Donald Trump as president of the United States or a march planned for Saturday in Washington...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…