What is the official website of Allianz Partners Australia ?

The official website of Allianz Partners Australia is http://www.allianzpartners.com.au.

What is Allianz Partners Australia's cybersecurity risk score?

Allianz Partners Australia has an AI-generated cybersecurity risk score of 752 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Allianz Partners Australia experienced?

According to Rankiteo, Allianz Partners Australia currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Allianz Partners Australia been affected by any supply chain cyber incidents ?

According to Rankiteo, Allianz Partners Australia has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Snowflake (Incident ID: MEREQUUNIMAEMGMGOOTOYSNOALLORARIPTIC1775528897) Gainsight (Incident ID: GAI0292402112125)

Does Allianz Partners Australia have SOC 2 Type 1 certification ?

According to Rankiteo, Allianz Partners Australia is not certified under SOC 2 Type 1.

Does Allianz Partners Australia have SOC 2 Type 2 certification ?

According to Rankiteo, Allianz Partners Australia does not hold a SOC 2 Type 2 certification.

Does Allianz Partners Australia comply with GDPR ?

According to Rankiteo, Allianz Partners Australia is not listed as GDPR compliant.

Does Allianz Partners Australia have PCI DSS certification ?

According to Rankiteo, Allianz Partners Australia does not currently maintain PCI DSS compliance.

Does Allianz Partners Australia comply with HIPAA ?

According to Rankiteo, Allianz Partners Australia is not compliant with HIPAA regulations.

Does Allianz Partners Australia have ISO 27001 certification ?

According to Rankiteo,Allianz Partners Australia is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Allianz Partners Australia operate in ?

Allianz Partners Australia operates primarily in the Insurance industry.

How many employees does Allianz Partners Australia have ?

Allianz Partners Australia employs approximately 159 people worldwide.

Does Allianz Partners Australia own any subsidiaries ?

Allianz Partners Australia presently has no subsidiaries across any sectors.

How many LinkedIn followers does Allianz Partners Australia have ?

Allianz Partners Australia's official LinkedIn profile has approximately 6,913 followers.

What is the NAICS classification code for Allianz Partners Australia ?

Allianz Partners Australia is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does Allianz Partners Australia have a Crunchbase profile ?

No, Allianz Partners Australia does not have a profile on Crunchbase.

Does Allianz Partners Australia have a LinkedIn profile ?

Yes, Allianz Partners Australia maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/allianzpartnersaustralia.

How many cybersecurity incidents has Allianz Partners Australia experienced ?

As of August 2, 2026, Rankiteo reports that Allianz Partners Australia has experienced 10 cybersecurity incidents.

How many peer or competitor companies does Allianz Partners Australia have ?

Allianz Partners Australia has an estimated 15,653 peer or competitor companies worldwide.

What types of cybersecurity incidents has Allianz Partners Australia faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

APA

Boost Score +25 with badge (5 left)

752

/1000

Fair

777

/1000

Fair

Allianz Partners Australia Vendor Cyber Rating & Cyber Score

allianzpartners.com.au

Add Your Compliance Badge

--Our solutions know no boundaries-- Welcome to Allianz Partners, where our endless range of innovative solutions help us build long-term, successful business partnerships across all industries. As the world’s leading B2B2C specialist, Allianz Worldwide Partners push boundaries every day by providing continuous, innovative protection and care to our business partners’ customers and employees worldwide. We specialise in automotive assistance, international health & life, travel insurance and assistance services and we contribute directly to growing our business partners’ business. With expertise built on decades of caring for customers and embracing innovation and change, we support our business partners’ strategy; we work alongside them

APA A.I CyberSecurity Scoring

Scoring History

APA

Allianz Partners Australia CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Allianz

Ransomware

100

12/2025

Snowflake

MEREQUUNIMAEMGM...

Allianz Partners Au...

Breach

10/2025

ALL229272210012...

Allianz Partners Au...

Ransomware

100

8/2025

ALL316081425

Allianz

Breach

8/2025

Gainsight

GAI029240211212...

Allianz Life

Breach

7/2025

ALL1772058877

Allianz Partners Au...

