What is the official website of Bentayga ?

The official website of Bentayga is http://www.bentleymotors.com/en/models/bentayga.html.

What is Bentayga's cybersecurity risk score?

Bentayga has an AI-generated cybersecurity risk score of 764 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Bentayga experienced?

According to Rankiteo, Bentayga currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Bentayga been affected by any supply chain cyber incidents ?

According to Rankiteo, Bentayga has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: CARIAD (Incident ID: NISSCATOYVOLKAWAVIJAG1775680268) Dimensional Control Systems (Incident ID: DIM4992449100425) AUDI AG (Incident ID: AUDCHA1782073550)

Does Bentayga have SOC 2 Type 1 certification ?

According to Rankiteo, Bentayga is not certified under SOC 2 Type 1.

Does Bentayga have SOC 2 Type 2 certification ?

According to Rankiteo, Bentayga does not hold a SOC 2 Type 2 certification.

Does Bentayga comply with GDPR ?

According to Rankiteo, Bentayga is not listed as GDPR compliant.

Does Bentayga have PCI DSS certification ?

According to Rankiteo, Bentayga does not currently maintain PCI DSS compliance.

Does Bentayga comply with HIPAA ?

According to Rankiteo, Bentayga is not compliant with HIPAA regulations.

Does Bentayga have ISO 27001 certification ?

According to Rankiteo,Bentayga is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Bentayga operate in ?

Bentayga operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does Bentayga have ?

Bentayga employs approximately None employees people worldwide.

Does Bentayga own any subsidiaries ?

Bentayga presently has no subsidiaries across any sectors.

How many LinkedIn followers does Bentayga have ?

Bentayga's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Bentayga ?

Bentayga is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does Bentayga have a Crunchbase profile ?

No, Bentayga does not have a profile on Crunchbase.

Does Bentayga have a LinkedIn profile ?

Yes, Bentayga maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bentayga.

How many cybersecurity incidents has Bentayga experienced ?

As of August 2, 2026, Rankiteo reports that Bentayga has experienced 12 cybersecurity incidents.

How many peer or competitor companies does Bentayga have ?

Bentayga has an estimated 13,022 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Bentayga

Boost Score +25 with badge (5 left)

764

/1000

Fair

789

/1000

Fair

Bentayga Vendor Cyber Rating & Cyber Score

bentleymotors.com

Add Your Compliance Badge

Bentayga takes exquisite luxury into new territory, challenging preconceptions of what an SUV can be. It offers unrivalled comfort & refinement with total control even in the harshest of conditions.

Bentayga A.I CyberSecurity Scoring

Scoring History

Bentayga

Bentayga CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Volkswagen Group Au...

Ransomware

100

5/2026

GENVOL177915750...

Volkswagen Group

Ransomware

100

11/2025

CARIAD

NISSCATOYVOLKAW...

Bentley Motors

Ransomware

100

10/2025

SEASKOBENPORVOL...

Bentayga

Cyber Attack

10/2025

GRO310203111042...

Volkswagen

Ransomware

100

10/2025

Dimensional Con...

DIM499244910042...

AUDI AG

Cyber Attack

100

9/2025

AUDI AG

AUDCHA178207355...

Bentayga

Breach

100

8/2025

VOL225081225

Bentayga

Ransomware

9/2024

VOL233262310222...

Bentayga

Vulnerability

100

6/2024

AUD303373009092...

Bentayga

Breach

03/2021

VOL125417222

Bentayga

Breach

8/2019

VOL026072725

Bentayga

Vulnerability

100

6/2012

VOL207081225

Loading…

A.I.

Bentayga Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Bentayga

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Bentayga in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Bentayga in 2026.

Incident Types Bentayga vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Bentayga in 2026.

Incident History - Bentayga (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Bentayga Subsidiaries

Bentayga

Motor Vehicle Manufacturing

Website: http://www.bentleymotors.com/en/models/bentayga.html

Company Size: None employees

Volkswagen GroupMotor Vehicle Manufacturing

Volkswagen Group Investor RelationsMotor Vehicle Manufacturing

Volkswagen do BrasilMotor Vehicle Manufacturing

AUDI AGMotor Vehicle Manufacturing

Audi BrusselsMotor Vehicle Manufacturing

Audi Business Innovation GmbHIT Services and IT Consulting

Volkswagen RAutomotive

SKODA IndiaAutomotive

SKODA Rapid IndiaMotor Vehicle Manufacturing

Volkswagen Group Sverige AB / Volkswagen Parts Logistics Sverige ABTransportation, Logistics, Supply Chain and Storage

