What is the official website of [Archived] ?

The official website of [Archived] is http://www.aegon.com.tr.

What is [Archived]'s cybersecurity risk score?

[Archived] has an AI-generated cybersecurity risk score of 827 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has [Archived] experienced?

According to Rankiteo, [Archived] currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has [Archived] been affected by any supply chain cyber incidents ?

According to Rankiteo, [Archived] has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does [Archived] have SOC 2 Type 1 certification ?

According to Rankiteo, [Archived] is not certified under SOC 2 Type 1.

Does [Archived] have SOC 2 Type 2 certification ?

According to Rankiteo, [Archived] does not hold a SOC 2 Type 2 certification.

Does [Archived] comply with GDPR ?

According to Rankiteo, [Archived] is not listed as GDPR compliant.

Does [Archived] have PCI DSS certification ?

According to Rankiteo, [Archived] does not currently maintain PCI DSS compliance.

Does [Archived] comply with HIPAA ?

According to Rankiteo, [Archived] is not compliant with HIPAA regulations.

Does [Archived] have ISO 27001 certification ?

According to Rankiteo,[Archived] is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does [Archived] operate in ?

[Archived] operates primarily in the Insurance industry.

How many employees does [Archived] have ?

[Archived] employs approximately 405 people worldwide.

Does [Archived] own any subsidiaries ?

[Archived] presently has no subsidiaries across any sectors.

How many LinkedIn followers does [Archived] have ?

[Archived]'s official LinkedIn profile has approximately followers.

What is the NAICS classification code for [Archived] ?

[Archived] is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does [Archived] have a Crunchbase profile ?

No, [Archived] does not have a profile on Crunchbase.

Does [Archived] have a LinkedIn profile ?

Yes, [Archived] maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/aegon-turkey.

How many cybersecurity incidents has [Archived] experienced ?

As of August 2, 2026, Rankiteo reports that [Archived] has not experienced any cybersecurity incidents.

How many peer or competitor companies does [Archived] have ?

[Archived] has an estimated 15,653 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

[Archived]

Boost Score +25 with badge (5 left)

827

/1000

Good

852

/1000

Very Good

[Archived] Vendor Cyber Rating & Cyber Score

aegon.com.tr

Add Your Compliance Badge

Aegon, 1993 yılında Orta ve Doğu Avrupa'da başlayan büyüme serüvenini bölgenin yükselen değeri olarak gördüğü Türkiye ile devam ettirmek istemiş ve bu arzusunu 2008 Temmuz'unda gerçekleştirmiştir. Bu çerçevede, hayat sigortası ve emeklilik alanında faaliyet gösteren Ankara Emeklilik A.Ş.'nin hisselerinin tamamı satın alınmış gerekli hukuki süreçlerin tamamlanmasını takiben, şirket ismi 26 Eylül 2008 tarihinden itibaren, Aegon Emeklilik ve Hayat A.Ş. olarak değiştirilmiştir. Geçmişten gelen birikimini, yeni yönetim anlayışı ve Aegon'un küresel güç ve deneyimi ile birleştirerek yeniden yapılanan Aegon Emeklilik ve Hayat; Ülke çapında iyi örgütlenmiş, donanımı, bilgi ve becerisi yüksek danışmanları aracılığıyla, Geleceğe yönelik

[Archived] A.I CyberSecurity Scoring

Scoring History

[Archived]

[Archived] CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

[Archived] Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for [Archived]

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for [Archived] in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for [Archived] in 2026.

Incident Types [Archived] vs Insurance Industry Avg (This Year)

No incidents recorded for [Archived] in 2026.

Incident History - [Archived] (X = Date, Y = Severity)

Loading…

SUBSIDIARY

[Archived] Subsidiaries

[Archived]

