What is the official website of Assurance Maladie - Risques professionnels ?

The official website of Assurance Maladie - Risques professionnels is https://ameli.fr/entreprise/.

What is Assurance Maladie - Risques professionnels's cybersecurity risk score?

Assurance Maladie - Risques professionnels has an AI-generated cybersecurity risk score of 757 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Assurance Maladie - Risques professionnels experienced?

According to Rankiteo, Assurance Maladie - Risques professionnels currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Assurance Maladie - Risques professionnels been affected by any supply chain cyber incidents ?

According to Rankiteo, Assurance Maladie - Risques professionnels has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Assurance Maladie - Risques professionnels have SOC 2 Type 1 certification ?

According to Rankiteo, Assurance Maladie - Risques professionnels is not certified under SOC 2 Type 1.

Does Assurance Maladie - Risques professionnels have SOC 2 Type 2 certification ?

According to Rankiteo, Assurance Maladie - Risques professionnels does not hold a SOC 2 Type 2 certification.

Does Assurance Maladie - Risques professionnels comply with GDPR ?

According to Rankiteo, Assurance Maladie - Risques professionnels is not listed as GDPR compliant.

Does Assurance Maladie - Risques professionnels have PCI DSS certification ?

According to Rankiteo, Assurance Maladie - Risques professionnels does not currently maintain PCI DSS compliance.

Does Assurance Maladie - Risques professionnels comply with HIPAA ?

According to Rankiteo, Assurance Maladie - Risques professionnels is not compliant with HIPAA regulations.

Does Assurance Maladie - Risques professionnels have ISO 27001 certification ?

According to Rankiteo,Assurance Maladie - Risques professionnels is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Assurance Maladie - Risques professionnels operate in ?

Assurance Maladie - Risques professionnels operates primarily in the Government Administration industry.

How many employees does Assurance Maladie - Risques professionnels have ?

Assurance Maladie - Risques professionnels employs approximately 11 people worldwide.

Does Assurance Maladie - Risques professionnels own any subsidiaries ?

Assurance Maladie - Risques professionnels presently has no subsidiaries across any sectors.

How many LinkedIn followers does Assurance Maladie - Risques professionnels have ?

Assurance Maladie - Risques professionnels's official LinkedIn profile has approximately 24,727 followers.

What is the NAICS classification code for Assurance Maladie - Risques professionnels ?

Assurance Maladie - Risques professionnels is classified under the NAICS code 92, which corresponds to Public Administration.

Does Assurance Maladie - Risques professionnels have a Crunchbase profile ?

No, Assurance Maladie - Risques professionnels does not have a profile on Crunchbase.

Does Assurance Maladie - Risques professionnels have a LinkedIn profile ?

Yes, Assurance Maladie - Risques professionnels maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/assurancemaladie-risquesprofessionnels.

How many cybersecurity incidents has Assurance Maladie - Risques professionnels experienced ?

As of August 2, 2026, Rankiteo reports that Assurance Maladie - Risques professionnels has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Assurance Maladie - Risques professionnels have ?

Assurance Maladie - Risques professionnels has an estimated 13,105 peer or competitor companies worldwide.

What types of cybersecurity incidents has Assurance Maladie - Risques professionnels faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

AMRP

Boost Score +25 with badge (5 left)

757

/1000

Fair

782

/1000

Fair

Assurance Maladie - Risques professionnels Vendor Cyber Rating & Cyber Score

ameli.fr

Add Your Compliance Badge

L’Assurance Maladie - Risques professionnels garantit la santé et la sécurité des 18,4 millions de salariés travaillant dans 2,2 millions d’entreprises.

AMRP A.I CyberSecurity Scoring

Scoring History

AMRP

Assurance Maladie - Risques professionnels CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Assurance Maladie -...

Breach

03/2022

ASS133730422

Assurance Maladie -...

Breach

03/2022

CNA1491522

Loading…

A.I.

AMRP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for AMRP

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Assurance Maladie - Risques professionnels in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Assurance Maladie - Risques professionnels in 2026.

Incident Types AMRP vs Government Administration Industry Avg (This Year)

No incidents recorded for Assurance Maladie - Risques professionnels in 2026.

