What is the official website of U.S. Consulate General - Strasbourg ?

The official website of U.S. Consulate General - Strasbourg is https://fr.usembassy.gov/u-s-consulate-general-strasbourg/.

What is U.S. Consulate General - Strasbourg's cybersecurity risk score?

U.S. Consulate General - Strasbourg has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has U.S. Consulate General - Strasbourg experienced?

According to Rankiteo, U.S. Consulate General - Strasbourg currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has U.S. Consulate General - Strasbourg been affected by any supply chain cyber incidents ?

According to Rankiteo, U.S. Consulate General - Strasbourg has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does U.S. Consulate General - Strasbourg have SOC 2 Type 1 certification ?

According to Rankiteo, U.S. Consulate General - Strasbourg is not certified under SOC 2 Type 1.

Does U.S. Consulate General - Strasbourg have SOC 2 Type 2 certification ?

According to Rankiteo, U.S. Consulate General - Strasbourg does not hold a SOC 2 Type 2 certification.

Does U.S. Consulate General - Strasbourg comply with GDPR ?

According to Rankiteo, U.S. Consulate General - Strasbourg is not listed as GDPR compliant.

Does U.S. Consulate General - Strasbourg have PCI DSS certification ?

According to Rankiteo, U.S. Consulate General - Strasbourg does not currently maintain PCI DSS compliance.

Does U.S. Consulate General - Strasbourg comply with HIPAA ?

According to Rankiteo, U.S. Consulate General - Strasbourg is not compliant with HIPAA regulations.

Does U.S. Consulate General - Strasbourg have ISO 27001 certification ?

According to Rankiteo,U.S. Consulate General - Strasbourg is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does U.S. Consulate General - Strasbourg operate in ?

U.S. Consulate General - Strasbourg operates primarily in the Government Administration industry.

How many employees does U.S. Consulate General - Strasbourg have ?

U.S. Consulate General - Strasbourg employs approximately 11 people worldwide.

Does U.S. Consulate General - Strasbourg own any subsidiaries ?

U.S. Consulate General - Strasbourg presently has no subsidiaries across any sectors.

How many LinkedIn followers does U.S. Consulate General - Strasbourg have ?

U.S. Consulate General - Strasbourg's official LinkedIn profile has approximately 956 followers.

What is the NAICS classification code for U.S. Consulate General - Strasbourg ?

U.S. Consulate General - Strasbourg is classified under the NAICS code 92, which corresponds to Public Administration.

Does U.S. Consulate General - Strasbourg have a Crunchbase profile ?

No, U.S. Consulate General - Strasbourg does not have a profile on Crunchbase.

Does U.S. Consulate General - Strasbourg have a LinkedIn profile ?

Yes, U.S. Consulate General - Strasbourg maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/usastrasbourg.

How many cybersecurity incidents has U.S. Consulate General - Strasbourg experienced ?

As of August 10, 2026, Rankiteo reports that U.S. Consulate General - Strasbourg has experienced 1 cybersecurity incidents.

How many peer or competitor companies does U.S. Consulate General - Strasbourg have ?

U.S. Consulate General - Strasbourg has an estimated 13,158 peer or competitor companies worldwide.

What types of cybersecurity incidents has U.S. Consulate General - Strasbourg faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

UCGS

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

U.S. Consulate General - Strasbourg Vendor Cyber Rating & Cyber Score

usembassy.gov

Add Your Compliance Badge

Bienvenue sur la page officielle du Consulat général des États-Unis d'Amérique à Strasbourg. Le Consulat Général représente les États-Unis dans le Grand-Est. Les collaborations au niveau municipal, départemental et régional sont multiples et s’organisent en trois piliers: politique, culturelet économique. Dans le domaine économique, le Consulat a plusieurs missions. Les Etats-Unis jouent un rôle important en tant qu’employeur dans la région Grand Est avec plusieurs sociétés à capitaux américains implantées. Le Consulat cherche à défendre les intérêts des compagnies américaines dans la région en collaborant avec les organisations publiques locales. Le Consulat travaille également avec les entreprises françaises souhaitant investir et

UCGS A.I CyberSecurity Scoring

Scoring History

UCGS

U.S. Consulate General - Strasbourg CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

U.S. Consulate Gene...