Insurance

Website: http://www.aegon.com.tr

Company Size: 405

ViennalifeInsurance

Vienna Insurance Group (VIG)Insurance

Ray SigortaInsurance

KooperativaInsurance

OMNIASIG Vienna Insurance GroupInsurance

ASIROM - Vienna Insurance GroupInsurance

Compensa PolskaInsurance

GPI Holding - Vienna Insurance GroupInsurance

Wiener Städtische osiguranje a.d.o. BeogradInsurance

VIG ReInsurance

Women Leaders Beyond BordersInsurance

DONAU Versicherung AG Vienna Insurance GroupInsurance

BCR Asigurari de Viata Vienna Insurance GroupInsurance

InterRisk TU SA Vienna Insurance GroupInsurance

Česká podnikatelská pojišťovna, a.s., Vienna Insurance GroupInsurance

Wiener osiguranje Vienna Insurance Group d.d.Insurance

twinformatics GmbHIT Services and IT Consulting

GLOBAL ASSISTANCE a.s.Consumer Services

VIG Investor RelationsInsurance

Viennalife Aradığın İş BuradaInsurance

Alfa BiztosítóInsurance

Vienna osiguranje VIGInsurance

KOOPERATIVA poisťovňa, a. s. VIGInsurance

Compensa Life Vienna Insurance Group SE Lietuvos filialasInsurance

BTA draudimasInsurance

Wiener osiguranje Vienna Insurance GroupInsurance

BULSTRAD LIFE VIENNA INSURANCE GROUPInsurance

UNION BiztosítóInsurance

VIG Asset Management HungaryFinancial Services

VIG IT Digital SolutionsIT System Design Services

Beesafe sp. z o.o.Insurance

Sigma Vienna Insurance GroupInsurance

RETMInsurance

BULSTRAD VIENNA INSURANCE GROUPInsurance

VIG / C-QUADRAT TFIInvestment Management

Vienna-Life Lebensversicherung AG Vienna Insurance GroupInsurance

Compensa Vienna Insurance Group ADB Latvijas filiāleInsurance

InterRisk Versicherungen - Vienna Insurance GroupInsurance

Doverie - Pension AssurancePension Funds

MAKEDONIJA osiguruvanje AD Skopje - Vienna Insurance GroupInsurance

Compensa Life Vienna Insurance Group SE Latvian BranchInsurance

Claim Expert Services SRLInsurance

horizont Personal-, Team- & Organisationsentwicklung GmbhProfessional Training and Coaching

KOMUNÁLNA poisťovňa, a.s. Vienna Insurance GroupInsurance

SIGMA VIENNA INSURANCE GROUP, KOSOVO BRANCHInsurance

Global Assistance PolskaInsurance

Seesam Insurance (Compensa Vienna Insurance Group, ADB Estonian Branch)Insurance

Vienna Insurance Group Management Service SRLIT Services and IT Consulting

ПАТ "СК "УСГ"Insurance

Intersig Vienna Insurance GroupInsurance

IRAO - Vienna Insurance GroupInsurance

Carpathia PensiiPension Funds

Donaris Vienna Insurance GroupInsurance

Vienna Life InsuranceInsurance

viesure innovation center GmbHIT Services and IT Consulting

Loading…

[Archived] Similar Companies

China Pacific Insurance Company

cb cpic.com.cn

China Pacific Life Insurance Co., Ltd (CPIC Life in short) was formed on the basis of life insurance business of China Pacific Insurance Co., Ltd., which was founded on May 13th 1991, and is held by CPIC Group. The company was incorporated in November 11, 2001, headquartered in Shanghai and registered capital totaling RMB 5.1 billion. In 2008, the premium income of the company reached RMB 66.092 billion, ranking 3rd in China life insurance market with a share of 9.0%, according to data published by CIRC. The company achieved a profit of RMB 2.104 billion this year with net profit of RMB 2.904 million.

Farmers Insurance

cb farmers.com

The companies comprising the Farmers Insurance Group of Companies® currently make up one of the country's largest insurers of vehicles, homes and small businesses, and provide a wide range of other specialty insurance and financial services products. In business since 1928, today at Farmers® we proudly serve millions of households across all 50 states through an extensive network of exclusive and independent agents and approximately 18,000 employees. Our experience provides a rich history and legacy of service and strong customer relationships, while our focus on smart innovation, technology and entrepreneurship helps us to stay creative, to continually improve our product offerings and to drive the evolution of the insurance industry. Every interaction with our customers is a chance to stand out through personalized service and make a meaningful difference in their lives. We take pride in empowering individuals and businesses to become smarter and better prepared to protect what matters most. Giving back is also a core part of who we are. Our culture is rooted in volunteerism and a shared commitment to strengthening the communities where we live and work. At Farmers, we truly value your experience as a candidate, and part of that is helping you stay informed and protected. Please keep in mind that any email from a legitimate corporate Farmers Insurance employee will always come from an email address ending in @farmersinsurance.com, @bristolwest.com, or @foremost.com. If you see a message from a different domain, even one that looks close, it's best to treat it with caution. Knowing this helps ensure your communication with us stays safe, secure, and authentic. And if you are ever suspicious of an email and want to verify the legitimacy, please feel free to send an email to [email protected]

