What is the official website of AXA Partners Central & Eastern Europe ?

The official website of AXA Partners Central & Eastern Europe is http://www.axa-assistance.cz.

What is AXA Partners Central & Eastern Europe's cybersecurity risk score?

AXA Partners Central & Eastern Europe has an AI-generated cybersecurity risk score of 753 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has AXA Partners Central & Eastern Europe experienced?

According to Rankiteo, AXA Partners Central & Eastern Europe currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has AXA Partners Central & Eastern Europe been affected by any supply chain cyber incidents ?

According to Rankiteo, AXA Partners Central & Eastern Europe has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does AXA Partners Central & Eastern Europe have SOC 2 Type 1 certification ?

According to Rankiteo, AXA Partners Central & Eastern Europe is not certified under SOC 2 Type 1.

Does AXA Partners Central & Eastern Europe have SOC 2 Type 2 certification ?

According to Rankiteo, AXA Partners Central & Eastern Europe does not hold a SOC 2 Type 2 certification.

Does AXA Partners Central & Eastern Europe comply with GDPR ?

According to Rankiteo, AXA Partners Central & Eastern Europe is not listed as GDPR compliant.

Does AXA Partners Central & Eastern Europe have PCI DSS certification ?

According to Rankiteo, AXA Partners Central & Eastern Europe does not currently maintain PCI DSS compliance.

Does AXA Partners Central & Eastern Europe comply with HIPAA ?

According to Rankiteo, AXA Partners Central & Eastern Europe is not compliant with HIPAA regulations.

Does AXA Partners Central & Eastern Europe have ISO 27001 certification ?

According to Rankiteo,AXA Partners Central & Eastern Europe is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does AXA Partners Central & Eastern Europe operate in ?

AXA Partners Central & Eastern Europe operates primarily in the Insurance industry.

How many employees does AXA Partners Central & Eastern Europe have ?

AXA Partners Central & Eastern Europe employs approximately None employees people worldwide.

Does AXA Partners Central & Eastern Europe own any subsidiaries ?

AXA Partners Central & Eastern Europe presently has no subsidiaries across any sectors.

How many LinkedIn followers does AXA Partners Central & Eastern Europe have ?

AXA Partners Central & Eastern Europe's official LinkedIn profile has approximately 3,162 followers.

What is the NAICS classification code for AXA Partners Central & Eastern Europe ?

AXA Partners Central & Eastern Europe is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does AXA Partners Central & Eastern Europe have a Crunchbase profile ?

No, AXA Partners Central & Eastern Europe does not have a profile on Crunchbase.

Does AXA Partners Central & Eastern Europe have a LinkedIn profile ?

Yes, AXA Partners Central & Eastern Europe maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/axa-partners-cee.

How many cybersecurity incidents has AXA Partners Central & Eastern Europe experienced ?

As of August 2, 2026, Rankiteo reports that AXA Partners Central & Eastern Europe has experienced 1 cybersecurity incidents.

How many peer or competitor companies does AXA Partners Central & Eastern Europe have ?

AXA Partners Central & Eastern Europe has an estimated 15,653 peer or competitor companies worldwide.

What types of cybersecurity incidents has AXA Partners Central & Eastern Europe faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

APCEE

Boost Score +25 with badge (5 left)

753

/1000

Fair

778

/1000

Fair

AXA Partners Central & Eastern Europe Vendor Cyber Rating & Cyber Score

axa-assistance.cz

Add Your Compliance Badge

AXA Partners is an AXA transversal business unit offering a wide range of solutions in assistance services, travel and specialized insurance and credit protection. AXA Partners’ role is also to implement innovative solutions emerging from the AXA Innovation unit. Our mission is to act for human progress, combining passion with advanced expertise to protect what matters when it matters, with more than 9,000 employees at their service anywhere, anytime. Everything we do at AXA is guided by our four core values: Client first, One AXA, Integrity, Courage.

APCEE A.I CyberSecurity Scoring

Scoring History

APCEE

AXA Partners Central & Eastern Europe CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

AXA Partners Centra...

Ransomware

5/2021

AXA12312222

Loading…

A.I.

APCEE Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for APCEE

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for AXA Partners Central & Eastern Europe in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for AXA Partners Central & Eastern Europe in 2026.

Incident Types APCEE vs Insurance Industry Avg (This Year)

No incidents recorded for AXA Partners Central & Eastern Europe in 2026.

