What is the official website of T V ?

The official website of T V is http://www.nothinghereyet.com.

What is T V's cybersecurity risk score?

T V has an AI-generated cybersecurity risk score of 768 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has T V experienced?

According to Rankiteo, T V currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has T V been affected by any supply chain cyber incidents ?

According to Rankiteo, T V has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Amazon Web Services (AWS) (Incident ID: HEAAMA1782153018) LiteLLM (Incident ID: LIT1783694475) SimpleHelp Ltd (Incident ID: SIM1781576629) npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) Laravel (Incident ID: LAR1782311560) Socket (Incident ID: AWSSOC1778833973) Braintrust (Incident ID: AMAUSE1778092688) Amazon Web Services (AWS) (Incident ID: LIMAMA1777312775) Vercel (Incident ID: AMAVERGITSTR1775204764) Amazon Web Services (AWS) (Incident ID: AMASTA1775118743) Aqua Security (Incident ID: AQUUSEAMASALCIS1775046662) Amazon Web Services (AWS) (Incident ID: EUR1774635987) Amazon Web Services (AWS) (Incident ID: SALAMAMICPINRED1774269319) NPM (Incident ID: GOOAMANPMGIT1773319158) Amazon Web Services (AWS) (Incident ID: RELLEX1772562253) Amazon Web Services (AWS) (Incident ID: EUR1774628727) Amazon (Incident ID: AMAAPPMIC1770935300) ConnectWise (Incident ID: SMASIMCONAMADAT1775551328) Cisco (Incident ID: CISSAI1773859283) Amazon (Incident ID: LASAMA1769009064) LinkedIn (Incident ID: LINAWS1766995316) Microsoft Security (Incident ID: AMAORAMIC1770695748) Amazon Web Services (AWS) (Incident ID: AMAAWS1770152164) Cisco (Incident ID: SAL5732257091825) Wiz (Incident ID: AMAWIZ1768515615) NPM (Incident ID: GOONPMORGGOVAPPMETTHEAWSTIKK7-1773672350) Fortinet (Incident ID: FORCISAMAJPM1767748297)

Does T V have SOC 2 Type 1 certification ?

According to Rankiteo, T V is not certified under SOC 2 Type 1.

Does T V have SOC 2 Type 2 certification ?

According to Rankiteo, T V does not hold a SOC 2 Type 2 certification.

Does T V comply with GDPR ?

According to Rankiteo, T V is not listed as GDPR compliant.

Does T V have PCI DSS certification ?

According to Rankiteo, T V does not currently maintain PCI DSS compliance.

Does T V comply with HIPAA ?

According to Rankiteo, T V is not compliant with HIPAA regulations.

Does T V have ISO 27001 certification ?

According to Rankiteo,T V is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does T V operate in ?

T V operates primarily in the IT Services and IT Consulting industry.

How many employees does T V have ?

T V employs approximately None employees people worldwide.

Does T V own any subsidiaries ?

T V presently has no subsidiaries across any sectors.

How many LinkedIn followers does T V have ?

T V's official LinkedIn profile has approximately followers.

What is the NAICS classification code for T V ?

T V is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does T V have a Crunchbase profile ?

No, T V does not have a profile on Crunchbase.

Does T V have a LinkedIn profile ?

Yes, T V maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/awstv.

How many cybersecurity incidents has T V experienced ?

As of August 2, 2026, Rankiteo reports that T V has experienced 74 cybersecurity incidents.

How many peer or competitor companies does T V have ?

T V has an estimated 41,229 peer or competitor companies worldwide.

What types of cybersecurity incidents has T V faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Vulnerability, Ransomware, Data Leak and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

T V

Boost Score +25 with badge (5 left)

768

/1000

Fair

793

/1000

Fair

T V Vendor Cyber Rating & Cyber Score

nothinghereyet.com

Add Your Compliance Badge

Coming soon.

T V A.I CyberSecurity Scoring

Scoring History

T V

T V CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Amazon Science

Vulnerability

100

7/2026

AMAORATUXROC178...

Amazon Science

Vulnerability

7/2026

ANYWINGOOAMAAUG...

Amazon

Vulnerability

6/2026

AMA1782498585

Amazon Web Services...

Vulnerability

6/2026

AMA1782541446

Amazon Web Services...

Vulnerability

6/2026

Amazon Web Serv...

HEAAMA178215301...

Amazon

Vulnerability

100

6/2026

ANTAMA178355044...

Amazon Web Services...