Blue Cross Blue Shield of Michigan

bcbsm.com

Blue Cross Blue Shield of Michigan is a nonprofit corporation and an independent licensee of the Blue Cross and Blue Shield Association. BCBSM's commitment to Michigan is what differentiates it from other health insurance companies doing business in the state. That mission has never changed. Nearly 70 years ago, Blue Cross Blue Shield of Michigan started with a purpose to provide people with the security of knowing they have health care when they need it. Today, that nonprofit mission is the same and the company is accomplishing it in many ways, including: Offering access to health care coverage for everyone, regardless of circumstances Never dropping your coverage for health reasons Partnering with the state to cover more than 32,000 children through MIChild Providing financial support to 30 free clinics statewide Contributing more money than any other company to provide Michigan with better health and health care Advocating and educating through Alliance for Advancing Nonprofit Health Care For more on the history of BCBSM, please visit our section on historical highlights: http://www.bcbsm.com/home/bcbsm/1930.shtml

Star Health and Allied Insurance Co. Ltd

cb starhl.in

Star Health & Allied Insurance Co. Ltd. is an Indian health insurance company headquartered in Chennai. They began their operations in 2006 as India's first standalone Health Insurance provider. They offer innovative products in the health, personal accident and overseas & domestic travel insurance. With meticulously crafted insurance policies, Star Health addresses the unique health needs of people. Having covered more than 16.9 crore lives till now, the company is scaling up its services to ensure that all lives are covered under Health Insurance. Star Health is keen on providing timely assistance during emergency times. In that regard, they have a dedicated in-house claim settlement team to settle claims swiftly. They have an excellent track record of settling more than Rs. 4 crores as claim amount every hour. Star Health has been offering cashless treatment facilities in its 14,000+ Network Hospitals spread across the country and ensures the quality of healthcare services to its customers. With lakhs of agents serving the customers and driving the business on a huge scale, Star Health also operates through other channels including digital, brokers, etc., to cater to the needs of all sections of society. Star Health is also leading the bancassurance and has a long-standing partnership with numerous Banks. Star Health places a huge emphasis on customer experience and service. They have 24x7 multilingual call centre support and dedicated claims assistance. They also offer free Telehealth consultations with their expert team of in-house doctors, along with a free second medical opinion if necessary. In this digitally driven world, Star Health has adapted to the current trend by digitally transforming itself with innovative technologies to guarantee the quality of service, ease of access and seamless user experience for all its customers. Currently, Star Health has 14,000+ employees, 800+ branch offices and 5.8 Lakh agents all over India.

AAA-The Auto Club Group

aaa.com

AAA - The Auto Club Group (ACG) is the second largest AAA club in North America, serving more than 13+ million members across 14 U.S. states, the province of Quebec, Puerto Rico, and the U.S. Virgin Islands. For over 100 years, AAA has provided safety, security, and peace of mind. ACG advances AAA’s mission by providing a full suite of products and services to millions of AAA Members, from roadside assistance to insurance to travel support. We pride ourselves on always being there when you need us, delivering the highest level of customer service and value to each and every member. We seek to be a trusted ally—on the road and throughout life’s journey. AAA - The Auto Club Group belongs to the national AAA Federation, which is committed to improving the lives of our combined 60 million members across North America.

Bajaj Life

bajajlifeinsurance.com

Bajaj Life Insurance is among the fastest-growing life insurance companies in India, offering a wide range of plans, from ULIPs and term insurance to retirement and child policies, helping you secure your future and achieve your life goals. With over 3.85 crore policyholders, an AUM of ₹1.3 Lakh Crores, a 99.29% claim settlement ratio, and a 343% solvency margin, we are committed to delivering financial protection, wealth creation, and peace of mind at every stage of life. Our Popular Life Insurance Products: ULIPs (Unit Linked Insurance Plans): Zero Allocation Charge ULIP designed for long-term wealth creation, with return of mortality charges. Term Insurance Plans: Includes India’s first Term Plan for Diabetics, offering affordable protection for all. SISO (Systematic In/Systematic Out): A smart investment approach for disciplined wealth building. Bajaj Life ACE: A flexible plan that lets you choose income options as per your financial needs. Bajaj Superwoman Term: A term protection solution specifically designed for women. Our extensive service on WhatsApp Conversational Platform ensures convenience and easy accessibility to our customer right at their fingertips. With a strong distribution network of 597 branches, over 1.62 lakh insurance consultants, and partnerships with India’s leading banks, Bajaj Life ensures easy access and customer-first service. We pride ourselves in creating a culture that fosters an innovative mindset and collaboration among our 25K+ employees who have made Bajaj Life a Great Place to Work for. Recent Accolades: 1. World’s Digital Insurance Award 2025 for Innovative Smart Assist Platform 2. Best Employer India by Kincentric, 2023, 2022, 2021 3. India’s No. 1 Top Riser Brand by Kantar BrandZ, 2022 Reach out to: 020-6712 1212| For complaints/queries: [email protected] To buy, call 18002094040 or Visit our website: https://www.bajajlifeinsurance.com

Tokio Marine Group

tokiomarinehd.com

Tokio Marine Group is a global insurance group that provides safety and security to customers worldwide. The Group consists of Tokio Marine Holdings and over 250 subsidiaries and 26 affiliates located in more than 480 cities in 46 countries and regions worldwide, operating extensively in the non-life (P&C) insurance business, life insurance business, and financial and general businesses. The insurance business is based upon the commitment to be there for our clients in their moment of need. It is a people’s business, therefore our people and the trust they engender is everything. We will continue to build a workforce that has been empowered and enabled to think and act from the customer's point of view and to live up to our corporate vision to be a Good Company.