Vulnerability

100

7/2024

DOS704071524

Loading…

A.I.

UCGS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for UCGS

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Consulate General - Strasbourg in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for U.S. Consulate General - Strasbourg in 2026.

Incident Types UCGS vs Government Administration Industry Avg (This Year)

No incidents recorded for U.S. Consulate General - Strasbourg in 2026.

Incident History - UCGS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

U.S. Consulate General - Strasbourg Subsidiaries

UCGS

Government Administration

Website: https://fr.usembassy.gov/u-s-consulate-general-strasbourg/

Company Size: 11-50 employees

U.S. Department of StateInternational Affairs

The Fulbright ProgramInternational Affairs

U.S. Embassy Amman, JordanGovernment Relations Services

Foreign Service InstituteInternational Affairs

U.S. Embassy in the Dominican RepublicGovernment Administration

U.S. Embassy ManaguaGovernment Relations Services

U.S. Department of State, Bureau of Overseas Buildings OperationsInternational Affairs

Ambassador Michael BattleGovernment Relations Services

US BotschaftGovernment Administration

US Mission to the UN Agencies in RomeGovernment Administration

Bureau of Cyberspace and Digital PolicyInternational Affairs

Under Secretary Jose W. FernandezInternational Affairs

U.S. Department of State – Bureau of Economic and Business AffairsGovernment Administration

U.S. Department of State - Bureau of Energy ResourcesGovernment Administration

U.S. Department of State - Bureau of Energy Resources Central Asia Energy Fellows ProgramGovernment Administration

Special Representative Sarah MorgenthauGovernment Administration

U.S. Embassy TunisGovernment Administration

US Embassy ParisGovernment Administration

U.S. Embassy in the PhilippinesGovernment Administration

U.S. Consulate General MumbaiGovernment Administration

World Expo USA PavilionEvents Services

U.S. Department of State Industry LiaisonGovernment Administration

U.S. Department of State - Bureau of Medical ServicesInternational Affairs

US Embassy Bucharest, RomaniaGovernment Administration

U.S. Embassy Santiago, ChileServicios de relaciones gubernamentales

U.S. Embassy in MexicoGovernment Administration

U.S. Embassy and Consulates in Brazil Government Administration

U.S. Embassy Vilnius, LithuaniaGovernment Relations Services

U.S. Embassy MadridGovernment Administration

U.S. Mission to the European UnionGovernment Administration

United States Embassy Ottawa and Consulates in CanadaGovernment Administration

U.S. Consulate General MontréalGovernment Administration

U.S. Embassy OsloGovernment Administration

U.S. Mission, GenevaGovernment Administration

U.S. Mission to the UAEGovernment Administration

US-BotschaftGovernment Administration

Bureau of Oceans and International Environmental and Scientific AffairsGovernment Administration

U.S. Mission to International Organizations in ViennaGovernment Administration

U.S. Consulate General MilanGovernment Administration

U.S. Mission to the UN Agencies for Food and Agriculture in RomeGovernment Administration

U.S. Consulate General BarcelonaGovernment Administration

U.S. Embassy in BelgiumGovernment Administration

U.S. Embassy LuxembourgInternational Affairs

U.S. Embassy in BulgariaGovernment Administration

Office of the Special Envoy for Critical and Emerging TechnologyGovernment Administration

Diplomatic Security ServiceLaw Enforcement

U.S. Embassy Belgrade, SerbiaGovernment Relations Services

U.S. Consulate General FrankfurtGovernment Administration

U.S. Department of State - Careers for Individuals with DisabilitiesInternational Affairs