Incident History - AMRP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Assurance Maladie - Risques professionnels Subsidiaries

AMRP

Government Administration

Website: https://ameli.fr/entreprise/

Company Size: 11

113

Assurance MaladieGovernment Administration

Sécurité socialeGovernment Administration

CGSS Réunion Government Administration

L'Assurance retraiteGovernment Administration

CnavGovernment Administration

Carsat Hauts-de-FranceGovernment Administration

Carsat Rhône AlpesGovernment Administration

Carsat Sud-EstGovernment Administration

Carsat Pays de la LoireGovernment Administration

Carsat NormandieGovernment Administration

CARSAT AquitaineGovernment Administration

Carsat Alsace Moselle Government Administration

Carsat BretagneGovernment Administration

Carsat Nord-EstGovernment Administration

Carsat AuvergneGovernment Administration

UCANSSGovernment Administration

Institut 4.10Professional Training and Coaching

Caf du GardGovernment Administration

ACOSSGovernment Administration

Urssaf Ile-de-FranceGovernment Administration

Urssaf PacaGovernment Administration

Urssaf Pays de la LoireGovernment Administration

Urssaf Nord - Pas-de-CalaisGovernment Administration

Urssaf PicardieGovernment Administration

Urssaf AlsaceGovernment Administration

Urssaf BretagneGovernment Administration

Urssaf Champagne-ArdenneGovernment Administration

Urssaf Languedoc-RoussillonGovernment Administration

Urssaf Poitou-CharentesGovernment Administration

Urssaf Franche-ComtéGovernment Administration

Urssaf BourgogneGovernment Administration

Urssaf CorseGovernment Administration

Carsat Midi-PyrénéesGovernment Administration

Caf du Pas-de-CalaisGovernment Administration

CGSS de Guadeloupe et de Saint-MartinGovernment Administration

RSIGovernment Administration

CamiegGovernment Administration

Caf de l'OiseGovernment Administration

Caf de l'HéraultGovernment Administration

Caf de la Haute-GaronneGovernment Administration

CPAM de la Haute-Garonne (Assurance Maladie)Government Administration

CPAM des Bouches-du-Rhône (Assurance Maladie)Government Administration

CPAM du Bas-Rhin (Assurance Maladie)Government Administration

CPAM de Paris (Assurance Maladie)Government Administration

CPAM de la Côte-d’Or (Assurance Maladie) Government Administration

CPAM des YvelinesGovernment Administration

CPAM de Roubaix-Tourcoing (Assurance Maladie)Government Administration

Assurance Maladie de la VendéeGovernment Administration

CPAM du Hainaut (Assurance Maladie) Government Administration

CPAM de Meurthe-et-Moselle (Assurance Maladie)Government Administration

CPAM de MoselleGovernment Administration

CPAM de Haute-Savoie Government Administration

Assurance Maladie de l'EssonneGovernment Administration

CPAM du Cher (Assurance Maladie)Government Administration

CPAM de Maine-et-Loire (Assurance Maladie)Government Administration

CPAM Alpes-Maritimes (Assurance Maladie)Government Administration

CPAM des Flandres (Assurance Maladie)Government Administration

Assurance Maladie du LoiretGovernment Administration

Cpam de la Loire (Assurance Maladie)Government Administration

CPAM du Doubs (Assurance Maladie)Government Administration

CPAM de la Drôme (Assurance Maladie)Government Administration

Actu Employeurs - CPAM de la DrômeServices et conseil aux entreprises

Assurance Maladie de l'IndreGovernment Administration

News Entreprises 36Administration publique

CPAM de Loir-et-Cher (Assurance Maladie)Government Administration

CPAM de la Vienne (Assurance Maladie)Government Administration

CPAM des Pyrénées-Orientales (Assurance Maladie)Government Administration

CPAM de la Savoie (Assurance Maladie)Government Administration

Assurance Maladie des Côtes d'ArmorGovernment Administration

CPAM d'Indre-et-LoireGovernment Administration

Assurance Maladie de la MancheGovernment Administration

Assurance Maladie du Tarn (CPAM)Government Administration

CPAM de l'AinGovernment Administration

CPAM des Landes (Assurance Maladie)Government Administration

Assurance Maladie de l'OrneGovernment Administration

CPAM de l'AllierInsurance

CPAM de l'Ardèche (Assurance Maladie)Government Administration

CPAM du Haut-Rhin (Assurance Maladie)Government Administration

CPAM de Saône-et-Loire (Assurance Maladie)Government Administration

CPAM de la Charente (Assurance Maladie)Government Administration

Assurance Maladie de la Charente-MaritimeGovernment Administration

Assurance Maladie du Tarn et Garonne (CPAM)Government Administration

Accélérateur 51 Government Administration

Assurance Maladie Ille-et-Vilaine (Cpam)Government Administration

Direction régionale du service médical (DRSM) Centre-Val de LoireGovernment Administration

