What is the official website of U.S. Embassy in Belgium ?

The official website of U.S. Embassy in Belgium is https://be.usembassy.gov/.

What is U.S. Embassy in Belgium's cybersecurity risk score?

U.S. Embassy in Belgium has an AI-generated cybersecurity risk score of 758 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has U.S. Embassy in Belgium experienced?

According to Rankiteo, U.S. Embassy in Belgium currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has U.S. Embassy in Belgium been affected by any supply chain cyber incidents ?

According to Rankiteo, U.S. Embassy in Belgium has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does U.S. Embassy in Belgium have SOC 2 Type 1 certification ?

According to Rankiteo, U.S. Embassy in Belgium is not certified under SOC 2 Type 1.

Does U.S. Embassy in Belgium have SOC 2 Type 2 certification ?

According to Rankiteo, U.S. Embassy in Belgium does not hold a SOC 2 Type 2 certification.

Does U.S. Embassy in Belgium comply with GDPR ?

According to Rankiteo, U.S. Embassy in Belgium is not listed as GDPR compliant.

Does U.S. Embassy in Belgium have PCI DSS certification ?

According to Rankiteo, U.S. Embassy in Belgium does not currently maintain PCI DSS compliance.

Does U.S. Embassy in Belgium comply with HIPAA ?

According to Rankiteo, U.S. Embassy in Belgium is not compliant with HIPAA regulations.

Does U.S. Embassy in Belgium have ISO 27001 certification ?

According to Rankiteo,U.S. Embassy in Belgium is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does U.S. Embassy in Belgium operate in ?

U.S. Embassy in Belgium operates primarily in the Government Administration industry.

How many employees does U.S. Embassy in Belgium have ?

U.S. Embassy in Belgium employs approximately 38 people worldwide.

Does U.S. Embassy in Belgium own any subsidiaries ?

U.S. Embassy in Belgium presently has no subsidiaries across any sectors.

How many LinkedIn followers does U.S. Embassy in Belgium have ?

U.S. Embassy in Belgium's official LinkedIn profile has approximately 5,349 followers.

What is the NAICS classification code for U.S. Embassy in Belgium ?

U.S. Embassy in Belgium is classified under the NAICS code 92, which corresponds to Public Administration.

Does U.S. Embassy in Belgium have a Crunchbase profile ?

No, U.S. Embassy in Belgium does not have a profile on Crunchbase.

Does U.S. Embassy in Belgium have a LinkedIn profile ?

Yes, U.S. Embassy in Belgium maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/us-embassy-in-belgium.

How many cybersecurity incidents has U.S. Embassy in Belgium experienced ?

As of August 10, 2026, Rankiteo reports that U.S. Embassy in Belgium has experienced 1 cybersecurity incidents.

How many peer or competitor companies does U.S. Embassy in Belgium have ?

U.S. Embassy in Belgium has an estimated 13,158 peer or competitor companies worldwide.

What types of cybersecurity incidents has U.S. Embassy in Belgium faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UEB

Boost Score +25 with badge (5 left)

758

/1000

Fair

783

/1000

Fair

U.S. Embassy in Belgium Vendor Cyber Rating & Cyber Score

usembassy.gov

Add Your Compliance Badge

The U.S. Embassy is the direct link between the U.S. Government and the Kingdom of Belgium. Connections between Belgium and the United States predate both the founding of the Republic and even the founding of Belgium as a nation-state. Our transatlantic relationship remains more important than ever – and as a fellow founding member of NATO, Belgium remains at the heart of our economic, political, and security alliances that have guaranteed our shared peace, security, and prosperity for more than 70 years. The Embassy is home to over 300 employees representing multiple agencies of the U.S. Government who work tirelessly to deepen the U.S.-Belgian relationship, cooperating with our Belgian partners on a wide range of issues to strengthen our

UEB A.I CyberSecurity Scoring

Scoring History

UEB

U.S. Embassy in Belgium CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Embassy in Bel...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

UEB Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UEB

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Embassy in Belgium in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for U.S. Embassy in Belgium in 2026.

Incident Types UEB vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Embassy in Belgium in 2026.