Incident History - APCEE (X = Date, Y = Severity)

Loading…

SUBSIDIARY

AXA Partners Central & Eastern Europe Subsidiaries

APCEE

Insurance

Website: http://www.axa-assistance.cz

Company Size: 201-500 employees

AXA PartnersInsurance

AXAInsurance

AXA XLInsurance

AXA en FranceInsurance

AXA GulfInsurance

Bharti AXA Life InsuranceInsurance

AXA Investment ManagersFinancial Services

AXA Group OperationsIT Services and IT Consulting

AXA ItaliaInsurance

GIG SaudiInsurance

AXA Hong Kong and MacauInsurance

AXA UKFinancial Services

AXA HealthFinancial Services

AXA Global HealthcareInsurance

AXA WealthFinancial Services

AXA Corporate SolutionsInsurance

AXA Life EuropeFinancial Services

AXA MPSInsurance

AXA Global DirectInsurance

Direct AssuranceInsurance

UNIQA PolskaInsurance

DIRECT SEGUROSInsurance

QUIXAInsurance

AXA JapanInsurance

AXA KoreaInsurance

Touring Assurances / Touring Verzekeringen (TATV)Insurance

AXA Research FundResearch Services

AXA Minmetals AssuranceInsurance

AXA Global ReInsurance

AXA Liabilities ManagersInsurance

AXA von Herz zu Herz e.V.Civic and Social Organizations

AXA MPS Financial DACFinancial Services

AXA Partners FranceInsurance

AXA Partners BeneluxInsurance

AXA Partners ColombiaInsurance

AXA Partners UK & IrelandInsurance

AXA Partners BeneluxInsurance

AXA Partners Asia, Middle-East, Turkey & AfricaInsurance

AXA Partners USInsurance

AXA Partners ItaliaInsurance

AXA Partners GermanyInsurance

Loading…

AXA Partners Central & Eastern Europe Similar Companies

Gallagher

cb linktr.ee

Gallagher, a global insurance brokerage, risk management, and consulting firm, serves communities around the globe, helping clients address risk, protecting assets, and recovering from losses. The products and services we provide keep businesses and institutions running, and enable individuals and families to face their future with confidence. Gallagher provides retail and wholesale property and casualty brokerage, alternative risk transfer services, employee benefit consulting, and actuarial services. Gallagher also offers claims and information management, risk control consulting and appraisal services, human resource consulting, and retirement services. Follow us on social: Instagram: http://instagram.com/gallagherglobal Facebook: http://www.facebook.com/GallagherGlobal Twitter: https://twitter.com/GallagherGlobal YouTube: https://www.youtube.com/GallagherGlobal

Groupama

cb groupama-gan-recrute.com

« Etre là pour les autres, j'ai décidé d'en faire mon métier. » Portée par nos 32 000 collaborateurs, notre campagne de communication employeur souligne ce qui nous rassemble et nous rend fiers au quotidien : notre métier, le point de départ de belles histoires, humaines avant tout. Cette campagne met l’accent sur ce qui nous différencie de nos concurrents : notre ADN mutualiste. Au sein du Groupe Groupama, l’humain et le sens sont privilégiés. Nous recrutons des personnes et pas des diplômes, de belles personnalités qui seront demain au service de nos sociétaires et clients. La signature de cette campagne « Etre là pour les autres, j’ai décidé d’en faire mon métier » résonne avec notre raison d’être « Nous sommes là pour permettre au plus grand nombre de construire leur vie en confiance. » et notre positionnement de marque. Etre là pour les autres, c'est le point de départ de notre métier. Et c'est aussi le point de départ de belles histoires qui font notre Groupe et notre identité en tant qu'employeur. Des histoires vraies pleines d'humanité. Nos collaborateurs en ont plein à raconter ! Découvrez leurs belles histoires sur www.groupama-gan-recrute.com ! Vous aussi, vous voulez donner du sens à vos compétences ? Rejoignez nous ! Et sinon, le Groupe Groupama c'est plus de 50 entreprises dans 10 pays. Vous nous connaissez au travers de nos 2 marques commerciales Groupama et Gan. Nous accompagnons nos 12 millions de sociétaires et clients à chaque moment de leur vie grâce à nos experts et à notre savoir-faire.

