What is the official website of U.S. Embassy Montevideo, Uruguay ?

The official website of U.S. Embassy Montevideo, Uruguay is https://uy.usembassy.gov/es/.

What is U.S. Embassy Montevideo, Uruguay's cybersecurity risk score?

U.S. Embassy Montevideo, Uruguay has an AI-generated cybersecurity risk score of 758 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has U.S. Embassy Montevideo, Uruguay experienced?

According to Rankiteo, U.S. Embassy Montevideo, Uruguay currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has U.S. Embassy Montevideo, Uruguay been affected by any supply chain cyber incidents ?

According to Rankiteo, U.S. Embassy Montevideo, Uruguay has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does U.S. Embassy Montevideo, Uruguay have SOC 2 Type 1 certification ?

According to Rankiteo, U.S. Embassy Montevideo, Uruguay is not certified under SOC 2 Type 1.

Does U.S. Embassy Montevideo, Uruguay have SOC 2 Type 2 certification ?

According to Rankiteo, U.S. Embassy Montevideo, Uruguay does not hold a SOC 2 Type 2 certification.

Does U.S. Embassy Montevideo, Uruguay comply with GDPR ?

According to Rankiteo, U.S. Embassy Montevideo, Uruguay is not listed as GDPR compliant.

Does U.S. Embassy Montevideo, Uruguay have PCI DSS certification ?

According to Rankiteo, U.S. Embassy Montevideo, Uruguay does not currently maintain PCI DSS compliance.

Does U.S. Embassy Montevideo, Uruguay comply with HIPAA ?

According to Rankiteo, U.S. Embassy Montevideo, Uruguay is not compliant with HIPAA regulations.

Does U.S. Embassy Montevideo, Uruguay have ISO 27001 certification ?

According to Rankiteo,U.S. Embassy Montevideo, Uruguay is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does U.S. Embassy Montevideo, Uruguay operate in ?

U.S. Embassy Montevideo, Uruguay operates primarily in the Government Administration industry.

How many employees does U.S. Embassy Montevideo, Uruguay have ?

U.S. Embassy Montevideo, Uruguay employs approximately 40 people worldwide.

Does U.S. Embassy Montevideo, Uruguay own any subsidiaries ?

U.S. Embassy Montevideo, Uruguay presently has no subsidiaries across any sectors.

How many LinkedIn followers does U.S. Embassy Montevideo, Uruguay have ?

U.S. Embassy Montevideo, Uruguay's official LinkedIn profile has approximately 14,643 followers.

What is the NAICS classification code for U.S. Embassy Montevideo, Uruguay ?

U.S. Embassy Montevideo, Uruguay is classified under the NAICS code 92, which corresponds to Public Administration.

Does U.S. Embassy Montevideo, Uruguay have a Crunchbase profile ?

No, U.S. Embassy Montevideo, Uruguay does not have a profile on Crunchbase.

Does U.S. Embassy Montevideo, Uruguay have a LinkedIn profile ?

Yes, U.S. Embassy Montevideo, Uruguay maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/us-embassy-uruguay.

How many cybersecurity incidents has U.S. Embassy Montevideo, Uruguay experienced ?

As of August 10, 2026, Rankiteo reports that U.S. Embassy Montevideo, Uruguay has experienced 1 cybersecurity incidents.

How many peer or competitor companies does U.S. Embassy Montevideo, Uruguay have ?

U.S. Embassy Montevideo, Uruguay has an estimated 13,158 peer or competitor companies worldwide.

What types of cybersecurity incidents has U.S. Embassy Montevideo, Uruguay faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UEMU

Boost Score +25 with badge (5 left)

758

/1000

Fair

783

/1000

Fair

U.S. Embassy Montevideo, Uruguay Vendor Cyber Rating & Cyber Score

usembassy.gov

Add Your Compliance Badge

Bienvenidos a la cuenta de LinkedIn de la Embajada de los Estados Unidos en Uruguay. A través de esta cuenta queremos establecer un contacto permanente con los emprendedores, profesionales, estudiantes, la academia, empresarios, medios de prensa y comunidad científica del Uruguay para compartir nuestros programas, las actividades que desarrollamos y aquellas que apoyamos junto a socios locales, oportunidades laborales e información de utilidad para quienes buscan el desarrollo personal, profesional y empresarial en Uruguay.