Incident History - UEB (X = Date, Y = Severity)

Loading…

SUBSIDIARY

U.S. Embassy in Belgium Subsidiaries

UEB

Government Administration

Website: https://be.usembassy.gov/

Company Size: 201-500 employees

U.S. Department of StateInternational Affairs

The Fulbright ProgramInternational Affairs

U.S. Embassy and Consulates in BrazilGovernment Administration

Diplomatic Security ServiceLaw Enforcement

Ambassador Michael BattleGovernment Relations Services

US Mission to the UN Agencies in RomeGovernment Administration

US BotschaftGovernment Administration

U.S. Embassy ManaguaGovernment Relations Services

U.S. Embassy Amman, JordanGovernment Relations Services

U.S. Embassy ZambiaInternational Affairs

U.S. Embassy in San SalvadorGovernment Administration

Foreign Service InstituteInternational Affairs

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

U.S. Embassy JakartaGovernment Administration

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

Embajada de Estados Unidos en ArgentinaRelaciones gubernamentales

U.S. Embassy South AfricaGovernment Relations Services

U.S. Consulate General MumbaiGovernment Administration

U.S. Embassy in AustraliaInternational Affairs

U.S. Embassy Dar es SalaamGovernment Relations Services

U.S. Embassy PanamaGovernment Administration

U.S. Embassy in the Dominican RepublicGovernment Administration

Embassy of the United States of America, LondonGovernment Relations

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

DT - Diplomatic Technology at StateInternational Affairs

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

International Visitor Leadership Program (IVLP)Government Administration

U.S. Embassy Montevideo, UruguayGovernment Administration

U.S. Department of State - Virtual Student Federal Service (VSFS)Government Administration

Bureau of Cyberspace and Digital PolicyInternational Affairs

Under Secretary Jose W. FernandezInternational Affairs

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

U.S. Department of State - Bureau of Energy ResourcesGovernment Administration

U.S. Department of State - Bureau of Energy Resources Central Asia Energy Fellows ProgramGovernment Administration

Special Representative Sarah MorgenthauGovernment Administration

U.S. Embassy TunisGovernment Administration

US Embassy ParisGovernment Administration

U.S. Embassy in the PhilippinesGovernment Administration

World Expo USA PavilionEvents Services

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

US Embassy Bucharest, RomaniaGovernment Administration

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

U.S. Mission to the European UnionGovernment Administration

U.S. Embassy in MexicoGovernment Administration

U.S. Embassy MadridGovernment Administration

U.S. Embassy Santiago, ChileServicios de relaciones gubernamentales

U.S. Department of State Industry LiaisonGovernment Administration

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Consulate General MontréalGovernment Administration

U.S. Embassy OsloGovernment Administration

U.S. Mission, GenevaGovernment Administration

U.S. Mission to the UAEGovernment Administration

US-BotschaftGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

U.S. Consulate General MilanGovernment Administration

U.S. Mission to the UN Agencies for Food and Agriculture in RomeGovernment Administration

U.S. Embassy LuxembourgInternational Affairs

U.S. Consulate General BarcelonaGovernment Administration

U.S. Embassy in BulgariaGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Consulate General FrankfurtGovernment Administration

U.S. Embassy JerusalemGovernment Administration

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

U.S. Consulate General - StrasbourgGovernment Administration

National Museum of American DiplomacyGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

U.S. Mission ThailandGovernment Administration

Department of State - Office of the Science & Technology AdviserGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

U.S. Embassy TegucigalpaGovernment Administration

Office of the AUKUS Senior AdvisorGovernment Administration

Loading…

U.S. Embassy in Belgium Similar Companies

State of Maryland

jobapscloud.com

Maryland is on the path to becoming the best state in the nation. Referred to as “America in Miniature”, Maryland embodies the very spirit of the United States. Maryland is home to ethnic groups of every origin, just about every natural feature, and much like our country, opportunity! If you are interested in a rewarding career in public service, consider the following: Full-time employment Part-time employment Contractual work Internships Seasonal work Maryland, where your work truly matters… Join us! State Jobs: https://www.jobaps.com/md/ State of Maryland homepage: http://www.maryland.gov/Pages/default.aspx