Distribuidora Volkswagen Central S.A. de C.V.Automotive

Volkswagen Group España DistribuciónAutomotive

MAN Diesel & TurboIndustrial Machinery Manufacturing

Audi UKMotor Vehicle Manufacturing

Volkswagen IndiaAutomotive

Volkswagen Certified Pre-ownedAutomation Machinery Manufacturing

Volkswagen MXWholesale Motor Vehicles and Parts

Volkswagen Group FranceMotor Vehicle Manufacturing

Volkswagen Group ChinaAutomotive

SAIC VOLKSWAGENMotor Vehicle Manufacturing

Volkswagen Group AustraliaMotor Vehicle Manufacturing

Volkswagen of America, IncMotor Vehicle Manufacturing

Volkswagen Group SverigeMotor Vehicle Manufacturing

Volkswagen Pon Financial ServicesFinancial Services

Volkswagen Commercial Vehicles UKAutomotive

VolkswagenJapanMotor Vehicle Manufacturing

Volkswagen Group ArgentinaMotor Vehicle Manufacturing

Volkswagen Group Italia S.p.A.Automotive

Audi ItaliaMotor Vehicle Manufacturing

Volkswagen ItaliaMotor Vehicle Manufacturing

Škoda ItaliaMotor Vehicle Manufacturing

Volkswagen Veicoli CommercialiMotor Vehicle Manufacturing

CUPRA ItaliaMotor Vehicle Manufacturing

SEAT ItaliaAutomotive

MOON POWER ItaliaUtilities

Volkswagen AutoeuropaMotor Vehicle Manufacturing

Volkswagen Financial ServicesFinancial Services

Volkswagen Financial Services | BrazilFinancial Services

Volkswagen Financial Services IrelandFinancial Services

Volkswagen Financial Services (China)Financial Services

Volkswagen Group Fleet InternationalAutomotive

Volkswagen Financial Services | ItalyFinancial Services

Volkswagen Financial Services | FranceFinancial Services

Volkswagen Financial Services | FlottenkundenFinancial Services

Volkswagen Semler Finans Danmark A/SFinancial Services

Volkswagen Financial Services AustraliaFinancial Services

VolkswagenMotor Vehicle Manufacturing

Bentley MotorsMotor Vehicle Manufacturing

Loading…

Bentayga Similar Companies

BorgWarner

borgwarner.com

As a global product leader for over 130 years, we deliver innovative and sustainable mobility solutions. Guided by our commitment to inclusion, integrity, excellence, responsibility and collaboration—and our pledge to reach carbon neutrality by 2035—we’re leading the automotive industry to a future that is cleaner, healthier and safer for all. Start your future with BorgWarner now! We are looking for dedicated, talented people to fill our manufacturing and technical facilities all over the world. For more information, please visit: https://bit.ly/WorkAtBorgWarner For legal and data protection inquiries please visit: https://www.borgwarner.com/legal Career Scam Disclaimer BorgWarner makes no representations or guarantees regarding employment opportunities listed on any third-party website. To protect against career scams, job applicants should take the necessary precautions when interviewing for and accepting employment positions allegedly offered by BorgWarner. Applicants should never provide their Social Security numbers, birth dates, credit card numbers, bank account information or other private information when communicating with prospective employers or responding to employment opportunities online. Job applicants are invited to contact BorgWarner through BorgWarner’s website to verify the authenticity of any employment opportunities.

FORVIA

forvia.com

FORVIA comprises the complementary technology and industrial strengths of Faurecia and HELLA. With over 249 industrial sites and 78 R&D centers, 150,000 people, including more than 15,000 engineers across 40+ countries, FORVIA provides a unique and comprehensive approach to the automotive challenges of today and tomorrow. Composed of 6 business groups with 24 product lines, and a strong IP portfolio of over 12,900 patents, FORVIA is focused on becoming the preferred innovation and integration partner for OEMs worldwide. FORVIA aims to be a change maker committed to foreseeing and making the mobility transformation happen.

BMW Group

bmwgroup.com

With its four brands BMW, MINI, Rolls-Royce and BMW Motorrad, the BMW Group is the world’s leading premium manufacturer of automobiles and motorcycles and also provides premium financial services. The BMW Group production network comprises over 30 production sites worldwide; the company has a global sales network in more than 140 countries. In 2024, the BMW Group sold over 2.45 million passenger vehicles and more than 210,000 motorcycles worldwide. The profit before tax in the financial year 2024 was € 11.0 billion on revenues amounting to € 142.4 billion. As of 31 December 2024, the BMW Group had a workforce of 159,104 employees. The economic success of the BMW Group has always been based on long-term thinking and responsible action. Sustainability is a key element of the BMW Group’s corporate strategy and covers all products from the supply chain and production to the end of their useful life.

Visteon Corporation

visteon.com

Visteon is advancing mobility through innovative technology solutions that enable a software-defined and electric future. With next-generation digital cockpit and electrification products, Visteon leverages the strength and agility of its global network with a local footprint to deliver a cleaner, safer and more connected vehicle experience. Headquartered in Van Buren Township, Michigan, Visteon operates in 17 countries worldwide, recorded approximately $3.76 billion in annual sales and booked $6 billion of new business in 2022.

