What is the official website of U.S. Embassy in Belgium ?

The official website of U.S. Embassy in Belgium is https://be.usembassy.gov/.

What is U.S. Embassy in Belgium's cybersecurity risk score?

U.S. Embassy in Belgium has an AI-generated cybersecurity risk score of 758 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has U.S. Embassy in Belgium experienced?

According to Rankiteo, U.S. Embassy in Belgium currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has U.S. Embassy in Belgium been affected by any supply chain cyber incidents ?

According to Rankiteo, U.S. Embassy in Belgium has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does U.S. Embassy in Belgium have SOC 2 Type 1 certification ?

According to Rankiteo, U.S. Embassy in Belgium is not certified under SOC 2 Type 1.

Does U.S. Embassy in Belgium have SOC 2 Type 2 certification ?

According to Rankiteo, U.S. Embassy in Belgium does not hold a SOC 2 Type 2 certification.

Does U.S. Embassy in Belgium comply with GDPR ?

According to Rankiteo, U.S. Embassy in Belgium is not listed as GDPR compliant.

Does U.S. Embassy in Belgium have PCI DSS certification ?

According to Rankiteo, U.S. Embassy in Belgium does not currently maintain PCI DSS compliance.

Does U.S. Embassy in Belgium comply with HIPAA ?

According to Rankiteo, U.S. Embassy in Belgium is not compliant with HIPAA regulations.

Does U.S. Embassy in Belgium have ISO 27001 certification ?

According to Rankiteo,U.S. Embassy in Belgium is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does U.S. Embassy in Belgium operate in ?

U.S. Embassy in Belgium operates primarily in the Government Administration industry.

How many employees does U.S. Embassy in Belgium have ?

U.S. Embassy in Belgium employs approximately 38 people worldwide.

Does U.S. Embassy in Belgium own any subsidiaries ?

U.S. Embassy in Belgium presently has no subsidiaries across any sectors.

How many LinkedIn followers does U.S. Embassy in Belgium have ?

U.S. Embassy in Belgium's official LinkedIn profile has approximately 5,349 followers.

What is the NAICS classification code for U.S. Embassy in Belgium ?

U.S. Embassy in Belgium is classified under the NAICS code 92, which corresponds to Public Administration.

Does U.S. Embassy in Belgium have a Crunchbase profile ?

No, U.S. Embassy in Belgium does not have a profile on Crunchbase.

Does U.S. Embassy in Belgium have a LinkedIn profile ?

Yes, U.S. Embassy in Belgium maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/us-embassy-in-belgium.

How many cybersecurity incidents has U.S. Embassy in Belgium experienced ?

As of August 11, 2026, Rankiteo reports that U.S. Embassy in Belgium has experienced 1 cybersecurity incidents.

How many peer or competitor companies does U.S. Embassy in Belgium have ?

U.S. Embassy in Belgium has an estimated 13,158 peer or competitor companies worldwide.

What types of cybersecurity incidents has U.S. Embassy in Belgium faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UEB

Boost Score +25 with badge (5 left)

758

/1000

Fair

783

/1000

Fair

U.S. Embassy in Belgium Vendor Cyber Rating & Cyber Score

usembassy.gov

Add Your Compliance Badge

The U.S. Embassy is the direct link between the U.S. Government and the Kingdom of Belgium. Connections between Belgium and the United States predate both the founding of the Republic and even the founding of Belgium as a nation-state. Our transatlantic relationship remains more important than ever – and as a fellow founding member of NATO, Belgium remains at the heart of our economic, political, and security alliances that have guaranteed our shared peace, security, and prosperity for more than 70 years. The Embassy is home to over 300 employees representing multiple agencies of the U.S. Government who work tirelessly to deepen the U.S.-Belgian relationship, cooperating with our Belgian partners on a wide range of issues to strengthen our

UEB A.I CyberSecurity Scoring

Scoring History

UEB

U.S. Embassy in Belgium CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Embassy in Bel...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

UEB Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UEB

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Embassy in Belgium in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for U.S. Embassy in Belgium in 2026.

Incident Types UEB vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Embassy in Belgium in 2026.