Ministry of Health Saudi Arabia

moh.gov.sa

The Ministry of Health (MOH), by way of its objectives, policies and projects included in this strategy, seeks to accomplish a promising future vision; namely, delivering best-quality integrated and comprehensive healthcare services. Carrying health conditions or health status of Saudi inhabitants to the best and highest possible level, in terms of justice and equality in providing healthcare, and in terms of effectiveness and the possibility of incurring the financial burden of the treatment and healthcare. In doing so, the MOH takes as its target meeting citizens’ aspirations in this regard, by providing them with high-quality general and specialized health services, and covering all the population with these services. Creating a sole and exclusive entity to formulate health policies including health insurance services, etc. (such as operating the recently established Health Services Council.) Adopting a public and national health strategy which focuses of the main morbidity burdens; including non-communicable diseases, nutrition, reproductive health, smoking (tobacco-use), AIDS, traffic accidents, and injuries. The system must have an effective and fair method for estimating risks and benefits. Working to diversify sources of revenues to finance the system effectively. These sources must include also public revenues and insurance premiums, in addition to the equally allocated costs and taxes.

U.S. Department of Homeland Security

dhs.gov

The Department of Homeland Security (DHS) has a vital mission: to secure the nation from the many threats we face. This requires the hard work of more than 260,000 employees in jobs that range from aviation and border security to emergency response, from cybersecurity analyst to chemical facility inspector. Our duties are wide-ranging, and our goal is clear - keeping America safe. Mission 1: Counter Terrorism and Homeland Security Threats Mission 2: Secure U.S. Borders and Approaches Mission 3: Secure Cyberspace and Critical Infrastructure Mission 4: Preserve and Uphold the Nation's Prosperity and Economic Security Mission 5: Strengthen Preparedness and Resilience Mission 6: Champion the DHS Workforce and Strengthen the Department We continually strengthen our partnerships with communities, first responders, law enforcement and government agencies - at the state, local, tribal, federal and international levels. We are accelerating the deployment of science, technology, and innovation in order to make America more secure. And we are becoming leaner, smarter, and more efficient, ensuring that every security resource is used as effectively as possible. Together, we are committed to relentless resilience, striving to prevent future attacks against the United States and our allies, responding decisively to natural and man-made disasters, and advancing American prosperity and economic security long into the future.

USDA

usda.gov

The United States Department of Agriculture is the United States federal executive department responsible for developing and executing U.S. federal government policy on farming, agriculture, and food. It aims to meet the needs of farmers and ranchers, promote agricultural trade and production, work to assure food safety, protect natural resources, foster rural communities and end hunger in the United States and abroad.

Internal Revenue Service

irs.gov

Welcome to the Internal Revenue Service’s official LinkedIn account. Here, you will find the latest and greatest news and updates for taxpayers to help them understand and meet their tax responsibilities. Also, this is a place to learn about a meaningful career with the IRS. Check out the tabs above to learn more about us and view job openings. The U.S. government does not promote or endorse any non-government or commercial content appearing on this page. This service is operated by a third party and not an official government website. The IRS strongly discourages you from providing personally identifiable information. Read our privacy policy at www.irs.gov/privacy

Swiss Federal Administration

admin.ch

Seven departments, the Federal Chancellery and around 70 administrative units make up the Federal Administration. With around 38,000 employees, we are one of the largest employers in Switzerland. Everyone who works for the Federal Administration actively contributes to Switzerland's well-being and shapes the future of our country. We are as varied as Switzerland itself – we stand for active diversity and inclusion. Our employees come from all over the country and the Federal Administration is present throughout Switzerland. With us, you can expect diverse, challenging and unique tasks in all kinds of subject areas and specialist fields. As a modern employer, the Federal Administration enables its employees to combine work and private life with flexible forms of work and promotes their personal development with practical training and continuing professional development. * Vacancies in the administrative units can be found on their LinkedIn pages or at stelle.admin.ch.

City of Cape Town

capetown.gov.za

Cape Town, or the Mother City, is South Africa’s oldest city, its second-most populous and the legislative capital. It is made up of a diverse population, a rich history, world-famous tourist attractions and an exciting calendar of international and local events. More than 231 councillors and 26 225 staff serve 4 million residents across a sprawling and cosmopolitan metro of 2 500 square kilometres. The City provides all the services normally associated with a full-service municipality, such as water, electricity, waste removal, sanitation, new infrastructure, roads, public spaces, facilities, housing developments, the upgrade of informal settlements and existing infrastructure, clinics and more. To meet the current and future needs of its residents, the City of Cape Town has formulated strategies and policies to guide development and growth. Central to these is the Integrated Development Plan (IDP), which is a five-year plan that informs the City’s policy and budget decisions. The City’s strong sense of community makes it one of the best places to live, work and raise a family. We offer rewarding career opportunities, great benefits and competitive salaries. New opportunities are posted at www.capetown.gov.za/careers.