Vulnerability

6/2026

LiteLLM

LIT1783694475

AWS Startups

Vulnerability

100

6/2026

SimpleHelp Ltd

SIM1781576629

Amazon Web Services...

Cyber Attack

100

6/2026

GOOAMA178116664...

Amazon Web Services...

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

Amazon Science

Vulnerability

5/2026

OPEANTAMAXAI177...

Amazon Web Services...

Vulnerability

100

5/2026

Laravel

LAR1782311560

AWS for Healthcare ...

Cyber Attack

5/2026

Socket

AWSSOC177883397...

Amazon Science

Breach

5/2026

Braintrust

AMAUSE177809268...

Amazon Web Services...

Vulnerability

100

5/2026

APPGOOAMA178163...

Amazon Web Services...

Cyber Attack

4/2026

Amazon Web Serv...

LIMAMA177731277...

Amazon

Cyber Attack

4/2026

ELFTEMCOUGRUAMA...

Amazon Web Services...

Cyber Attack

4/2026

Vercel

AMAVERGITSTR177...

Amazon Web Services...

Vulnerability

100

4/2026

Amazon Web Serv...

AMASTA177511874...

AWS Partners

Vulnerability

4/2026

AWSGITSTR177516...

Amazon Web Services...

Vulnerability

100

4/2026

Aqua Security

AQUUSEAMASALCIS...

Amazon Web Services...

Vulnerability

100

3/2026

DELMICAMAFORSPL...

Amazon Web Services...

Cyber Attack

3/2026

Amazon Web Serv...

EUR1774635987

Amazon Web Services...

Vulnerability

100

3/2026

Amazon Web Serv...

SALAMAMICPINRED...

Amazon Web Services...

Vulnerability

3/2026

AMA1773707045

Amazon Web Services...

Cyber Attack

3/2026

NPM

GOOAMANPMGIT177...

Amazon Web Services...

Vulnerability

3/2026

AMA1772792723

Amazon Web Services...

Cyber Attack

100

3/2026

AMA1772678135

Amazon Web Services...

Breach

100

3/2026

Amazon Web Serv...

RELLEX177256225...

Amazon

Cyber Attack

3/2026

AMA1775744757

Amazon Web Services...

Breach

3/2026

Amazon Web Serv...

EUR1774628727

Amazon

Vulnerability

100

2/2026

Amazon

AMAAPPMIC177093...

Amazon

Cyber Attack

2/2026

ConnectWise

SMASIMCONAMADAT...

Amazon

Breach

2/2026

AMA1770339008

Amazon

Cyber Attack

2/2026

AMAINSCOIGOOFLI...

Amazon

Cyber Attack

2/2026

AMA1773987972

AWS Partners

Breach

1/2026

AWSDIGOVH176978...

Amazon

Vulnerability

100

1/2026

Cisco

CISSAI177385928...

Amazon

Cyber Attack

1/2026

Amazon

LASAMA176900906...

AWS Databases & Ana...

Cyber Attack

1/2026

HUNAWS177273537...

Amazon Web Services...

Vulnerability

100

1/2026

GOOAMAOPEANT177...

AWS Partners

Cyber Attack

12/2025

LINAWS176699531...

Amazon Web Services...

Cyber Attack

100

12/2025

Microsoft Secur...

AMAORAMIC177069...

Amazon

Vulnerability

12/2025

AMAUNIGOOWAK176...

Amazon Web Services...

Cyber Attack

100

12/2025

KUBNVITENALIAMA...

Amazon Web Services...

Breach

100

11/2025

Amazon Web Serv...

AMAAWS177015216...

Amazon Web Services...

Cyber Attack

11/2025

AMA1765965358

AWS Databases & Ana...

Cyber Attack

100

11/2025

AWS1783621498

T V

Cyber Attack

100

10/2025

AMA023220210212...

T V

Cyber Attack

9/2025

AMA409264009232...

AWS Partners

Cyber Attack

100

9/2025

Cisco

SAL573225709182...

Amazon Web Services...

Vulnerability

100

9/2025

Wiz

AMAWIZ176851561...

For Industries

Vulnerability

8/2025

NPM

GOONPMORGGOVAPP...

T V

Cyber Attack

7/2025

RIN709072225

T V

Vulnerability

6/2025

AMA505082225

T V

Ransomware

100

5/2025

AMA503215011212...

Amazon Web Services...

Vulnerability

100

12/2024

Fortinet

FORCISAMAJPM176...