U.S. Embassy in AustraliaInternational Affairs

U.S. Department of State - Bureau of International Security and NonproliferationGovernment Administration

U.S. Embassy JerusalemGovernment Administration

National Museum of American DiplomacyGovernment Administration

The Secretary's Office of Diversity and InclusionGovernment Administration

GCLO Global Employment InitiativeGovernment Administration

U.S. Mission ThailandGovernment Administration

Department of State - Office of the Science & Technology AdviserGovernment Administration

Under Secretary of State for Civilian Security, Democracy, and Human RightsGovernment Administration

U.S. Embassy TegucigalpaGovernment Administration

Office of the AUKUS Senior AdvisorGovernment Administration

U.S. Embassy JakartaGovernment Administration

U.S. Embassy Bogotá, ColombiaRelaciones gubernamentales

Embajada de Estados Unidos en ArgentinaRelaciones gubernamentales

U.S. Embassy South AfricaGovernment Relations Services

U.S. Embassy in San SalvadorGovernment Administration

U.S. Embassy Dar es SalaamGovernment Relations Services

Embassy of the United States of America, LondonGovernment Relations

U.S. Embassy PanamaGovernment Administration

DT - Diplomatic Technology at StateInternational Affairs

#ExchangeAlumni - Alumni Affairs - State Dept.International Affairs

U.S. Embassy Montevideo, UruguayGovernment Administration

International Visitor Leadership Program (IVLP)Government Administration

U.S. Embassy ZambiaInternational Affairs

U.S. Department of State | Bureau of Global Health Security and DiplomacyGovernment Administration

U.S. Department of State - Virtual Student Federal Service (VSFS)Government Administration

Loading…

U.S. Consulate General - Strasbourg Similar Companies

I work for NSW

nsw.gov.au

The NSW public sector includes ten departments and many agencies and organisations working together to develop policy and deliver important services such as health, education, housing, transport and infrastructure across NSW. We are over 300,000 dedicated people who share the same values - making a difference, giving back and responding to the future. Read our community guidelines: bit.ly/PD-community-guidelines

Gouvernement du Québec – Carrières

quebec.ca

Travailler dans la fonction publique du Québec, c'est plus qu'une carrière! Réparti(e)s dans une vingtaine de ministères et une soixantaine d'organismes à travers le Québec, tous les gestes posés par les employé(e)s de la fonction publique façonnent l’avenir de la société et contribuent à améliorer la vie des Québécoises et Québécois; nous rendons nos routes sécuritaires; nous protégeons nos richesses naturelles; nous faisons rayonner notre culture; nous améliorons nos milieux de vie; etc. Pour nous, être au service de la population, c’est bien plus qu’une carrière! Travailler dans la fonction publique québécoise permet d’œuvrer dans différentes organisations tout en maintenant ses conditions de travail. Nous adhérons aux valeurs de compétence, d’impartialité, d’intégrité, de loyauté et de respect; nous offrons de bonnes conditions de travail, de même que des milieux de travail sains et motivants, nous valorisons l’équité, la diversité et l’inclusion par notre Programme d’accès à l’égalité en emploi dont l’objectif principal est d’assurer une meilleure représentativité des groupes victimes de discrimination en emploi, nous favorisons l’équilibre entre la vie professionnelle et personnelle, nous misons sur le développement des compétences, nous sommes fier(ères) et dévoué(e)s. Nous sommes la fonction publique du Québec!

State of Maryland

jobapscloud.com

Maryland is on the path to becoming the best state in the nation. Referred to as “America in Miniature”, Maryland embodies the very spirit of the United States. Maryland is home to ethnic groups of every origin, just about every natural feature, and much like our country, opportunity! If you are interested in a rewarding career in public service, consider the following: Full-time employment Part-time employment Contractual work Internships Seasonal work Maryland, where your work truly matters… Join us! State Jobs: https://www.jobaps.com/md/ State of Maryland homepage: http://www.maryland.gov/Pages/default.aspx

State of Oregon

cb oregon.gov

Official LinkedIn page for the state of Oregon. Oregon is a state in the Pacific Northwest region of the United States. It is located on the Pacific coast, with Washington to the north, California to the south, Nevada on the southeast and Idaho to the east. The Columbia and Snake rivers delineate much of Oregon's northern and eastern boundaries, respectively. The area was inhabited by many indigenous tribes before the arrival of traders, explorers, and settlers who formed an autonomous government in Oregon Country in 1843. The Oregon Territory was created in 1848, and Oregon became the 33rd state on February 14, 1859.