Cyber Attack

7/2025

ALL259272510012...

Allianz Partners Au...

Breach

100

5/2025

ALL505090325

Allianz Partners Au...

Breach

6/2024

ALL003320010032...

Allianz Partners Au...

Breach

4/2024

ALL841080425

Allianz Partners Au...

Ransomware

100

01/2023

ALL435050724

Loading…

A.I.

APA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for APA

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Partners Australia in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Allianz Partners Australia in 2026.

Incident Types APA vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Partners Australia in 2026.

Incident History - APA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Allianz Partners Australia Subsidiaries

APA

Insurance

Website: http://www.allianzpartners.com.au

Company Size: 501-1,000 employees

Allianz PartnersInsurance

AllianzFinancial Services

Allianz TechnologyIT Services and IT Consulting

Allianz BrasilInsurance

PIMCOInvestment Management

Allianz MarocInsurance

Mutakamela InsuranceInsurance

Allianz Global InvestorsFinancial Services

Allianz Global Investors FranceFinancial Services

Allianz Global Investors ItaliaFinancial Services

アリアンツ・グローバル・インベスターズ・ジャパンFinancial Services

Allianz Global Investors DACHFinancial Services

risklab - the Investment and Risk Advisory Experts of Allianz Global InvestorsFinancial Services