Generali

generali.com

Generali enables people to shape a safer and more sustainable future by caring for their lives and dreams. The Generali Group is one of the most significant players in the global insurance and financial products market. The Group is leader in Italy and Assicurazioni Generali, founded in 1831 in Trieste, is the Group's Parent and principal operating Company. Characterised from the very outset by a strong international outlook and now present in more than 50 Countries, Generali has consolidated its position among the world's leading insurance operators, with significant market shares in western Europe - its main area of activity - and particularly in Germany, France, Austria, Spain, Switzerland and Central and Eastern Europe. The Group has - over the last decade - set up offices in the main markets of the Far East, among which India and China; in particular, in China, just after few years of operation, it has become the leader among the insurance companies with foreign equity interests. Key figures: - We have more than 190 years of experience - We are present in more than 50 countries - We have over 87,000 employees worldwide - We manage over €863 billion assets - We had a total premium income of € 95.2 billion in 2024 - We are among the 50 smartest companies in the world according to MIT Technology Review - We are ranked 1st in Italy and 9th globally in the Top Companies for Women 2024 by Forbes and Statista

Munich Re

munichre.com

Munich Re is one of the world’s leading providers of reinsurance, primary insurance and insurance-related risk solutions. The group consists of the reinsurance and ERGO business segments, as well as the capital investment company MEAG. We are globally active and operate in all lines of the insurance business. Since our founding in 1880, we’ve been known for our unrivaled risk-related expertise and sound financial position. We offer customers financial protection when faced with exceptional levels of damage – from the 1906 San Francisco earthquake to the 2017 Atlantic hurricane season. We possess outstanding innovative strength, which enables us to also provide coverage for extraordinary risks such as rocket launches, renewable energies, cyber attacks, or pandemics. We’re also playing a key role in driving forward the digital transformation of the insurance industry, and in doing so have further expanded our ability to assess risks and the range of services that we offer. Our tailor-made solutions and close proximity to our customers make Munich Re one of the world’s most sought-after risk partners for businesses, institutions, and private individuals. Working at Munich Re is more than a career. It’s an invitation to tackle some of the world’s most pressing challenges. Together with our team, consisting of specialists from more than 80+ fields of expertise, we turn risks into exciting opportunities that move humanity forward. https://www.munichre.com/en/career Munich Re Careers: [email protected] Munich Re Imprint: www.munichre.com/en/service/imprint/index.html Munich Re Legal Notice: https://www.munichre.com/en/service/legal-notice/index.html Munich Re Privacy Policy: https://www.munichre.com/en/service/privacy-statement/index.html By accessing the Munich Re LinkedIn page, you agree to LinkedIn's terms and conditions and its data use policy: www.linkedin.com/legal/privacy-policy © 2000–2018 Münchener Rückversicherungs-Gesellschaft Group Communications

Humana

cb humana.com

Humana will never ask, nor require a candidate to provide money for work equipment and network access during the application process. If you become aware of any instances where you as a candidate are asked to provide information and do not believe it is a legitimate request from Humana or affiliate, please contact [email protected] to validate the request At Humana, our cultural foundation is aligned to helping members achieve their best health by delivering personalized, simplified, whole-person healthcare experiences. Recognizing healthcare needs continue to evolve for each person, for each family and for each community, Humana continuously creates innovative solutions and resources that help people live their healthiest lives on their terms –when and where they need it. Our employees are at the heart of making this happen and that’s why we are dedicated to building an organization of dynamic talent whose experience and passion center on putting the customer first.

MetLife

metlife.com

We live in a time of unprecedented change. A time when economies, regulations, and social safety nets are all in flux. Customers around the globe have told us they’re overwhelmed by the pace of change and are looking for a trusted partner to help them manage life’s twists and turns. MetLife is committed to being that partner. That’s why we’re transforming our business: Delivering greater value for the people we serve by becoming a simpler, more focused, and future-facing company. We’ll be introducing new ways to meet our customers’ evolving needs, with flexible products; simpler, more intuitive experiences and a range of new services. MetLife. Navigating life together. For customer service: https://www.metlife.com/support-and-manage/contact-us/ For social media notices: https://www.metlife.com/about-us/terms-and-conditions/social-media/ MetLife, Inc. (NYSE: MET), through its subsidiaries and affiliates (“MetLife”), is one of the world’s leading financial services companies, providing insurance, annuities, employee benefits and asset management to help its individual and institutional customers navigate their changing world. Founded in 1868, MetLife has operations in more than 40 markets globally and holds leading positions in the United States, Japan, Latin America, Asia, Europe and the Middle East.