Incident History - UEB (X = Date, Y = Severity)

Loading…

SUBSIDIARY

U.S. Embassy in Belgium Subsidiaries

UEB

Government Administration

Website: https://be.usembassy.gov/

Company Size: 201-500 employees

U.S. Department of StateInternational Affairs

The Fulbright ProgramInternational Affairs

U.S. Embassy and Consulates in BrazilGovernment Administration

Diplomatic Security ServiceLaw Enforcement

Ambassador Michael BattleGovernment Relations Services

US Mission to the UN Agencies in RomeGovernment Administration

US BotschaftGovernment Administration

U.S. Embassy ManaguaGovernment Relations Services

U.S. Embassy Amman, JordanGovernment Relations Services

U.S. Embassy ZambiaInternational Affairs

U.S. Embassy in San SalvadorGovernment Administration

Foreign Service InstituteInternational Affairs

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

U.S. Embassy JakartaGovernment Administration

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

Embajada de Estados Unidos en ArgentinaRelaciones gubernamentales

U.S. Embassy South AfricaGovernment Relations Services

U.S. Consulate General MumbaiGovernment Administration

U.S. Embassy in AustraliaInternational Affairs

U.S. Embassy Dar es SalaamGovernment Relations Services

U.S. Embassy PanamaGovernment Administration

U.S. Embassy in the Dominican RepublicGovernment Administration

Embassy of the United States of America, LondonGovernment Relations

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

DT - Diplomatic Technology at StateInternational Affairs

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

International Visitor Leadership Program (IVLP)Government Administration

U.S. Embassy Montevideo, UruguayGovernment Administration

U.S. Department of State - Virtual Student Federal Service (VSFS)Government Administration

Bureau of Cyberspace and Digital PolicyInternational Affairs

Under Secretary Jose W. FernandezInternational Affairs

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

U.S. Department of State - Bureau of Energy ResourcesGovernment Administration

U.S. Department of State - Bureau of Energy Resources Central Asia Energy Fellows ProgramGovernment Administration

Special Representative Sarah MorgenthauGovernment Administration

U.S. Embassy TunisGovernment Administration

US Embassy ParisGovernment Administration

U.S. Embassy in the PhilippinesGovernment Administration

World Expo USA PavilionEvents Services

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

US Embassy Bucharest, RomaniaGovernment Administration

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

U.S. Mission to the European UnionGovernment Administration

U.S. Embassy in MexicoGovernment Administration

U.S. Embassy MadridGovernment Administration

U.S. Embassy Santiago, ChileServicios de relaciones gubernamentales

U.S. Department of State Industry LiaisonGovernment Administration

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Consulate General MontréalGovernment Administration

U.S. Embassy OsloGovernment Administration

U.S. Mission, GenevaGovernment Administration

U.S. Mission to the UAEGovernment Administration

US-BotschaftGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

U.S. Consulate General MilanGovernment Administration

U.S. Mission to the UN Agencies for Food and Agriculture in RomeGovernment Administration

U.S. Embassy LuxembourgInternational Affairs

U.S. Consulate General BarcelonaGovernment Administration

U.S. Embassy in BulgariaGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Consulate General FrankfurtGovernment Administration

U.S. Embassy JerusalemGovernment Administration

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

U.S. Consulate General - StrasbourgGovernment Administration

National Museum of American DiplomacyGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

U.S. Mission ThailandGovernment Administration

Department of State - Office of the Science & Technology AdviserGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

U.S. Embassy TegucigalpaGovernment Administration

Office of the AUKUS Senior AdvisorGovernment Administration

Loading…

U.S. Embassy in Belgium Similar Companies

State of Illinois

illinois.gov

The government of Illinois, under the Constitution of Illinois, has three branches of government: executive, legislative and judicial. The executive branch is split into several statewide elected offices, with the Governor as chief executive, and has numerous departments, agencies, boards and commissions. Legislative functions are granted to the General Assembly, composed of the 118-member House of Representatives and the 59-member Senate. The judiciary is composed of the Supreme Court and lower courts. The government of Illinois has numerous departments, agencies, boards and commissions, but the code departments, so called because they're established by the Civil Administrative Code of Illinois, provide most of the state's services: Department on Aging Department of Agriculture Department of Central Management Services Department of Children and Family Services Department of Commerce and Economic Opportunity Department of Corrections Department of Employment Security Department of Financial and Professional Regulation Department of Healthcare and Family Services Department of Human Rights Department of Human Services Department of Juvenile Justice Department of Labor Department of the Lottery Department of Natural Resources Department of Public Health Department of Revenue Department of State Police Department of Transportation Department of Veterans' Affairs

Københavns Kommune

kk.dk

Københavns Kommune er Danmarks største arbejdsplads med ca. 45.000 medarbejdere. Vi udvikler hovedstaden og servicerer over 500.000 københavnere. Vores mål er at fastholde og udvikle København som en af verdens bedste byer at bo i – og skabe øget vækst gennem viden, innovation og beskæftigelse. Find dit næste job her eller på www.kk.dk/job På vores karrieresite www.kk.dk/job kan du bl.a. se alle vores ledige stillinger og tilmelde dig vores jobagent. Her kan du også læse om vores medarbejdergoder.