Allianz Global Investors EspañaFinancial Services

Allianz ColombiaInsurance

Allianz EspañaInsurance

Allianz ServicesFinancial Services

Allianz Services IndiaFinancial Services

Allianz ConsultingBusiness Consulting and Services

Allianz FranceInsurance

Allianz Partners, HealthInsurance

Allianz MalaysiaInsurance

Allianz TürkiyeInsurance

Allianz AustraliaInsurance

Allianz Broker AustraliaInsurance

Allianz Australia Personal InjuryInsurance

Allianz Australia AutomotiveInsurance

Allianz EgyptInsurance

Allianz PortugalInsurance

Allianz ArgentinaInsurance

Allianz SuisseInsurance

ElectriX.swissConsumer Services

Allianz Broker AcademyInsurance

Allianz DirectInsurance

Allianz IndonesiaInsurance

Allianz in DeutschlandInsurance

Allianz Lebensversicherungs-AGInsurance

Allianz Beratungs- und Vertriebs AGInsurance

Allianz Kunde und Markt GmbHInsurance

Allianz ONEInsurance

Allianz Versicherungs AGInsurance

Allianz Private Krankenversicherungs AGInsurance

Allianz ItaliaInsurance

PIMCO Prime Real EstateReal Estate

Allianz NederlandFinancial Services

Allianz LifeInsurance

Allianz XVenture Capital and Private Equity Principals

Allianz BelgiumInsurance

Allianz GreeceInsurance

Allianz Asia PacificInsurance

SNA LebanonInsurance

Allianz-Tiriac AsigurariInsurance

Allianz Darta SavingInsurance

Allianz ReinsuranceInsurance

Kaiser X Labs. A company of AllianzDesign Services

Allianz pojišťovna Česká republikaInsurance

Allianz IrelandInsurance

SyncierInformation Technology & Services

KOLETHE CONSULTING INC.,IT Services and IT Consulting

Allianz AyudhyaInsurance

Allianz BulgariaFinancial Services

Allianz - Slovenska poistovna, a.s.Insurance

Allianz ÖsterreichInsurance

Allianz LuxembourgInsurance

metafinanz Informationssysteme GmbHIT Services and IT Consulting

Allianz Asset ManagementFinancial Services

Allianz Hungária Zrt.Insurance

Allianz Life GhanaInsurance

Allianz Pension PartnersFinancial Services

PROJECT M MagazineFinancial Services

Allianz Zagreb d.d.Insurance

Allianz Reinsurance America, Inc.Insurance

Allianz Partners BrasilInsurance

Allianz Partners FranceInsurance

Allianz Partners TürkiyeConsumer Services

Allianz Partners EspañaInsurance

Allianz Partners MexicoInsurance

Allianz Partners PortugalInsurance

Allianz Partners APAC & MEAInsurance

Allianz Partners New ZealandInsurance

Allianz Partners UK and IrelandInsurance

Allianz Partners USAInsurance

Allianz Partners IndiaInsurance

Allianz Global Assistance CanadaInsurance

Allianz Partners DeutschlandInsurance

Allianz Partners RéunionBusiness Consulting and Services

Allianz Partners BelgiumInsurance

Allianz Partners NederlandInsurance

Allianz Partners ItalyInsurance

Allianz Partners ColombiaAdministrative and Support Services

Allianz Partners MalaysiaFinancial Services

Allianz Partners SwitzerlandInsurance

Allianz Partners Nordic & BalticsInsurance

Allianz Partners JapanFinancial Services

Allianz Partners PolskaInsurance

Loading…

Allianz Partners Australia Similar Companies

Marsh Risk

marsh.com

We help our clients and colleagues grow — and our communities thrive — by protecting and promoting possibility. We seek better ways to manage risk and define more effective paths to the right outcome. We go beyond risk to rewards for our clients, our company, our colleagues, and the communities in which we serve. Marsh Risk is a part of Marsh. Together with Mercer, Guy Carpenter, and Oliver Wyman, we help organizations build resilience and competitive advantages from every angle. With annual revenue over $24 billion and more than 90,000 colleagues in 130 countries, Marsh helps build the confidence to thrive through the power of perspective.

Blue Cross Blue Shield of Michigan

bcbsm.com

Blue Cross Blue Shield of Michigan is a nonprofit corporation and an independent licensee of the Blue Cross and Blue Shield Association. BCBSM's commitment to Michigan is what differentiates it from other health insurance companies doing business in the state. That mission has never changed. Nearly 70 years ago, Blue Cross Blue Shield of Michigan started with a purpose to provide people with the security of knowing they have health care when they need it. Today, that nonprofit mission is the same and the company is accomplishing it in many ways, including: Offering access to health care coverage for everyone, regardless of circumstances Never dropping your coverage for health reasons Partnering with the state to cover more than 32,000 children through MIChild Providing financial support to 30 free clinics statewide Contributing more money than any other company to provide Michigan with better health and health care Advocating and educating through Alliance for Advancing Nonprofit Health Care For more on the history of BCBSM, please visit our section on historical highlights: http://www.bcbsm.com/home/bcbsm/1930.shtml

Chubb

cb chubb.com

Chubb is a world leader in insurance. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. As an underwriting company, we assess, assume and manage risk with insight and discipline. We service and pay our claims fairly and promptly. The company is also defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb maintains executive offices in Zurich, New York, London, Paris and other locations, and employs approximately 40,000 people worldwide. Read our Social Media Guidelines here: https://www.chubb.com/us-en/about-chubb/chubbs-social-media-guidelines.aspx Notre section « À propos » est également disponible en français, ici: https://www.chubb.com/ca-fr/about-chubb-in-canada/a-propos-de-chubb-au-canada.aspx

Sunshine Insurance Group

cb sinosig.com

Established in July 2005, Sunshine Insurance Group has experienced sustainable development, now ranking among the Top 7 insurance groups in China, with an annual business income of $12.6 billion in 2016. Sunshine is composed of Property and Casualty Insurance, Life Insurance, Credit and Guarantee Insurance, Asset Management, Union Hospital and HFAX. In addition, Sunshine acquired the only six-star hotel Baccarat, which is located in Manhattan, New York. The vision of Sunshine is to be a financial insurance group with humanity and vitality and our mission is to let our clients enjoy more sunshine. Since establishment, Sunshine has created over 170,000 jobs, served 180 million clients and donated more than $16.7 million to charity work. Sunshine has built up strategic partnerships with world-leading insurance and finance companies, such as Swiss Re, Morgan Stanley, UBS, Blackstone Group, etc. Embracing the future, Sunshine is dedicated to a new path of development, integrating four pillars of “Data Sunshine”, “Financial Sunshine”, “Health Care Sunshine” and “International Sunshine”. Building on its strengths and remaining people-oriented and technology-driven, Sunshine welcomes talents from all over the world to fulfill their personal goals while achieving a successful career.

