What is the official website of Machine Learning ?

The official website of Machine Learning is https://aws.amazon.com/machine-learning/.

What is Machine Learning's cybersecurity risk score?

Machine Learning has an AI-generated cybersecurity risk score of 752 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Machine Learning experienced?

According to Rankiteo, Machine Learning currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Machine Learning been affected by any supply chain cyber incidents ?

According to Rankiteo, Machine Learning has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Amazon Web Services (AWS) (Incident ID: HEAAMA1782153018) LiteLLM (Incident ID: LIT1783694475) SimpleHelp Ltd (Incident ID: SIM1781576629) npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) Laravel (Incident ID: LAR1782311560) Socket (Incident ID: AWSSOC1778833973) Braintrust (Incident ID: AMAUSE1778092688) Amazon Web Services (AWS) (Incident ID: LIMAMA1777312775) Vercel (Incident ID: AMAVERGITSTR1775204764) Amazon Web Services (AWS) (Incident ID: AMASTA1775118743) Aqua Security (Incident ID: AQUUSEAMASALCIS1775046662) Amazon Web Services (AWS) (Incident ID: EUR1774635987) Amazon Web Services (AWS) (Incident ID: SALAMAMICPINRED1774269319) NPM (Incident ID: GOOAMANPMGIT1773319158) Amazon Web Services (AWS) (Incident ID: RELLEX1772562253) Amazon Web Services (AWS) (Incident ID: EUR1774628727) Amazon (Incident ID: AMAAPPMIC1770935300) ConnectWise (Incident ID: SMASIMCONAMADAT1775551328) Cisco (Incident ID: CISSAI1773859283) Amazon (Incident ID: LASAMA1769009064) LinkedIn (Incident ID: LINAWS1766995316) Microsoft Security (Incident ID: AMAORAMIC1770695748) Amazon Web Services (AWS) (Incident ID: AMAAWS1770152164) Cisco (Incident ID: SAL5732257091825) Wiz (Incident ID: AMAWIZ1768515615) NPM (Incident ID: GOONPMORGGOVAPPMETTHEAWSTIKK7-1773672350) Fortinet (Incident ID: FORCISAMAJPM1767748297)

Does Machine Learning have SOC 2 Type 1 certification ?

According to Rankiteo, Machine Learning is not certified under SOC 2 Type 1.

Does Machine Learning have SOC 2 Type 2 certification ?

According to Rankiteo, Machine Learning does not hold a SOC 2 Type 2 certification.

Does Machine Learning comply with GDPR ?

According to Rankiteo, Machine Learning is not listed as GDPR compliant.

Does Machine Learning have PCI DSS certification ?

According to Rankiteo, Machine Learning does not currently maintain PCI DSS compliance.

Does Machine Learning comply with HIPAA ?

According to Rankiteo, Machine Learning is not compliant with HIPAA regulations.

Does Machine Learning have ISO 27001 certification ?

According to Rankiteo,Machine Learning is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Machine Learning operate in ?

Machine Learning operates primarily in the IT Services and IT Consulting industry.

How many employees does Machine Learning have ?

Machine Learning employs approximately None employees people worldwide.

Does Machine Learning own any subsidiaries ?

Machine Learning presently has no subsidiaries across any sectors.

How many LinkedIn followers does Machine Learning have ?

Machine Learning's official LinkedIn profile has approximately 1,322 followers.

What is the NAICS classification code for Machine Learning ?

Machine Learning is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Machine Learning have a Crunchbase profile ?

No, Machine Learning does not have a profile on Crunchbase.

Does Machine Learning have a LinkedIn profile ?

Yes, Machine Learning maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/awsmachinelearning.

How many cybersecurity incidents has Machine Learning experienced ?

As of August 2, 2026, Rankiteo reports that Machine Learning has experienced 74 cybersecurity incidents.

How many peer or competitor companies does Machine Learning have ?

Machine Learning has an estimated 41,229 peer or competitor companies worldwide.

What types of cybersecurity incidents has Machine Learning faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Vulnerability, Ransomware, Data Leak and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Machine Learning

Boost Score +25 with badge (5 left)

752

/1000

Fair

777

/1000

Fair

Machine Learning Vendor Cyber Rating & Cyber Score

amazon.com

Add Your Compliance Badge

Machine Learning A.I CyberSecurity Scoring

Scoring History

Machine Learning

Machine Learning CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Amazon Science

Vulnerability

100

7/2026

AMAORATUXROC178...