Canada Life

canadalife.com

At Canada Life, we’re focused on improving the financial, physical and mental well-being of Canadians. Whether handling policy claims, help growing and protecting clients’ retirement and investment savings, providing workplace mental health support for all employers or helping build stronger communities by investing in community projects, we are committed to putting the customer first in all that we do. That trust is built on the dedication, skill and energy of our employees and advisors and their commitment to our customers and to our communities. Canada Life is a subsidiary of Great-West Lifeco Inc. and is a member of the Power Corporation group of companies.

CNO Financial Group

CNOinc.com

CNO Financial Group, Inc. (NYSE: CNO) secures the future of middle-income America. CNO provides life and health insurance, annuities, financial services, and workforce benefits solutions through our family of brands, including Bankers Life, Colonial Penn, Optavise and Washington National. Our customers work hard to save for the future, and we help protect their health, income and retirement needs with 3.2 million policies and $38 billion in total assets. Our 3,500 associates, 4,900 exclusive agents and more than 5,500 independent partner agents guide individuals, families, and businesses through a lifetime of financial decisions. We are financially strong and well positioned for continued growth. At CNO, we're looking for ambitious people who want to do more. We'll provide you with opportunities to grow your skills through challenging professional experiences in a flexible, hybrid workplace. If you're looking for a culture that encourages development, helps you reach your potential, and rewards you for your contribution, then CNO Financial Group is right for you. For more information, visit CNOinc.com.

HDFC ERGO General Insurance

hdfcergo.com

HDFC ERGO General Insurance Company Limited was promoted by erstwhile Housing Development Finance Corporation Ltd. (HDFC), India’s premier Housing Finance Institution and ERGO International AG, the primary insurance entity of Munich Re Group. Consequent to the implementation of the Scheme of Amalgamation of HDFC with and into HDFC Bank Limited, one of India’s leading private sector bank (Bank), the Company has become a subsidiary of the Bank. The Company offers complete range of general insurance products ranging from motor, health, travel, home and personal accident in the retail space and products like property, marine and liability insurance in the corporate space. With a network of branches spread across wide distribution network and a 24x7 support team, the Company has been offering seamless customer service and innovative products to its customers.

Loading…

NEWS

AXA Partners Central & Eastern Europe CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 24, 2025 08:00 AM

Telefónica and Vodafone give AXA a stake of up to 40% in its fiberco Fiberpass

Telefónica and Vodafone are adding AXA IM as a new investment partner in their Spanish fiber company Fiberpass.

Read Article

November 05, 2025 08:00 AM

Insurer sustains growth momentum, lifts insurance revenues by 23% in Q3 2025

AXA Mansard Insurance Plc, a member of the global AXA Group, has announced another strong performance for the third quarter ended September...

Read Article

November 05, 2025 08:00 AM

AXA Mansard sustains growth momentum, lifts insurance revenues by 23% to N120.53 billion in Q3 2025

AXA Mansard grew insurance revenues by 23 percent to N120.53 billion in Q3 2025, driven by strong performance across Property and Casualty,...

Read Article

October 29, 2025 07:00 AM

AXA renews multi-year partnership with Avantia

AXA UK has renewed its long-standing partnership with Avantia Group in a new multi-year agreement that will see AXA continue providing...

Read Article

October 16, 2025 07:00 AM

AXA Partners and bolttech collaborate to offer embedded insurance in Europe

AXA Partners, a part of AXA Group, and Insurtech bolttech have teamed up to roll out new embedded insurance and assistance solutions across...

Read Article

October 14, 2025 07:00 AM

bolttech partners with AXA Partners

AXA Partners has entered a long-term partnership with bolttech to deliver embedded insurance and assistance solutions across the EU, UK,...

Read Article

September 19, 2025 05:15 AM

How insurance can support business growth in an age of volatility

Insurance is no longer just about claims: it is becoming a collaborative tool for unlocking capital, securing supply chains and building long-term stability.

Read Article

September 11, 2025 07:00 AM

Movers and shakers in HR: Axa, CIPD, King’s College Hospital NHS trust and more

Our pick of recent appointments in HR includes significant shifts at the CIPD and one of the country's leading insurance firms.

Read Article

August 10, 2025 07:00 AM

AXA Partners with Hainan for NextGen Healthcare

Axa is joining forces with Hainan Boao Lecheng to create cutting-edge medical insurance models, providing customers unprecedented access to...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…