Nav

nav.no

Nav er en viktig del av sikkerhetsnettet i velferdsstaten. Vi skal bidra til at flere kommer i arbeid og færre går på stønad, og samtidig sørge for at de som trenger det er sikra inntekt og økonomisk trygghet gjennom rett pengestøtte til rett tid. For å løse dette samfunnsoppdraget forvalter Nav om lag en tredel av statsbudsjettet, gjennom ordninger som arbeidsrettede tiltak, dagpenger, arbeidsavklaringspenger, sykepenger, pensjon, økonomisk sosialhjelp, foreldrepenger, barnetrygd og kontantstøtte. Nav tilbyr tjenester, ytelser og stønader til både privatpersoner og arbeidsgivere. For å sikre helhetlige tjenester, samarbeider vi tett med arbeidslivet, kommune-, helse- og utdanningssektoren, andre statlige virksomheter og frivillige aktører.

State of Illinois

illinois.gov

The government of Illinois, under the Constitution of Illinois, has three branches of government: executive, legislative and judicial. The executive branch is split into several statewide elected offices, with the Governor as chief executive, and has numerous departments, agencies, boards and commissions. Legislative functions are granted to the General Assembly, composed of the 118-member House of Representatives and the 59-member Senate. The judiciary is composed of the Supreme Court and lower courts. The government of Illinois has numerous departments, agencies, boards and commissions, but the code departments, so called because they're established by the Civil Administrative Code of Illinois, provide most of the state's services: Department on Aging Department of Agriculture Department of Central Management Services Department of Children and Family Services Department of Commerce and Economic Opportunity Department of Corrections Department of Employment Security Department of Financial and Professional Regulation Department of Healthcare and Family Services Department of Human Rights Department of Human Services Department of Juvenile Justice Department of Labor Department of the Lottery Department of Natural Resources Department of Public Health Department of Revenue Department of State Police Department of Transportation Department of Veterans' Affairs

IBGE

ibge.gov.br

The Brazilian Institute of Geography and Statistics or IBGE (Portuguese: Instituto Brasileiro de Geografia e Estatística), is the agency responsible for statistical, geographic, cartographic, geodetic and environmental information in Brazil. The IBGE performs a national census every ten years, and the questionnaires account for information such as age, household income, literacy, education, occupation and hygiene levels. IBGE is an institution of the Federal Government, constituted a public foundation by Decree Law No. 161 of February 13, 1967, and is bound to the Brazilian Department of Planning, Budget and Management. It has four directors and two other central organs. IBGE has a network of national research and dissemination components, comprising: 27 state units (26 in state capitals and one in the Federal District); 27 centres for documentation and dissemination of information (26 in the capital and one in the Federal District); 581 data collection agencies in major cities. The IBGE also maintains the Roncador Ecological Reserve, situated 35 km south of Brasília.

City of Cape Town

capetown.gov.za

Cape Town, or the Mother City, is South Africa’s oldest city, its second-most populous and the legislative capital. It is made up of a diverse population, a rich history, world-famous tourist attractions and an exciting calendar of international and local events. More than 231 councillors and 26 225 staff serve 4 million residents across a sprawling and cosmopolitan metro of 2 500 square kilometres. The City provides all the services normally associated with a full-service municipality, such as water, electricity, waste removal, sanitation, new infrastructure, roads, public spaces, facilities, housing developments, the upgrade of informal settlements and existing infrastructure, clinics and more. To meet the current and future needs of its residents, the City of Cape Town has formulated strategies and policies to guide development and growth. Central to these is the Integrated Development Plan (IDP), which is a five-year plan that informs the City’s policy and budget decisions. The City’s strong sense of community makes it one of the best places to live, work and raise a family. We offer rewarding career opportunities, great benefits and competitive salaries. New opportunities are posted at www.capetown.gov.za/careers.