Amazon Science

Vulnerability

7/2026

ANYWINGOOAMAAUG...

Amazon

Vulnerability

6/2026

AMA1782498585

Amazon Web Services...

Vulnerability

6/2026

AMA1782541446

Amazon Web Services...

Vulnerability

6/2026

Amazon Web Serv...

HEAAMA178215301...

Amazon

Vulnerability

100

6/2026

ANTAMA178355044...

Amazon Web Services...

Vulnerability

6/2026

LiteLLM

LIT1783694475

AWS Startups

Vulnerability

100

6/2026

SimpleHelp Ltd

SIM1781576629

Amazon Web Services...

Cyber Attack

100

6/2026

GOOAMA178116664...

Amazon Web Services...

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

Amazon Science

Vulnerability

5/2026

OPEANTAMAXAI177...

Amazon Web Services...

Vulnerability

100

5/2026

Laravel

LAR1782311560

AWS for Healthcare ...

Cyber Attack

5/2026

Socket

AWSSOC177883397...

Amazon Science

Breach

5/2026

Braintrust

AMAUSE177809268...

Amazon Web Services...

Vulnerability

100

5/2026

APPGOOAMA178163...

Amazon Web Services...

Cyber Attack

4/2026

Amazon Web Serv...

LIMAMA177731277...

Amazon

Cyber Attack

4/2026

ELFTEMCOUGRUAMA...

Amazon Web Services...

Cyber Attack

4/2026

Vercel

AMAVERGITSTR177...

Amazon Web Services...

Vulnerability

100

4/2026

Amazon Web Serv...

AMASTA177511874...

AWS Partners

Vulnerability

4/2026

AWSGITSTR177516...

Amazon Web Services...

Vulnerability

100

4/2026

Aqua Security

AQUUSEAMASALCIS...

Amazon Web Services...

Vulnerability

100

3/2026

DELMICAMAFORSPL...

Amazon Web Services...

Cyber Attack

3/2026

Amazon Web Serv...

EUR1774635987

Amazon Web Services...

Vulnerability

100

3/2026

Amazon Web Serv...

SALAMAMICPINRED...

Amazon Web Services...

Vulnerability

3/2026

AMA1773707045

Amazon Web Services...

Cyber Attack

3/2026

NPM

GOOAMANPMGIT177...

Amazon Web Services...

Vulnerability

3/2026

AMA1772792723

Amazon Web Services...

Cyber Attack

100

3/2026

AMA1772678135

Amazon Web Services...

Breach

100

3/2026

Amazon Web Serv...

RELLEX177256225...

Amazon

Cyber Attack

3/2026

AMA1775744757

Amazon Web Services...

Breach

3/2026

Amazon Web Serv...

EUR1774628727

Amazon

Vulnerability

100

2/2026

Amazon

AMAAPPMIC177093...

Amazon

Cyber Attack

2/2026

ConnectWise

SMASIMCONAMADAT...

Amazon

Breach

2/2026

AMA1770339008

Amazon

Cyber Attack

2/2026

AMAINSCOIGOOFLI...

Amazon

Cyber Attack

2/2026

AMA1773987972

AWS Partners

Breach

1/2026

AWSDIGOVH176978...

Amazon

Vulnerability

100

1/2026

Cisco

CISSAI177385928...

Amazon

Cyber Attack

1/2026

Amazon

LASAMA176900906...

AWS Databases & Ana...

Cyber Attack

1/2026

HUNAWS177273537...

Amazon Web Services...

Vulnerability

100

1/2026

GOOAMAOPEANT177...

AWS Partners

Cyber Attack

12/2025

LINAWS176699531...

Amazon Web Services...

Cyber Attack

100

12/2025

Microsoft Secur...

AMAORAMIC177069...

Amazon

Vulnerability

12/2025

AMAUNIGOOWAK176...

Amazon Web Services...

Cyber Attack

100

12/2025

KUBNVITENALIAMA...

Amazon Web Services...

Breach

100

11/2025

Amazon Web Serv...

AMAAWS177015216...

Amazon Web Services...

Cyber Attack

11/2025

AMA1765965358

AWS Databases & Ana...

Cyber Attack

100

11/2025

AWS1783621498

Machine Learning

Cyber Attack

100

10/2025

AMA023220210212...