Munich Re

munichre.com

Munich Re is one of the world’s leading providers of reinsurance, primary insurance and insurance-related risk solutions. The group consists of the reinsurance and ERGO business segments, as well as the capital investment company MEAG. We are globally active and operate in all lines of the insurance business. Since our founding in 1880, we’ve been known for our unrivaled risk-related expertise and sound financial position. We offer customers financial protection when faced with exceptional levels of damage – from the 1906 San Francisco earthquake to the 2017 Atlantic hurricane season. We possess outstanding innovative strength, which enables us to also provide coverage for extraordinary risks such as rocket launches, renewable energies, cyber attacks, or pandemics. We’re also playing a key role in driving forward the digital transformation of the insurance industry, and in doing so have further expanded our ability to assess risks and the range of services that we offer. Our tailor-made solutions and close proximity to our customers make Munich Re one of the world’s most sought-after risk partners for businesses, institutions, and private individuals. Working at Munich Re is more than a career. It’s an invitation to tackle some of the world’s most pressing challenges. Together with our team, consisting of specialists from more than 80+ fields of expertise, we turn risks into exciting opportunities that move humanity forward. https://www.munichre.com/en/career Munich Re Careers: [email protected] Munich Re Imprint: www.munichre.com/en/service/imprint/index.html Munich Re Legal Notice: https://www.munichre.com/en/service/legal-notice/index.html Munich Re Privacy Policy: https://www.munichre.com/en/service/privacy-statement/index.html By accessing the Munich Re LinkedIn page, you agree to LinkedIn's terms and conditions and its data use policy: www.linkedin.com/legal/privacy-policy © 2000–2018 Münchener Rückversicherungs-Gesellschaft Group Communications

Groupama

cb groupama-gan-recrute.com

« Etre là pour les autres, j'ai décidé d'en faire mon métier. » Portée par nos 32 000 collaborateurs, notre campagne de communication employeur souligne ce qui nous rassemble et nous rend fiers au quotidien : notre métier, le point de départ de belles histoires, humaines avant tout. Cette campagne met l’accent sur ce qui nous différencie de nos concurrents : notre ADN mutualiste. Au sein du Groupe Groupama, l’humain et le sens sont privilégiés. Nous recrutons des personnes et pas des diplômes, de belles personnalités qui seront demain au service de nos sociétaires et clients. La signature de cette campagne « Etre là pour les autres, j’ai décidé d’en faire mon métier » résonne avec notre raison d’être « Nous sommes là pour permettre au plus grand nombre de construire leur vie en confiance. » et notre positionnement de marque. Etre là pour les autres, c'est le point de départ de notre métier. Et c'est aussi le point de départ de belles histoires qui font notre Groupe et notre identité en tant qu'employeur. Des histoires vraies pleines d'humanité. Nos collaborateurs en ont plein à raconter ! Découvrez leurs belles histoires sur www.groupama-gan-recrute.com ! Vous aussi, vous voulez donner du sens à vos compétences ? Rejoignez nous ! Et sinon, le Groupe Groupama c'est plus de 50 entreprises dans 10 pays. Vous nous connaissez au travers de nos 2 marques commerciales Groupama et Gan. Nous accompagnons nos 12 millions de sociétaires et clients à chaque moment de leur vie grâce à nos experts et à notre savoir-faire.

Vienna Insurance Group (VIG)

group.vig

Vienna Insurance Group (VIG) is the leading insurance group in the entire Central and Eastern European (CEE) region. More than 50 insurance companies and pension funds in 30 countries form a Group with a long-standing tradition, strong brands and close customer relations. Around 30,000 employees in the VIG take care of the day-to-day needs of around 33 million customers. VIG shares have been listed on the Vienna Stock Exchange since 1994, on the Prague Stock Exchange since 2008 and on the Budapest Stock Exchange since 2022. The VIG Group has an A+ rating with a positive outlook by the internationally recognised rating agency Standard & Poor’s. VIG cooperates closely with the Erste Group, the largest retail bank in Central and Eastern Europe. VIG Social Media Netiquette: https://group.vig/en/social-media-netiquette/