UEMU A.I CyberSecurity Scoring

Scoring History

UEMU

U.S. Embassy Montevideo, Uruguay CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Embassy Montev...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

UEMU Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UEMU

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Embassy Montevideo, Uruguay in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for U.S. Embassy Montevideo, Uruguay in 2026.

Incident Types UEMU vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Embassy Montevideo, Uruguay in 2026.

Incident History - UEMU (X = Date, Y = Severity)

Loading…

SUBSIDIARY

U.S. Embassy Montevideo, Uruguay Subsidiaries

UEMU

Government Administration

Website: https://uy.usembassy.gov/es/

Company Size: 51-200 employees

U.S. Department of StateInternational Affairs

The Fulbright ProgramInternational Affairs

Diplomatic Security ServiceLaw Enforcement

U.S. Embassy and Consulates in Brazil Government Administration

U.S. Embassy ManaguaGovernment Relations Services

U.S. Embassy ZambiaInternational Affairs

U.S. Embassy Amman, JordanGovernment Relations Services

Foreign Service InstituteInternational Affairs

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

U.S. Embassy in San SalvadorGovernment Administration

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

U.S. Embassy in AustraliaInternational Affairs

U.S. Embassy JakartaGovernment Administration

U.S. Consulate General MumbaiGovernment Administration

Embajada de Estados Unidos en ArgentinaRelaciones gubernamentales

U.S. Embassy in the Dominican RepublicGovernment Administration

Ambassador Michael BattleGovernment Relations Services

Embassy of the United States of America, LondonGovernment Relations

DT - Diplomatic Technology at StateInternational Affairs

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

U.S. Embassy South AfricaGovernment Relations Services

U.S. Department of State - Virtual Student Federal Service (VSFS)Government Administration

Under Secretary Jose W. FernandezInternational Affairs

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

U.S. Department of State - Bureau of Energy ResourcesGovernment Administration

U.S. Department of State - Bureau of Energy Resources Central Asia Energy Fellows ProgramGovernment Administration

Special Representative Sarah MorgenthauGovernment Administration

U.S. Embassy PanamaGovernment Administration

U.S. Embassy in the PhilippinesGovernment Administration

US Embassy Bucharest, RomaniaGovernment Administration

US Embassy ParisGovernment Administration

U.S. Department of State Industry LiaisonGovernment Administration

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

U.S. Embassy OsloGovernment Administration

U.S. Embassy in MexicoGovernment Administration

U.S. Embassy TunisGovernment Administration

U.S. Mission to the European UnionGovernment Administration

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

Bureau of Cyberspace and Digital PolicyInternational Affairs

U.S. Embassy MadridGovernment Administration

U.S. Consulate General MilanGovernment Administration

U.S. Mission, GenevaGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

U.S. Consulate General BarcelonaGovernment Administration

US BotschaftGovernment Administration

U.S. Mission to the UAEGovernment Administration

US Mission to the UN Agencies in RomeGovernment Administration

U.S. Consulate General FrankfurtGovernment Administration

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Mission ThailandGovernment Administration

U.S. Embassy in BulgariaGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

U.S. Embassy JerusalemGovernment Administration

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

Department of State - Office of the Science & Technology AdviserGovernment Administration

U.S. Embassy LuxembourgInternational Affairs

U.S. Embassy TegucigalpaGovernment Administration

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Consulate General MontréalGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

National Museum of American DiplomacyGovernment Administration

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Consulate General - StrasbourgGovernment Administration

U.S. Embassy Santiago, ChileServicios de relaciones gubernamentales

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

Loading…

U.S. Embassy Montevideo, Uruguay Similar Companies

City of Cape Town

capetown.gov.za

Cape Town, or the Mother City, is South Africa’s oldest city, its second-most populous and the legislative capital. It is made up of a diverse population, a rich history, world-famous tourist attractions and an exciting calendar of international and local events. More than 231 councillors and 26 225 staff serve 4 million residents across a sprawling and cosmopolitan metro of 2 500 square kilometres. The City provides all the services normally associated with a full-service municipality, such as water, electricity, waste removal, sanitation, new infrastructure, roads, public spaces, facilities, housing developments, the upgrade of informal settlements and existing infrastructure, clinics and more. To meet the current and future needs of its residents, the City of Cape Town has formulated strategies and policies to guide development and growth. Central to these is the Integrated Development Plan (IDP), which is a five-year plan that informs the City’s policy and budget decisions. The City’s strong sense of community makes it one of the best places to live, work and raise a family. We offer rewarding career opportunities, great benefits and competitive salaries. New opportunities are posted at www.capetown.gov.za/careers.