Machine Learning

Cyber Attack

9/2025

AMA409264009232...

AWS Partners

Cyber Attack

100

9/2025

Cisco

SAL573225709182...

Amazon Web Services...

Vulnerability

100

9/2025

Wiz

AMAWIZ176851561...

For Industries

Vulnerability

8/2025

NPM

GOONPMORGGOVAPP...

Machine Learning

Cyber Attack

7/2025

RIN709072225

Machine Learning

Vulnerability

6/2025

AMA505082225

Machine Learning

Ransomware

100

5/2025

AMA503215011212...

Amazon Web Services...

Vulnerability

100

12/2024

Fortinet

FORCISAMAJPM176...

Machine Learning

Vulnerability

8/2024

AMA000082124

Machine Learning

Breach

7/2024

AMA000072524

Machine Learning

Cyber Attack

100

6/2024

AMA190211910222...

Machine Learning

Breach

09/2023

WHO04111223

Machine Learning

Vulnerability

6/2023

AMA016210111072...

Machine Learning

Data Leak

10/2021

TWI19174123

Amazon Web Services...

Cyber Attack

100

6/2021

AMA1768595116

Machine Learning

Breach

100

01/2021

RIN01518622

Amazon Web Services...

Cyber Attack

100

6/2020

AMA1780793273

Machine Learning

Data Leak

01/2020

AMA21461222

Machine Learning

Data Leak

01/2020

RIN211261222

Machine Learning

Data Leak

12/2019

RIN2178523

Amazon Web Services...

Vulnerability

3/2019

AMA1781685326

Amazon

Breach

6/2018

TIKAMA176901658...

Machine Learning

Data Leak

02/2018

AMA350181223

Machine Learning

Breach

3/2017

WHO631090125

Machine Learning

Cyber Attack

01/2016

AMA0417522

Loading…

A.I.

Machine Learning Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Machine Learning

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Machine Learning in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Machine Learning in 2026.

Incident Types Machine Learning vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Machine Learning in 2026.

Incident History - Machine Learning (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Machine Learning Subsidiaries

Machine Learning

IT Services and IT Consulting

Website: https://aws.amazon.com/machine-learning/

Company Size: None employees

AmazonSoftware Development

TwitchSoftware Development

Twitch AdsInternet Publishing

Whole Foods MarketRetail

Whole Planet Philanthropic Fundraising Services

Whole KidsPhilanthropy

Whole CitiesNon-profit Organizations

Amazon ScienceResearch Services

Amazon AdsAdvertising Services

Amazon Lab126Computers and Electronics Manufacturing

Souq.comTechnology, Information and Internet

GoodreadsTechnology, Information and Internet

Amazon Fulfillment Technologies & RoboticsSoftware Development

Zappos Family of CompaniesRetail

IMDb.comEntertainment Providers

AudibleSoftware Development

Audible GmbHOnline Audio and Video Media

Sell on AmazonTechnology, Information and Internet

Amazon GamesEntertainment Providers

Amazon PayTechnology, Information and Internet

Amazon MusicEntertainment Providers

ShopbopRetail

Amazon BusinessRetail

Amazon DesignInternet Publishing

RingComputers and Electronics Manufacturing

Amazon ClinicHospitals and Health Care

Amazon AssociatesTechnology, Information and Internet

Alexa AutoMotor Vehicle Manufacturing

A9.comTechnology, Information and Internet

Alexa.comTechnology, Information and Internet

Amazon KindleRetail

Amazon Development Center PolandSoftware Development

Amazon Alexa DevelopersComputers and Electronics Manufacturing

Transportation, Shipping, & Logistics at AmazonTransportation, Logistics, Supply Chain and Storage