Porto

porto.vc

A Porto é mais que uma seguradora, é um ecossistema de soluções de serviços de proteção com tecnologia embarcada, para melhorar e facilitar a experiência do cliente. Com mais de 70 anos de mercado, a atuação da companhia se concentra hoje em quatro pilares estratégicos de negócio: Seguros, Saúde, Produtos Financeiros e Serviços. Além de 15.8 milhões de clientes únicos, 13 mil funcionários, 12 mil prestadores e 35 mil corretores parceiros, a empresa conta ainda com 101 sucursais e escritórios regionais em todo o Brasil. Ao todo 27 empresas fazem parte do universo Porto – entre elas: Porto Bank, Porto Saúde, Porto Seguro, Porto Serviço, Porto Seguro Uruguai, Azul Seguros, Itaú Seguros de Auto e Residência.

Sunshine Insurance Group

cb sinosig.com

Established in July 2005, Sunshine Insurance Group has experienced sustainable development, now ranking among the Top 7 insurance groups in China, with an annual business income of $12.6 billion in 2016. Sunshine is composed of Property and Casualty Insurance, Life Insurance, Credit and Guarantee Insurance, Asset Management, Union Hospital and HFAX. In addition, Sunshine acquired the only six-star hotel Baccarat, which is located in Manhattan, New York. The vision of Sunshine is to be a financial insurance group with humanity and vitality and our mission is to let our clients enjoy more sunshine. Since establishment, Sunshine has created over 170,000 jobs, served 180 million clients and donated more than $16.7 million to charity work. Sunshine has built up strategic partnerships with world-leading insurance and finance companies, such as Swiss Re, Morgan Stanley, UBS, Blackstone Group, etc. Embracing the future, Sunshine is dedicated to a new path of development, integrating four pillars of “Data Sunshine”, “Financial Sunshine”, “Health Care Sunshine” and “International Sunshine”. Building on its strengths and remaining people-oriented and technology-driven, Sunshine welcomes talents from all over the world to fulfill their personal goals while achieving a successful career.

Loading…

NEWS

[Archived] CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 23, 2025 08:00 AM

Spotify Music Library With 86M Music Files Scraped by Hacktivist Group

Anna's Archive carried out a large Spotify scrape, sharing torrents with around 86 million audio tracks and metadata for 256 million songs.

Read Article

November 24, 2025 08:00 AM

NIST says critical vulnerability found in 7-Zip archiving software

A critical vulnerability has been identified in 7-Zip, a free software program used for archiving data, according to the National Institute...

Read Article

November 20, 2025 08:00 AM

News archive

Another initiative under the Australian Cyber Security Strategy 2023-2030 is set to be delivered. The Australian Computer Society (ACS)...

Read Article

November 07, 2025 08:00 AM

DHS ditched software that archived officials’ electronic messages

Those officials are now asked to screenshot their messages and upload them to a shared drive, according to sworn court testimony released...

Read Article

October 21, 2025 07:58 AM

Cybersecurity Archives

Stay safe with the latest cybersecurity news, data breach alerts, and threat analysis. Expert insights on digital privacy and protection strategies.

Read Article

October 11, 2025 07:00 AM

New 7-Zip high-severity vulnerabilities expose systems to remote attackers — users should update to version 25 ASAP

Two newly disclosed vulnerabilities in 7-Zip could allow attackers to execute arbitrary code by tricking users into opening a malicious ZIP...

Read Article

October 08, 2025 07:00 AM

News archive

National Cyber Security Coordinator, Lieutenant General Michelle McGuinness CSC was awarded the prestigious 8th Annual Billington...

Read Article

October 07, 2025 04:43 AM

News archive

This October, there are simple actions you can take to build our cyber safe culture. Cyber Security Awareness Month is an annual reminder and opportunity...

Read Article

August 22, 2025 07:00 AM

Linux Malware Delivered via Malicious RAR Filenames Evades Antivirus Detection

Cybersecurity researchers have shed light on a novel attack chain that employs phishing emails to deliver an open-source backdoor called...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…