U.S. Department of Homeland Security

dhs.gov

The Department of Homeland Security (DHS) has a vital mission: to secure the nation from the many threats we face. This requires the hard work of more than 260,000 employees in jobs that range from aviation and border security to emergency response, from cybersecurity analyst to chemical facility inspector. Our duties are wide-ranging, and our goal is clear - keeping America safe. Mission 1: Counter Terrorism and Homeland Security Threats Mission 2: Secure U.S. Borders and Approaches Mission 3: Secure Cyberspace and Critical Infrastructure Mission 4: Preserve and Uphold the Nation's Prosperity and Economic Security Mission 5: Strengthen Preparedness and Resilience Mission 6: Champion the DHS Workforce and Strengthen the Department We continually strengthen our partnerships with communities, first responders, law enforcement and government agencies - at the state, local, tribal, federal and international levels. We are accelerating the deployment of science, technology, and innovation in order to make America more secure. And we are becoming leaner, smarter, and more efficient, ensuring that every security resource is used as effectively as possible. Together, we are committed to relentless resilience, striving to prevent future attacks against the United States and our allies, responding decisively to natural and man-made disasters, and advancing American prosperity and economic security long into the future.

National Institute of Statistics and Geography of Mexico (INEGI)

inegi.org.mx

The National Institute of Statistics and Geography of Mexico (INEGI) is an autonomous institution of the Federal Public Sector. INEGI is the coordinator of the National System of Statistical and Geographical Information of Mexico. The main objective of INEGI is to provide statistical and geographical information to the state and to the society of Mexico, in order to contribute to national development under the principles of accessibility, transparency, objectivity and independence.

UK Home Office

www.gov.uk

At the Home Office, we help to ensure that the country is safe and secure. We’ve been looking after UK citizens since 1782. We are responsible for: - working on the problems caused by illegal drug use - shaping the alcohol strategy, policy and licensing conditions - keeping the United Kingdom safe from the threat of terrorism - reducing and preventing crime, and ensuring people feel safe in their homes and communities - securing the UK border and controlling immigration - considering applications to enter and stay in the UK - issuing passports and visas - supporting visible, responsible and accountable policing by empowering the public and freeing up the police to fight crime - fire prevention and rescue These organisations are all part of the Home Office: - Border Force - HM Passport Office (HMPO) - Immigration Enforcement - UK Visas and Immigration (UKVI)

National Park Service

nps.gov

Most people know that the National Park Service cares for national parks, a network of over 420 natural, cultural and recreational sites across the nation. The treasures in this system – the first of its kind in the world – have been set aside by the American people to preserve, protect, and share the legacies of this land. People from all around the world visit national parks to experience America's story, marvel at the natural wonders, and have fun. Places like the Grand Canyon, the Statue of Liberty, and Gettysburg are popular destinations, but so too are the hundreds of lesser known yet equally meaningful gems like Rosie the Riveter in California, Boston Harbor Islands in Massachusetts, and Russell Cave in Alabama. The American system of national parks was the first of its kind in the world, and provides a living model for other nations wishing to establish and manage their own protected areas. The park service actively consults with these Nations, sharing what we've learned, and gaining knowledge from the experience of others. Beyond national parks, the National Park Service helps communities across America preserve and enhance important local heritage and close-to-home recreational opportunities. Grants and assistance are offered to register, record and save historic places; create community parks and local recreation facilities; conserve rivers and streams, and develop trails and greenways.

I WORK FOR SA

sa.gov.au

The OFFICIAL careers page for the South Australian Government. The South Australian Public Sector is the State's largest workforce. We are an employer of choice that reflects the diverse community we serve. Our people are from a range of backgrounds and vocations, from entry level, mid-career and leadership professionals as well as graduates, apprentices and trainees. As a public sector employee, you can be proud that the work you do supports our community and our State's prosperity. For a career with more opportunity, flexibility and purpose, visit IWORKFOR.SA.gov.au