T V

Vulnerability

8/2024

AMA000082124

T V

Breach

7/2024

AMA000072524

T V

Cyber Attack

100

6/2024

AMA190211910222...

T V

Breach

09/2023

WHO04111223

T V

Vulnerability

6/2023

AMA016210111072...

T V

Data Leak

10/2021

TWI19174123

Amazon Web Services...

Cyber Attack

100

6/2021

AMA1768595116

T V

Breach

100

01/2021

RIN01518622

Amazon Web Services...

Cyber Attack

100

6/2020

AMA1780793273

T V

Data Leak

01/2020

AMA21461222

T V

Data Leak

01/2020

RIN211261222

T V

Data Leak

12/2019

RIN2178523

Amazon Web Services...

Vulnerability

3/2019

AMA1781685326

Amazon

Breach

6/2018

TIKAMA176901658...

T V

Data Leak

02/2018

AMA350181223

T V

Breach

3/2017

WHO631090125

T V

Cyber Attack

01/2016

AMA0417522

Loading…

A.I.

T V Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for T V

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for T V in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for T V in 2026.

Incident Types T V vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for T V in 2026.

Incident History - T V (X = Date, Y = Severity)

Loading…

SUBSIDIARY

T V Subsidiaries

T V

IT Services and IT Consulting

Website: http://www.nothinghereyet.com

Company Size: 2-10 employees

AmazonSoftware Development

Amazon ScienceResearch Services

Whole Foods MarketRetail

Whole Planet Philanthropic Fundraising Services

Whole KidsPhilanthropy

Whole CitiesNon-profit Organizations

Amazon Lab126Computers and Electronics Manufacturing

Amazon AdsAdvertising Services

TwitchSoftware Development

Twitch AdsInternet Publishing

Amazon Fulfillment Technologies & RoboticsSoftware Development

Souq.comTechnology, Information and Internet

AudibleSoftware Development

Audible GmbHOnline Audio and Video Media

Sell on AmazonTechnology, Information and Internet

Zappos Family of CompaniesRetail

Amazon BusinessRetail

IMDb.comEntertainment Providers

GoodreadsTechnology, Information and Internet

RingComputers and Electronics Manufacturing

Amazon GamesEntertainment Providers

Amazon MusicEntertainment Providers

Transportation, Shipping, & Logistics at AmazonTransportation, Logistics, Supply Chain and Storage

Amazon PayTechnology, Information and Internet

Amazon Alexa DevelopersComputers and Electronics Manufacturing

ShopbopRetail

Amazon ClinicHospitals and Health Care

Amazon Development Center PolandSoftware Development

Amazon AssociatesTechnology, Information and Internet

Alexa AutoMotor Vehicle Manufacturing

AbeBooks, an Amazon companyTechnology, Information and Internet

Amazon DesignInternet Publishing

Alexa.comTechnology, Information and Internet

A9.comTechnology, Information and Internet

Amazon FashionRetail Apparel and Fashion

Fulfillment by AmazonWarehousing and Storage

Amazon KindleRetail

Amazon Appstore DevelopersConsumer Electronics

CurseComputer Games

Amazon LaunchpadInternet Publishing

Just Walk Out technologyRetail

Annapurna LabsComputer Networking

Quidsi Inc., a subsidiary of AmazonRetail

Wag.comManufacturing

Soap.comRetail

BeautyBar.comRetail

Casa.comRetail

YoYo.comConsumer Goods

Woot, Inc.Retail

CreateSpaceBook and Periodical Publishing

Comixology, an Amazon companyEntertainment

AWS ThinkboxSoftware Development

Amazon Ads PartnersAdvertising Services

Brilliance PublishingBook and Periodical Publishing

Amazon PharmacyRetail Pharmacies

Amazon | LiquavistaAppliances, Electrical, and Electronics Manufacturing

Amazon TodayTechnology, Information and Internet

Buy with PrimeInternet Publishing

LOVEFiLMEntertainment Providers

Amazon Web Services (AWS)IT Services and IT Consulting

AWS Training & CertificationIT Services and IT Consulting

AWS AIIT Services and IT Consulting

AWS Databases & AnalyticsIT Services and IT Consulting

Loading…

T V Similar Companies

Sutherland

sutherlandglobal.com

Artificial Intelligence. Automation. Cloud Engineering. Advanced Analytics. For Enterprises, these are key factors of success. For us, they’re our core expertise. We work with global iconic brands. We bring them a unique value proposition through market-leading technologies and business process excellence. At the heart of it all is Digital Engineering services – the foundation that powers rapid innovation and scalable business transformation. We’ve created 363 unique and independent inventions, 250 of which are AI-based and rolled up under several patent grants in critical technologies. Leveraging our advanced products and platforms, we drive digital transformation at scale, optimize critical business operations, reinvent experiences, and pioneer new solutions, all provided through a seamless “as-a-service” model. For each company, we provide new keys for their businesses, the people they work with, and the customers they serve. With proven strategies and agile execution, we don’t just enable change — we engineer digital outcomes.