Amazon FashionRetail Apparel and Fashion

Fulfillment by AmazonWarehousing and Storage

Amazon Appstore DevelopersConsumer Electronics

Amazon LaunchpadInternet Publishing

AbeBooks, an Amazon companyTechnology, Information and Internet

CurseComputer Games

Just Walk Out technologyRetail

Woot, Inc.Retail

Quidsi Inc., a subsidiary of AmazonRetail

Wag.comManufacturing

Soap.comRetail

BeautyBar.comRetail

Casa.comRetail

YoYo.comConsumer Goods

Buy with PrimeInternet Publishing

Comixology, an Amazon companyEntertainment

Annapurna LabsComputer Networking

AWS ThinkboxSoftware Development

CreateSpaceBook and Periodical Publishing

Amazon | LiquavistaAppliances, Electrical, and Electronics Manufacturing

Amazon PharmacyRetail Pharmacies

LOVEFiLMEntertainment Providers

Amazon Ads PartnersAdvertising Services

Amazon TodayTechnology, Information and Internet

Brilliance PublishingBook and Periodical Publishing

Amazon Web Services (AWS)IT Services and IT Consulting

AWS Training & CertificationIT Services and IT Consulting

AWS AIIT Services and IT Consulting

AWS CareersIT Services and IT Consulting

AWS Machine LearningIT Services and IT Consulting

AWS Executive InsightsInformation Technology & Services

Loading…

Machine Learning Similar Companies

Neobpo

www.neobpo

Somos especializados em integrar tecnologia com inteligência humana, oferecendo soluções digitais que promovem transformação e eficiência operacional. Nosso foco é gerar valor por meio de resultados reais, utilizando inteligência digital para atender às necessidades específicas de cada cliente. Mergulhamos nos desafios de empresas que buscam inovação, modernização e escalabilidade, oferecendo soluções seguras e personalizadas para impulsionar seu crescimento. Adotamos uma abordagem consultiva ao longo de toda a jornada, identificando oportunidades estratégicas desde o primeiro contato, proporcionando soluções sob medida que combinam dados, automação e atendimento dedicado. O impacto que geramos vai além da entrega de resultados. Transformamos a forma como nossos clientes operam, melhorando sua produtividade, segurança e escalabilidade, garantindo um crescimento sustentável e criando valor mensurável para seus negócios.

TIVIT

tivit.com

TIVIT is a Brazil-based multinational company that offers enterprise-level digital solutions, and operates in ten countries in Latin America. We help our clients develop their businesses by offering industry-leading digital solutions divided into four main categories: Digital Business, Cloud Solutions, Digital Payments, and Technology Platforms. For over 19 years, we have been developing cutting-edge technology, digital solutions and hybrid-cloud-based services to help companies overcome their most demanding challenges. With proven expertise in several areas, such as payments, financial services, utilities, retail and infrastructure, TIVIT is a technologically independent company that integrates different platforms, bringing forth innovative solutions that improve our clients’ competitiveness. Eight out of Brazil’s ten biggest companies, and 100 out of the biggest 500 in Latin America rely on TIVIT’s technological expertise to bring efficiency and innovation to their businesses.

TD SYNNEX North America

tdsynnex.com

We’re TD SYNNEX (NYSE: SNX), a leading distributor and solutions aggregator for the IT ecosystem. We’re 22,000 of the IT industry’s best and brightest, who share an unwavering passion for bringing compelling technology products, services and solutions to the world. We’re an innovative partner that helps our customers maximize the value of IT investments, demonstrate business outcomes and unlock growth opportunities. At our core, we’re a company that cares. We care about our partners, our co-workers, our investors and the world around us. And we’re committed to being a diverse, inclusive employer of choice and a good corporate citizen.

CenturyLink

centurylink.com

CenturyLink (NYSE: CTL) is a technology leader delivering hybrid networking, cloud connectivity, and security solutions to customers around the world. Through its extensive global fiber network, CenturyLink provides secure and reliable services to meet the growing digital demands of businesses and consumers. CenturyLink strives to be the trusted connection to the networked world and is focused on delivering technology that enhances the customer experience. Learn more at http://news.centurylink.com/.

Persistent Systems

persistent.com

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem. Our disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 22 sequential quarters of growth with $406.2M in Q2 FY26 revenue, up 4.2% Q-o-Q and 17.6% Y-o-Y growth. Our 26,000+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries. We received ‘Growth Honor of the Year’ at Everest Group Elevate 2025 and were cited as a Leader in the Everest Group Talent Readiness for Next-generation Cloud Services PEAK Matrix® Assessment 2025. Our company fosters a values-driven and people-centric work environment that enables our employees to: - Accelerate growth, both professionally and personally - Impact the world in powerful, positive ways, using the latest technologies - Enjoy collaborative innovation, with diversity and work-life wellbeing at the core - Unlock global opportunities to work and learn with the industry’s best Let’s unleash your full potential at Persistent - persistent.com/careers

Tata Elxsi

tataelxsi.com

Tata Elxsi is amongst the world’s leading providers of design and technology services across industries, including Automotive, Media & Entertainment, Communications, and Healthcare. Tata Elxsi is helping customers reimagine their products and services through design thinking and the application of digital technologies such as IoT (Internet of Things), Cloud, Mobility, Virtual Reality, and Artificial Intelligence. Tata Elxsi is truly home to a billion possibilities. We believe in opportunities for everyone - to be bold, and curious and seek to shape the future. Explore what’s possible, discover what you love to do, and find accelerated paths for growth. At Tata Elxsi, you matter.