FDA

fda.gov

The Food and Drug Administration is an agency within the Department of Health and Human Services. The FDA is responsible for protecting the public health by ensuring the safety, efficacy, and security of human and veterinary drugs, biological products, and medical devices; and by ensuring the safety of our nation's food supply, cosmetics, and products that emit radiation. FDA also has responsibility for regulating the manufacturing, marketing, and distribution of tobacco products to protect the public health and to reduce tobacco use by minors. FDA is responsible for advancing the public health by helping to speed innovations that make medical products more effective, safer, and more affordable and by helping the public get the accurate, science-based information they need to use medical products and foods to maintain and improve their health. FDA also plays a significant role in the Nation's counterterrorism capability. FDA fulfills this responsibility by ensuring the security of the food supply and by fostering development of medical products to respond to deliberate and naturally emerging public health threats.

Ville de Montréal

montreal.ca

Montréal est la plus grande ville francophone d’Amérique et elle se distingue par sa vitalité culturelle exceptionnelle et des forces créatrices reconnues mondialement. Elle se développe un peu plus chaque jour en une ville contemporaine, inclusive et dynamique sur les plans économique, culturel et social. Visant à offrir aux Montréalaises et aux Montréalais un lieu de vie agréable et prospère, la Ville de Montréal veut rester à l’écoute des besoins changeants de sa population afin de s’y adapter de façon continue. Pour ce faire, elle mise sur les compétences et l’expertise de ses 28 000 employés au service de 1,8 million de citoyens.

Centers for Disease Control and Prevention

cdc.gov

CDC works 24/7 keeping America safe from health, safety and security threats, both foreign and domestic. Whether diseases start at home or abroad, are chronic or acute, curable or preventable, human error or deliberate attack, CDC fights it and supports communities and citizens to prevent it. CDC is the nation’s health protection agency - saving lives, protecting people from health threats, and saving money through prevention. For more information, please go to: http://www.cdc.gov/ Comment Policy: Please visit http://www.cdc.gov/SocialMedia/Tools/CommentPolicy.html to view CDC’s social media comment policy. Privacy Notice Regarding Third Party Websites: Privacy Notice: The Centers for Disease Control and Prevention uses third-party Web sites to share information and to encourage collaboration with the public. Third-party Web sites are not Government-owned or Government-operated. They are controlled and operated by a third party not affiliated with CDC. The CDC Privacy Policy does not apply to third-party Web sites or applications. To learn more about CDC’s privacy practices, please visit our Privacy Policy at https://www.cdc.gov/other/privacy.html.

Loading…

NEWS

U.S. Embassy Montevideo, Uruguay CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

April 17, 2025 10:15 AM

Embassy Montevideo Small Grants Program in Uruguay

The US Embassy Montevideo of the US Department of State invites proposal submissions for the development, implementation and management of programs.

Read Article

January 17, 2025 08:00 AM

Export-Import Bank of the U.S. a Memorandum of Understanding with Banco de la República Oriental del Uruguay,

Export-Import Bank of the U.S. Signs $200 Million Memorandum of Understanding with Banco de la República Oriental del Uruguay,...

Read Article

June 10, 2024 04:45 AM

Call for Proposals: United States Embassy Fund (Uruguay)

Deadline: 30-Jun-24 The Public Diplomacy Section (PDS) of the U.S. Embassy in Uruguay announces its rolling call for proposals to fund projects that advance...

Read Article

April 11, 2024 07:00 AM

Joint Statement On Critical And Emerging Technologies

The United States and Uruguay intend to pursue deeper bilateral and multilateral collaboration on key critical and emerging technologies.

Read Article

February 09, 2024 08:00 AM

Strengthening the U.S.-Uruguay security partnership: Gen. Richardson meets with senior gov

MONTEVIDEO, Uruguay (Feb. 8, 2024) -- The commander of U.S. Southern Command, U.S. Army Gen. Laura Richardson, visited Uruguay Feb.

Read Article

February 02, 2024 08:00 AM

Head of U.S. Southern Command to visit Uruguay for talks on bilateral defense cooperation

The commander of US Southern Command, US Army Gen. Laura Richardson, will visit Uruguay Feb. 5-8, 2024, to meet with senior government and military leaders.

Read Article

April 13, 2022 07:00 AM

Joint Statement by Secretary Antony Blinken and Foreign Minister Francisco Bustillo

Secretary Blinken and Foreign Minister Bustillo agreed to launch an annual bilateral Interministerial Dialogue to coordinate on priority areas.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…