SoftwareOne

softwareone.com

SoftwareOne is a global software and cloud solutions provider. With a presence in over 70 countries and a team of around 13,000 professionals, we combine global scale and local expertise to help clients optimize costs, accelerate growth, and navigate complex IT environments with confidence. Leveraging deep capabilities in cloud, software, and data and AI, the company empowers organizations to modernize, innovate, and unlock the full value of their technology investments. Headquartered in Switzerland, SoftwareOne is listed on the SIX Swiss Exchange and Euronext Oslo Børs under the ticker symbol SWON. Visit us: https://www.softwareone.com/en

eClerx

eclerx.com

eClerx is a productized services company, bringing together people, technology and domain expertise to amplify business results. Our mission is to set the benchmark for client service and success in our industry. Our vision is to be the innovation partner of choice for technology, data analytics and process management services.

Canon EMEA

canon-europe.com

We are Canon Europe. We are the world's best imaging company. This page represents our offices in Europe, the Middle East and Africa. Founded in 1937, the desire to continuously innovate has kept Canon at the forefront of imaging excellence throughout its 85-year history and has commitments to invest in the right areas and capture growth opportunities. From cameras to commercial printers, and business consultancy to healthcare technologies, Canon enriches lives and businesses through imaging innovation. Canon’s corporate philosophy is Kyosei – ‘living and working together for the common good’. In EMEA, Canon Europe pursues sustainable business growth, focusing on reducing its own environmental impact and supporting customers to reduce theirs using Canon’s products, solutions and services. Canon Europe has operations in roughly 120 countries, with approximately 13,500 employees and contributes to around a quarter of Canon’s global revenues annually.

TransUnion

transunion.com

TransUnion is a global information and insights company that makes trust possible in the modern economy. We do this by providing an actionable picture of each person so they can be reliably represented in the marketplace. As a result, businesses and consumers can transact with confidence and achieve great things. This picture is grounded in our legacy as a credit reporting agency which enables us to tap into both credit and public record data; our data fusion methodology that helps us link, match and tap into the awesome combined power of that data; and our knowledgeable and passionate team, who stewards the information with expertise, and in accordance with local legislation around the world. A leading presence in more than 30 countries across five continents, TransUnion provides solutions that help create economic opportunity, great experiences and personal empowerment for hundreds of millions of people. We call this Information for Good® — it’s our purpose, and what drives us every day. Contact Us Customer support: https://transu.co/60024D64I Business support: https://transu.co/60044D67G

HGS

hgs.cx

A global leader in optimizing the customer experience lifecycle, digital transformation, and business process management, HGS is helping its clients become more competitive every day. HGS combines automation, analytics, and artificial intelligence with deep domain expertise focusing on digital customer experiences, back-office processing, contact centers, and HRO solutions. Part of the multi-billion-dollar conglomerate Hinduja Group, HGS takes a “globally local” approach with over 18,000+ employees across 38 delivery centers in 9 countries.

Carelon Global Solutions India

carelonglobal.in

Carelon Global Solutions makes healthcare operations more practical, effective, and efficient. Our global team of more than 25K innovators drives growth, delivers exceptional support, and develops digital tools specifically for health plans, providers, and systems. Each day, our partners and experts from across the globe implement new ways to save time and money — so doctors can focus on care. Formerly known as Legato Health Technologies, Carelon Global Solutions is part of the Carelon family of brands and is a fully owned subsidiary of Elevance Health. Headquartered in the United States, Carelon Global Solutions has talented teams in India, Ireland, the Philippines, and Puerto Rico. Want to be part of something meaningful? Join our growing team. We believe that when bold talent meets limitless thinking, the possibilities are endless. As part of our India team, you’ll work alongside some of the best minds in the business to solve healthcare’s most complex challenges. You’ll be part of an exciting, fast-paced, and supportive company culture, where all associates receive: • Competitive pay. • Generous benefits. • Training, mentorship, and growth. • Hybrid workplace flexibility. • The opportunity to help others and make a difference. Follow our Carelon Global Solutions India LinkedIn page for the latest job postings and timely company news.