Assurance Maladie de l'Aude (cpam Aude)Government Administration

Grandir Ensemble Assurance Maladie AudeAdministration publique

Assurance Maladie Rouen-Elbeuf-Dieppe Seine-MaritimeGovernment Administration

CPAM de la Haute-VienneGovernment Administration

CPAM de Lille-Douai Government Administration

CPAM d'Eure-et-LoirGovernment Administration

CNAMGovernment Administration

CPAM de l'Ariège (Assurance Maladie)Government Administration

CPAM du Cantal (Assurance Maladie)Government Administration

Assurance Maladie du Gers (CPAM)Government Administration

Assurance Maladie du Morbihan (Cpam)Government Administration

Caisse Primaire d’Assurance Maladie (CPAM) de l’OiseGovernment Administration

Assurance Maladie de Loire-Atlantique (CPAM)Government Administration

CPAM de Seine-et-Marne (Assurance Maladie)Government Administration

Centre de Médecine Préventive (Assurance Maladie)Government Administration

CPAM de la GirondeGovernment Administration

CPAM de la Sarthe (Assurance Maladie)Government Administration

CPAM de l'Hérault (Assurance Maladie)Government Administration

CramifGovernment Administration

CPAM du Val-d'OiseGovernment Administration

Service Relation Employeurs du Val-d'OiseAdministration publique

CPAM du Var (Assurance Maladie)Government Administration

CPAM du Val-de-MarneGovernment Administration

UGECAM Ile-de-FranceHospitals and Health Care

CPAM du RhôneGovernment Administration

CPAM de la Côte d'Opale (Assurance Maladie) Government Administration

CPAM des Deux-Sèvres (Assurance Maladie)Government Administration

Direction Régionale du Service Médical Nouvelle-AquitaineGovernment Administration

Loading…

Assurance Maladie - Risques professionnels Similar Companies

State of Minnesota

mn.gov

Minnesota State Government is the third largest employer in the state of Minnesota, employing over 50,000 diverse and talented employees in more than 100 state agencies, boards, commissions, colleges, and universities. Our workplaces can be found across the state in 86 out of 87 Minnesota counties and a small share of employees work in out-of-state locations. When you bring your career to the State of Minnesota, the work you do affects the quality of life of millions of Minnesotans. From those who shape policy, to those who keep us safe, preserve our environment, or take care of our most vulnerable populations, we take our responsibilities to the public seriously. Join us as we continue to serve our great state and build a better Minnesota. To learn more about our career opportunities and comprehensive benefits, visit www.mn.gov/careers. To learn more about our state agencies, boards, commissions, colleges, and universities, visit http://mn.gov/portal/government/state/agencies-boards-commissions.

Social Security Administration

ssa.gov

Social Security provides financial protection for our nation’s people, supporting more than 64 million individuals and families. With retirement, disability, and survivors benefits, Social Security is one of the most successful anti-poverty programs in our nation's history. We are there throughout life’s journey, helping secure today and tomorrow. We are one of the largest independent agencies in government, with over 58,000 team members throughout the country. Our talented workforce includes employees who serve customers directly, as well as those who support their work in diverse fields. Through compassion and dedication, our team members help promote the economic security of the country. They are the heart of our agency, providing high-quality, personalized service to people in their communities, nationwide, and even living abroad. Our workforce is our greatest strength at SSA. We place high priority on developing, engaging, and empowering our team members. Through career development programs, our team members have access to a wide range of training and professional development opportunities. We rely on our team members’ feedback to improve how we administer our programs and to create an environment of trust and cooperation across our organization. We also offer an excellent benefits package to our team members. To learn more about a career with SSA, visit SSA.gov/careers.

USDA

usda.gov

The United States Department of Agriculture is the United States federal executive department responsible for developing and executing U.S. federal government policy on farming, agriculture, and food. It aims to meet the needs of farmers and ranchers, promote agricultural trade and production, work to assure food safety, protect natural resources, foster rural communities and end hunger in the United States and abroad.