INSS

inss.gov.br

O Instituto Nacional do Seguro Social (INSS) é uma autarquia do Governo Federal do Brasil que recebe as contribuições para a manutenção do Regime Geral da Previdência Social, sendo responsável pelo pagamento da aposentadoria, pensão por morte, auxílio-doença, auxílio-acidente, entre outros benefícios previstos em lei. O INSS trabalha junto com a Dataprev, empresa de tecnologia que faz o processamento de todos os dados da Previdência. Está vinculado ao Ministério da Previdência Social.

Ministère de l'Éducation nationale

gouv.fr

Page officielle du ministère de l'Éducation nationale. Retrouvez toute l'information sur www.education.gouv.fr, twitter.com/education_gouv, facebook.com/education.gouv et dans nos lettres d'informations (bulletin hebdo et lettre education.gouv.fr). ------------------------------------------------------------- Le ministère de l'Éducation nationale est en charge de la préparation et de la mise en œuvre de la politique du Gouvernement concernant la jeunesse, au sein et en dehors du milieu scolaire, et l'accès de chacun aux savoirs et au développement de l'enseignement pré-élémentaire, élémentaire et secondaire. Ses compétences principales s’exercent dans : la définition des voies de formation, la fixation des programmes nationaux, l'organisation et le contenu des enseignements ; la définition et la délivrance des diplômes nationaux et la collation des grades et titres universitaires ; / le recrutement et la gestion des personnels qui dépendent de sa responsabilité ; / la répartition des moyens qu'il consacre à l'éducation, afin d'assurer en particulier l'égalité d'accès au service public ; le contrôle et l'évaluation des politiques éducatives, en vue d'assurer la cohérence d'ensemble du système éducatif. L'administration de l'Éducation nationale est présente dans chaque région et dans chaque département : ce sont les services déconcentrés du ministère de l'Éducation nationale. Son organisation s’articule autour de 17 régions académiques, 30 académies et 97 directions des services départementaux de l'Éducation nationale. Les domaines où s'exercent les métiers dans l'éducation nationale sont multiples : l'enseignement avec plus de 80% des effectifs, l'éducation et l'orientation mais aussi la santé et le social, l'administration, la comptabilité, la gestion et les finances, la technique, les systèmes d’information, la recherche et formation, les bibliothèques, l'encadrement (direction et inspection).

United States Postal Service

usps.com

As the United States Postal Service continues its evolution as a forward-thinking, fast-acting company capable of providing quality products and services for its customers, it continues to remember and celebrate its roots as the first national network of communications that literally bound a nation together. Ours is a proud heritage built on a simple yet profound mission: Bind the nation together. Connect every American, every door, every business, everywhere through the simple act of delivering mail and packages. This idea of universal service is at the heart of the $1.4 trillion industry that employs more than 7.5 million people and drives commerce, plays an integral part in every American community and remains the greatest value of any post in the world. The Postal Service delivers more mail to more addresses in a larger geographical area than any other post in the world. The Postal Service delivers to more than 157 million addresses in every state, city and town in this country. Everyone living in the United States and its territories has access to postal products and services and pays the same postage regardless of their location. The Postal Service receives no tax dollars for operating expenses and relies on the sale of postage, products and services to fund its operations. Facebook: www.facebook.com/usps Twitter: www.twitter.com/usps Instagram: www.instagram.com/uspostalservice Pinterest: www.pinterest.com/uspsstamps YouTube: www.youtube.com/usps Corporate Blog: www.uspsblog.com This profile, while affiliated with the U.S. Postal Service®, is not an official customer service page. Please use one of the methods described below to receive assistance. Get help on twitter @USPSHelp or call 800-275-8777or go to go.usa.gov/help Thank you

U.S. Department of Education

ed.gov

Our mission is to promote student achievement and preparation for global competitiveness by fostering educational excellence and ensuring equal access. ED is dedicated to: • Establishing policies on federal financial aid for education, and distributing as well as monitoring those funds. • Collecting data on America's schools and disseminating research. • Focusing national attention on key educational issues. • Prohibiting discrimination and ensuring equal access to education.