IAG

iag.com.au

IAG is Australia and New Zealand's largest general insurance company with a purpose to make your world a safer place, whether you are a customer, partner, employee, shareholder or part of the communities IAG serves across Australia and New Zealand. Our businesses have helped people recover from natural disasters, accidents and loss since 1851. In Australia and New Zealand we provide insurance under many leading brands, including NRMA Insurance, CGU, SGIO, SGIC and WFI; and NZI, State, AMI and Lumley Insurance (New Zealand). We also have interests in general insurance joint ventures in Malaysia and India. Increasingly, we see our role extending beyond paying claims to increasing awareness of risk, and helping communities reduce and prevent risk. We believe it is our responsibility as an industry leader to use our influence and role as a major investor, purchaser and employer for the good of everyone. For further information please visit www.iag.com.au.

Helvetia Baloise Group

helvetia-baloise.com

Helvetia Baloise is the largest multi-line insurer in Switzerland and one of the leading insurance groups in Europe. Every day, more than 22,000 employees are committed to supporting around 13 million customers with insurance, pension and financial solutions – from private individuals and SMEs to international customer groups such as speciality and reinsurance. Headquartered in Basel, Switzerland, Helvetia Baloise is active in a total of eight European markets and in the global speciality markets, combining strong Swiss roots with a clear international orientation. Helvetia Baloise creates security and opens up opportunities, both now and in the future. Through profitable growth and business activities geared towards long-term stability, we facilitate individual solutions for customers, secure an attractive and reliable investment for our shareholders, promote strong partnerships and offer our employees attractive prospects. The Helvetia Baloise Holding Ltd share (HBAN) is traded on SIX Swiss Exchange.

Loading…

NEWS

Allianz Partners Australia CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 21, 2025 07:00 AM

Health, Finances and Safety: Allianz 3am Report Reveals Biggest Personal Concerns of 2025

The Allianz 3am Report explores global worries—from health, finances, and safety to other pressing concerns—across eight countries,...

Read Article

October 21, 2025 07:00 AM

Allianz Partners urges travellers to rethink coverage as new data shows Aussies still travelling uninsured

Allianz Partners is urging Australian travellers to rethink their approach to travel insurance, following new ICA and DFAT research...

Read Article

August 10, 2025 07:00 AM

Allianz Data Breach Exposes Vulnerabilities Affecting Everyone

Data breaches are an unfortunate fact of life for all of us and can readily lead to identity theft and other harm.

Read Article

May 15, 2025 07:00 AM

Aussie SMEs rush to cyber insurance amid rising attacks

Small and mid-sized businesses across Australia are showing increasing interest in cyber insurance as they confront a rising tide of cyber threats.

Read Article

May 07, 2025 07:00 AM

Allianz Partners Launches Cruise-Specific Travel Insurance for Norwegian Cruise Line Passengers

Allianz Partners Australia has launched a new cruise-specific travel insurance product in collaboration with Norwegian Cruise Line (NCL).

Read Article

April 02, 2025 07:00 AM

Allianz Commercial Australia promotes John Whealans to head of broker partnerships

Allianz Commercial Australia has promoted John Whealans to head of broker partnerships, according to a LinkedIn update.

Read Article

February 19, 2025 08:00 AM

Australian IVF giant Genea confirms hackers ‘accessed data’ during cyberattack

Australian IVF giant Genea has disclosed a cybersecurity incident that disrupted patient services and led to the access of potentially sensitive information.

Read Article

December 02, 2024 08:00 AM

Allianz to acquire RAA’s general insurance business for $417.9m

Allianz Australia has entered a partnership with the Royal Automobile Association of South Australia (RAA) to acquire the latter's general insurance business.

Read Article

November 18, 2024 07:24 AM

Belong – global and local Allianz initiatives

At Allianz, our very name embodies our purpose. For many years, we have forged partnerships that protect homes, lives, and loved ones.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…