Ontario Government | Gouvernement de l’Ontario

ontario.ca

Ontario Government | Gouvernement de l’Ontario The Ontario Government works to serve the public interest and uphold the public trust by providing Ministers with objective advice and expert guidance. The Ontario Public Service carries out the decisions and policies of the elected government with integrity and accountability and administers public services to the highest professional standards. Le gouvernement de l’Ontario sert l’intérêt public et conserve la confiance du public en fournissant aux ministres des conseils objectifs et spécialisés. La fonction publique de l’Ontario applique les décisions et les politiques du gouvernement élu. En respectant le principe de reddition des comptes et avec intégrité, elle administre les services à la population selon les normes professionnelles les plus rigoureuses.

Nav

nav.no

Nav er en viktig del av sikkerhetsnettet i velferdsstaten. Vi skal bidra til at flere kommer i arbeid og færre går på stønad, og samtidig sørge for at de som trenger det er sikra inntekt og økonomisk trygghet gjennom rett pengestøtte til rett tid. For å løse dette samfunnsoppdraget forvalter Nav om lag en tredel av statsbudsjettet, gjennom ordninger som arbeidsrettede tiltak, dagpenger, arbeidsavklaringspenger, sykepenger, pensjon, økonomisk sosialhjelp, foreldrepenger, barnetrygd og kontantstøtte. Nav tilbyr tjenester, ytelser og stønader til både privatpersoner og arbeidsgivere. For å sikre helhetlige tjenester, samarbeider vi tett med arbeidslivet, kommune-, helse- og utdanningssektoren, andre statlige virksomheter og frivillige aktører.

Loading…

NEWS

U.S. Embassy in Belgium CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 18, 2025 07:00 AM

Protestors pressure EU to stop burning of US-owned contraceptives

Women's rights groups want the EU to act, but the European Commission has said only Belgium can intervene.

Read Article

September 08, 2025 07:00 AM

U.S. Embassy Jakarta Hosts Cybersecurity Workshop to Secure Strategic Ports

Jakarta, Indonesia – The U.S. Embassy Jakarta hosted a four-day cybersecurity workshop in Jakarta September 1-4, focusing on securing...

Read Article

June 17, 2025 07:00 AM

Namibia and the United States Deepen Collaboration on Cybersecurity and Digital Innovation

Windhoek, Namibia – June 17, 2025 – On June 10, the U.S. Embassy in Windhoek hosted a panel discussion under the theme “Driving Namibia and the United...

Read Article

June 13, 2025 07:00 AM

Cyber Security Awareness Session with the Caribbean Community for Retired Persons (CCRP)

US Embassy Kingston hosted an impactful Cyber Security Awareness Session with the Caribbean Community for Retired Persons (CCRP) at the Robeson American Center.

Read Article

May 23, 2025 07:00 AM

Philippines to Host YSEALI Bootcamp for Southeast Asian Content Creators

Manila, May 23, 2025—The U.S. Embassy in the Philippines is hosting a Young Southeast Asian Leaders Initiative (YSEALI) regional workshop in...

Read Article

May 16, 2025 07:00 AM

Internship Programme

NATO offers six-month internships to applicants in the third year of their university studies, or recent graduates of a bachelor or master's programme.

Read Article

May 09, 2025 07:00 AM

Ambassador Duncan launched cybersecurity workshop

Ambassador William H. Duncan kicked off the cybersecurity workshop organized by Fortinet, a company specialized in cybersecurity, and the Commercial Office of...

Read Article

April 30, 2025 07:00 AM

U.S. Embassy Advances Albanian Armed Forces’ Cyber Defense Capability

This April, the U.S. Embassy and U.S. European Command delivered a $940,000 deployable cyber defense kit and certification training to...

Read Article

April 29, 2025 07:00 AM

United States and Guatemala Identify Cyber Espionage Threats Linked to China in Joint Security Review.

“The Government of Guatemala in collaboration with the U.S. Department of Defense recently completed a joint cyber security review of...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…