USDA

usda.gov

The United States Department of Agriculture is the United States federal executive department responsible for developing and executing U.S. federal government policy on farming, agriculture, and food. It aims to meet the needs of farmers and ranchers, promote agricultural trade and production, work to assure food safety, protect natural resources, foster rural communities and end hunger in the United States and abroad.

State of Tennessee

tn.gov

State government is the largest employer in Tennessee, with approximately 43,500 employees in the three branches of government. The State of Tennessee has approximately 1,300 different job classifications in areas such as administrative, health services, historic preservation, legal, agriculture, counseling, and medical. If you are interested in becoming a data scientist, attorney, nurse, wildlife officer, physician, education consultant, trooper, computer programmer or an epidemiologist, explore all of the job opportunities the State of Tennessee has to offer. The State is looking to recruit, retain, and reward a talented workforce through the implementation of a merit-based pay system. Stop back often for news, updates and opportunities -- thanks for visiting!

U.S. Census Bureau

census.gov

The Census Bureau serves as the nation’s leading provider of quality data about its people and economy. We have been headquartered in Suitland, Maryland since 1942, and currently employ about 4,285 staff members. We are part of the U.S. Department of Commerce and overseen by the Economics and Statistics Administration (ESA). We honor privacy, protect confidentiality, share our expertise globally, and conduct our work openly. We are guided on this mission by our strong and capable workforce, our readiness to innovate, and our abiding commitment to our customers. View our comment policy: https://www.census.gov/about/contact-us/comment-policy.html View our privacy policy: https://www.census.gov/about/policies/privacy/privacy-policy.html

Loading…

NEWS

U.S. Embassy in Belgium CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 18, 2025 07:00 AM

Protestors pressure EU to stop burning of US-owned contraceptives

Women's rights groups want the EU to act, but the European Commission has said only Belgium can intervene.

Read Article

September 08, 2025 07:00 AM

U.S. Embassy Jakarta Hosts Cybersecurity Workshop to Secure Strategic Ports

Jakarta, Indonesia – The U.S. Embassy Jakarta hosted a four-day cybersecurity workshop in Jakarta September 1-4, focusing on securing...

Read Article

June 17, 2025 07:00 AM

Namibia and the United States Deepen Collaboration on Cybersecurity and Digital Innovation

Windhoek, Namibia – June 17, 2025 – On June 10, the U.S. Embassy in Windhoek hosted a panel discussion under the theme “Driving Namibia and the United...

Read Article

June 13, 2025 07:00 AM

Cyber Security Awareness Session with the Caribbean Community for Retired Persons (CCRP)

US Embassy Kingston hosted an impactful Cyber Security Awareness Session with the Caribbean Community for Retired Persons (CCRP) at the Robeson American Center.

Read Article

May 23, 2025 07:00 AM

Philippines to Host YSEALI Bootcamp for Southeast Asian Content Creators

Manila, May 23, 2025—The U.S. Embassy in the Philippines is hosting a Young Southeast Asian Leaders Initiative (YSEALI) regional workshop in...

Read Article

May 16, 2025 07:00 AM

Internship Programme

NATO offers six-month internships to applicants in the third year of their university studies, or recent graduates of a bachelor or master's programme.

Read Article

May 09, 2025 07:00 AM

Ambassador Duncan launched cybersecurity workshop

Ambassador William H. Duncan kicked off the cybersecurity workshop organized by Fortinet, a company specialized in cybersecurity, and the Commercial Office of...

Read Article

April 30, 2025 07:00 AM

U.S. Embassy Advances Albanian Armed Forces’ Cyber Defense Capability

This April, the U.S. Embassy and U.S. European Command delivered a $940,000 deployable cyber defense kit and certification training to...

Read Article

April 29, 2025 07:00 AM

United States and Guatemala Identify Cyber Espionage Threats Linked to China in Joint Security Review.

“The Government of Guatemala in collaboration with the U.S. Department of Defense recently completed a joint cyber security review of...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…