Queensland Government

qld.gov.au

ABOUT US We are the largest and most diverse organisation in our state. We have more than 90 government departments and organisations delivering for Queensland across 4000+ locations, from the Torres Strait to the Gold Coast; Mount Isa to Brisbane. This page is monitored by Queensland Government employees from 8am to 5pm, Monday to Friday. HOUSE RULES — all users must comply with LinkedIn policies and terms of use — please do not post content or comments that could be considered • abusive or obscene, name calling, harassment or personal attacks • defamatory towards a person or people • prejudicial, inflammatory or offensive • deceptive, misleading or false information about an individual, organisation, government or entity • personal or sensitive information about yourself or others • in violation of any intellectual property rights, or any other law or regulation • promotion of a product, business, company or organisation • off-topic or spam, including the same comment posted repeatedly. Any content or comments deemed to fit under these definitions will be deleted. Users found to repeatedly post these types of comments will be banned from this page. You should report any offensive material presented on LinkedIn. Complaints about defamatory digital matter or anything you consider to be offensive should be made to the attention of the Public Sector Commission via our website www.psc.qld.gov.au/contact/customer-compliments-and-complaints. A complaint about defamatory digital matter should contain your name, the matter and where it is located, and that you consider the matter to be defamatory. CURRENT CONDITIONS © The State of Queensland (Public Sector Commission) 2026 Subject to LinkedIn’s Statement of Rights and Responsibilities, all content released on this page is licensed under a Creative Commons Attribution (BY) 2.5 Australia Licence. Permissions may be available beyond the scope of this licence.

Loading…

NEWS

U.S. Consulate General - Strasbourg CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 06, 2025 08:00 AM

Trump administration weighs closure of nearly a dozen diplomatic missions abroad

The U.S. State Department is preparing to shut down almost a dozen consulates that are mainly in Western Europe in the coming months and is...

Read Article

February 27, 2025 08:00 AM

Trump wants to shrink the State Department’s size, reach and focus

Plans call for fewer embassies, cuts to programs to build goodwill abroad and more focus on immediate U.S. interests.

Read Article

September 15, 2024 07:00 AM

Hispanic Heritage Month 2024

During National Hispanic Heritage Month, from September 15 – October 15, the US government celebrates the countless contributions of more than 60 million...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19374

SUMMARY

A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios of the file app/api/proxy/route.ts of the component Proxy API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack is possible to be carried out remotely. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-19373

SUMMARY

A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0. Affected by this issue is the function makeRequest of the file src/index.ts of the component BaseConfigSchema. Executing a manipulation of the argument apiUrl can lead to server-side request forgery. It is possible to launch the attack on the local host. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19372

SUMMARY

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component upload_document. Performing a manipulation of the argument File results in path traversal. Attacking locally is a requirement. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-19371

SUMMARY

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12372

SUMMARY

A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()` function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs because Python's `ipaddress` module does not classify such addresses as `is_private` or `is_global`, and the current guard only checks `is_private` and a few explicit categories. An attacker who can influence a URL passed to NLTK's network-loading helpers can exploit this vulnerability to make a strict-mode application send requests to shared-address-space hosts, potentially exposing non-public infrastructure reachable from the application host. The impact is limited to SSRF-style confidentiality exposure, with no code execution claimed.

Published

Date2026-08-09

Updated

Date2026-08-09

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

2.2

REFERENCES

https://huntr.com/bounties/2911b643-571c-42e4-b0c2-9a1fa6f491db

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…