SoftServe

softserveinc.com

SoftServe is a premier IT consulting and digital services provider. We expand the horizon of new technologies to solve today's complex business challenges and achieve meaningful outcomes for our clients. Our boundless curiosity drives us to explore and reimagine the art of the possible. Clients confidently rely on SoftServe to architect and execute mature and innovative capabilities, such as digital engineering, data and analytics, cloud, and AI/ML. Our global reputation is gained from more than 30 years of experience delivering superior digital solutions at exceptional speed by top-tier engineering talent to enterprise industries, including high tech, financial services, healthcare, life sciences, retail, energy, and manufacturing. At SoftServe, we live by our values. Trust, teamwork, growth, innovation, willingness to help, and exceeding expectations are engrained in everything we do. We partner with major technology players, such as Google Cloud Platform, Amazon Web Services, Microsoft Azure, Salesforce, NVIDIA, MuleSoft, VMware, and Odoo, to give clients a competitive advantage in the market. Founded in 1993, our global firm is headquartered in Austin, Texas, USA, and Lviv, Ukraine. Visit our website, blog, media, and news pages for more information. Blog: softserveinc.com/blog Media: softserveinc.com/media News: softserveinc.com/news

NTT DATA Business Solutions

nttdata-solutions.com

We understand the business of our clients and know what it takes to transform it into the future. At NTT DATA Business Solutions, we drive innovation – from advisory and implementation to managed services and beyond. With SAP at our core and a powerful ecosystem of partners, we continuously improve solutions and technology to make them work for companies – and for their people. Aiming to transform, grow and become more successful? We provide you with more than in-depth expertise for SAP solutions: As your passionate partner, we connect your business opportunities with the latest technologies – and offer you a unique approach to get the job done as smoothly as possible. Our close ties to our partners give you access to innovative solutions and developments. Being part of the global NTT DATA group enables us to master any scope of project. With operations in more than 30 countries, we have enabled thousands of companies become more efficient and effective during the last three decades. Our more than 16,000 experts around the world will also accompany you on your journey toward a truly intelligent enterprise – wherever you want to start!

Loading…

NEWS

T V CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 12, 2026 08:17 AM

FBR tightens cybersecurity to protect sensitive data

FBR implements advanced security systems, geo-fencing, and real-time monitoring to protect sensitive taxpayer data from cyber attacks across...

Read Article

March 11, 2026 04:03 PM

Vietnam sets course to train 10,000 cybersecurity specialists by 2030

Vietnam launches a national plan to train 10000 cybersecurity specialists by 2030, strengthen digital security infrastructure and expand the...

Read Article

March 03, 2026 08:00 AM

Hacked traffic cams and hijacked TVs: How cyber operations supported the war against Iran

After U.S. and Israeli forces started bombing Iran, reports say cyber operations have disrupted communications, supported surveillance...

Read Article

March 02, 2026 08:00 AM

Cybersecurity experts speak on possible threats of Iranian retaliation

Cybersecurity experts speak on possible threats of Iranian retaliation ... Cybersecurity experts speak on possible threats of Iranian retaliation...

Read Article

February 26, 2026 08:00 AM

Islamabad schools to start mandatory cybersecurity training

Schools in Islamabad instructed to launch online cybersecurity courses for staff and students.

Read Article

February 20, 2026 08:00 AM

iTWire TV - We’re Losing the Cyber War: Inside ISACA’s Mission to Build the World’s Largest Cybersecurity Certification Machine

Appointed by the US Department of War as the global credentialing authority for CMMC, ISACA's Chief Global Strategy Officer Chris...

Read Article

February 20, 2026 08:00 AM

Brazil opens 25,000 new cybersecurity training places to tackle skills gap

Brazil has announced 25,000 new places in a nationwide cybersecurity training programme, as authorities step up efforts to address a growing...

Read Article

February 18, 2026 08:00 AM

Cybersecurity in BRICS countries: how digital transformation drives growth and creates new risks?

Digital transformation is becoming a new source of risk for economic growth and even national sovereignty in BRICS countries. Cybersecurity...

Read Article

February 09, 2026 08:00 AM

TV Show "Scam Interceptors": The Intersection Of Ethical Hacking And Investigative Journalism

This week in cybersecurity from the editors at Cybercrime Magazine.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…