Infosys BPM

infosysbpm.com

Infosys BPM Ltd., the business process management subsidiary of Infosys Ltd. (NYSE: INFY), was set up in April 2002. Infosys BPM focuses on integrated end-to-end outsourcing and delivers transformational benefits to its clients through reduced costs, ongoing productivity improvements, and process re-engineering. Infosys BPM operates in India, Poland, the Czech Republic, the Netherlands, Ireland, South Africa, Brazil, Mexico, Costa Rica, the United States, Puerto Rico, China, the Philippines, Singapore, and Australia. Infosys BPM has been consistently ranked among the leading BPM companies and has received over 60 awards and recognitions in the last 5 years from key industry bodies and forums like the International Association of Outsourcing Professionals, Outsourcing Center, SSON, and NOA, among others. Infosys BPM also has very robust people practices, as substantiated by the various HR-specific awards it has won over the years. The company has consistently been ranked among the top employers of choice, on the basis of its industry-leading HR best practices. The company’s senior leaders contribute widely to industry forums as BPO strategists.

Verizon

verizon.com

We get you. You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. You’ll find all that here. Because we empower you. We power and empower how people live, work and play by connecting them to what brings them joy. The same is true inside our walls. We do what we love — driving innovation, creativity, and impact in the world. And wherever you go, we got your back. This is a team sport. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together— lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life.

Minsait

minsait.com

We are one of the world's leading consultancies in technological services for companies and the public sector. With headquarters in Spain and presence in more than 100 countries, we combine experience in AI, data, cloud and cybersecurity to help companies and organizations generate a positive impact on society. Tech for impact #Minsait

Loading…

NEWS

Machine Learning CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 18, 2026 05:51 AM

Emerging Growth Patterns Driving Expansion in the Adversarial Machine Learning Market

The adversarial machine learning market is on the brink of remarkable expansion, driven by rapid advancements in AI applications and...

Read Article

March 18, 2026 05:39 AM

AI vs ransomware: High-stakes cybersecurity showdown

Ransomware has evolved into one of the most disruptive cyber threats globally, affecting sectors ranging from healthcare and finance to...

Read Article

March 17, 2026 01:34 PM

AI Cyberattacks Rising: How Hackers Use Machine Learning to Launch Smarter Attacks

AI cyberattacks are rapidly transforming the cybersecurity landscape, enabling attackers to automate and scale operations with unprecedented...

Read Article

March 16, 2026 09:47 PM

What is Adversarial AI? Understanding Poisoned Model Attacks As AI becomes more integrated into our daily lives and critical systems, the security of these models is more important than ever. This video explores the concept of Adversarial AI and how attacke

Read Article

March 13, 2026 02:25 AM

International Cybersecurity Agencies Issue Joint Guidance on AI and Machine Learning Supply Chain Risks

Cybersecurity agencies from eight countries have released joint guidance outlining risks and mitigation strategies for artificial...

Read Article

February 24, 2026 08:00 AM

How to Prepare for Machine Learning Security Risks

Machine learning systems are vulnerable to a variety of dangers. These include model theft, system hijacking, data poisoning, and evasion attacks.

Read Article

February 16, 2026 08:00 AM

Making sense of AI’s role in cyber security

Cyber security companies have jumped on the AI bandwagon. We look at where artificial intelligence is a useful add-on and where it poses...

Read Article

February 16, 2026 08:00 AM

Techie Tonic: The rise of next-gen security information and event management

Explore the evolution of Security Information and Event Management (SIEM) as it integrates AI and machine learning to enhance cybersecurity.

Read Article

February 14, 2026 08:00 AM

Machine Learning for Cybersecurity: Best Practices and Tips

TL;DR: Machine Learning in cybersecurity has revolutionized how organizations defend against constantly evolving threats.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…