NOAA: National Oceanic & Atmospheric Administration

cb noaa.gov

Welcome! We're the National Oceanic & Atmospheric Administration or NOAA. From daily weather forecasts, severe storm warnings and climate monitoring to fisheries management, coastal restoration and supporting marine commerce, our products and services support economic vitality and affect more than one-third of America’s gross domestic product. NOAA’s dedicated scientists use cutting-edge research and high-tech instrumentation to provide citizens, planners, emergency managers and other decision makers with reliable information they need when they need it. *Looking for your official local weather forecast? Enter your zip code at www.weather.gov or mobile.weather.gov for mobile device users. *Interested in working for NOAA? Find job openings by typing "NOAA" in the search field at www.USAjobs.gov. Connect with us on social media: X: @NOAA Bluesky: noaa.gov Facebook: www.facebook.com/noaa Instagram: www.instagram.com/noaa YouTube: www.youtube.com/noaa LinkedIn: www.linkedin.com/company/noaa For a list of NOAA's major social media channels by mission area, please visit www.noaa.gov/stay-connected

Council Careers Victoria

asn.au

Victorian local government jobs offer opportunities for people with diverse skills. The sector delivers more than 100 services and employs staff in the areas of health and community care, corporate and business support, engineering, planning and community development, and environment and emergency management. Local government offers you the opportunity to: • work directly with the community • work in any location across the state • be involved in on-going learning and development • negotiate flexible working arrangements • take part in employee health and recreation programs • undertake further study.

National Institute of Statistics and Geography of Mexico (INEGI)

inegi.org.mx

The National Institute of Statistics and Geography of Mexico (INEGI) is an autonomous institution of the Federal Public Sector. INEGI is the coordinator of the National System of Statistical and Geographical Information of Mexico. The main objective of INEGI is to provide statistical and geographical information to the state and to the society of Mexico, in order to contribute to national development under the principles of accessibility, transparency, objectivity and independence.

Region Midtjylland

regionmidtjylland.dk

Central Denmark Region is one of five regions in Denmark. Denmark is organised at three political and administrative levels: the national (government), the regional (5 regions) and the municipal level (98 municipalities). Each region is led by a Regional Council, consisting of 41 politicians elected every four years. The regions' responsibilities are within the areas of health, psychiatry, social og regional development. The region must secure the overall strategy and at the same time top quality services; be it in the personal educational contact at institutions or when a patient needs nerve fibre surgery. Facts - Central Denmark Region Central Denmark Region covers 19 municipalities and an area of 13,000 square kilometres. Central Denmark Region has a population of 1.3 million people - approx. 23% of the population in Denmark. Central Denmark Region has a gross budget of 28.9 billion DKK (2019). Central Denmark Region has approx. 30.000 employees. Health, psychiatry and social The primary responsibility of Central Denmark Region is healthcare. This includes being responsible for the nine somatic hospitals and eight psychiatric hospital departments, pre-hospital emergency services, general practitioners and practising specialist doctors. The region also operates a number of specialised social care institutions in agreement with local municipalities. Regional development Central Denmark Region is also responsible for regional development within the areas of public transport/mobility, education, culture and environment (soil contamination, groundwater protection and raw materials planning).

Commonwealth of Massachusetts

mass.gov

Year after year, the Commonwealth of Massachusetts has continued to pioneer bold legislative actions and programs, some of which have been embraced on a national scale. We are always looking for talented individuals to help us maintain this momentum and improve the services that millions of people depend on every day. If you’re looking for an innovative work environment where you can really make a difference, check out the job opportunities with the Commonwealth of Massachusetts. This page is managed according to the Mass.gov social media policy: https://www.mass.gov/info-details/massgov-social-media-policy. Comments that do not follow our policy may be removed.

US Environmental Protection Agency (EPA)

cb epa.gov

U.S. Environmental Protection Agency’s (EPA) mission is to protect human health and the environment. EPA works to ensure that: - Americans have clean air, land and water; - National efforts to reduce environmental risks are based on the best available scientific information; - Federal laws protecting human health and the environment are administered and enforced fairly, effectively and as Congress intended; - Environmental stewardship is integral to U.S. policies concerning natural resources, human health, economic growth, energy, transportation, agriculture, industry, and international trade, and these factors are similarly considered in establishing environmental policy; - All parts of society--communities, individuals, businesses, and state, local and tribal governments--have access to accurate information sufficient to effectively participate in managing human health and environmental risks; - Contaminated lands and toxic sites are cleaned up by potentially responsible parties and revitalized; and - Chemicals in the marketplace are reviewed for safety. The agency was founded in 1970 and is headquartered in Washington, District of Columbia with ten additional regional headquarters offices (Boston, New York, Philadelphia, Atlanta, Chicago, Dallas, Kansas City, Denver, San Francisco, and Seattle) as well as more than a dozen laboratories, and other regional and programmatic offices.

Loading…

NEWS

Assurance Maladie - Risques professionnels CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Day of Communications and Cybersecurity Troops of the Armed Forces of Ukraine: history and significance of the holiday

Every year on August 8, Ukraine celebrates the Day of Communications Troops. These units are an important part of the Armed Forces of Ukraine.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…