Nissan Motor Corporation

nissan-global.com

Nissan Motor Corporation is a global car manufacturer that sells a full line of vehicles under the Nissan and INFINITI brands. Nissan’s global headquarters in Yokohama, Japan, manages operations in four regions: Japan-ASEAN, China, Americas, and AMIEO (Africa, Middle East, India, Europe & Oceania). For more information about our products, services and commitment to sustainable mobility, visit nissan-global.com. You can also follow us on Facebook, Instagram, Twitter and LinkedIn and see all our latest videos on YouTube.

PACCAR

paccar.com

PACCAR is a global technology leader in the design, manufacture and customer support of premium light-, medium- and heavy-duty trucks under the Kenworth, Peterbilt and DAF nameplates. PACCAR also designs and manufactures advanced diesel engines, provides financial services, information technology, and distributes truck parts related to its principal business. Kenworth Truck Company builds premium commercial vehicles for sale in the U.S., Canada, Mexico and Australia and for export throughout the world. Peterbilt Motors also designs, manufactures and distributes premium commercial vehicles in the US and Canada. DAF Trucks manufactures trucks in the Netherlands, Belgium, Brasil and the United Kingdom for sale throughout Western and Eastern Europe, and export to Asia, Africa, North and South America. PACCAR Parts operates a network of parts distribution centers offering aftermarket support to Kenworth, Peterbilt and DAF dealers and customers around the world. Aftermarket support includes customer call centers operating 24 hours a day throughout the year and technologically advanced systems to enhance inventory control and expedite order processing. PACCAR Financial Services provides finance, lease and insurance services to dealers and customers in more than 100 countries including a portfolio of more than 175,000 trucks and trailers and total assets in excess of $12 billion. The group includes PACCAR Leasing, a major full-service truck leasing company in North America, with a fleet of over 39,000 vehicles. Environmental responsibility is one of PACCAR’s core values. The company regularly develops new programs to help protect and preserve the environment and PACCAR has established ambitious goals to further reduce emissions and enhance fuel efficiency in its truck models.

Motherson Group

motherson.com

Motherson is a diversified global design, engineering, manufacturing and assembly (DEMA) specialist, delivering full-system solutions to customers across a wide range of industries. With a robust network of 425 state-of-the-art facilities across 44 countries, and a dedicated workforce of more than 200,000 professionals, Motherson is continually working toward its vision of being a globally preferred sustainable solutions provider for its stakeholders. The group recorded revenues of USD 21.2 billion in 2024-25 and is ranked among the top 15 automotive suppliers worldwide. As a trusted partner to OEM customers, Motherson offers an extensive, versatile product portfolio spanning the entire spectrum of the mobility industry. This includes passenger and commercial vehicles, two- and three-wheelers, rolling stock, off-highway vehicles, earthmoving, material-handling and agricultural machinery. Its product range encompasses electrical distribution systems, fully assembled vehicle interior and exterior modules, rear vision systems, moulded plastic parts and assemblies, injection moulding tools, rubber components, lighting systems, and machined metal products. Beyond the automotive sector, Motherson has strategically diversified into industries such as health and medical, aerospace, consumer electronics, logistics, and industrial IT solutions. This expansion reflects the group’s adaptability and unwavering commitment to meeting its customers' evolving needs. Motherson believes its employees are its partners in progress, its biggest asset. The organisation nurtures an environment where employees thrive as dynamic professionals and individuals. The organisation is responsive to its employees' professional aspirations and provides a range of growth opportunities, enabling them to advance professionally and to take on strategic roles within the organisation.

Royal Enfield

royalenfield.com

The oldest motorcycle brand in continuous production, Royal Enfield made its first motorcycle in 1901. A division of Eicher Motors Limited, Royal Enfield has created the mid-sized motorcycle segment in India with its unique and distinctive modern classic bikes. Royal Enfield operates in 60+ countries across the world with more than 3000 retail touch points globally, 5 CKD units (Argentina, Brazil, Colombia, Nepal, & Thailand), 3 state-of-the-art manufacturing facilities based out of Chennai, India and two technical centers - in India and in the UK. Watch Royal Enfield's incredible journey here - https://youtu.be/UvR57lwJptk

Michelin

michelin.com

Michelin is a world-leading manufacturer of life-changing composites and experiences. Pioneering materials science over more than 130 years, Michelin is uniquely positioned to make decisive contributions to human progress and a more sustainable world. Drawing on technological leadership in polymer composites, Michelin is constantly innovating to manufacture high-quality tires and components for critical applications in demanding fields as varied as mobility, construction, aeronautics, low-carbon energies, and healthcare. The care we put into our products and our intimate knowledge of consumer habits enable Michelin to offer its customers exceptional experiences, whether in terms of connected solutions and artificial intelligence for professional fleets, or for discovering the outstanding restaurants and hotels that the MICHELIN Guide recommends.

Loading…

NEWS

Bentayga CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 31, 2025 07:00 AM

Road safety: how Bentley Motors is achieving cyber security compliance

For Bentley Motors, ensuring cyber security in automotive meant achieving compliance with the UNECE WP.29 cybersecurity and software update...

Read Article

July 01, 2025 07:00 AM

Bentley and MHP ensure cyber security compliance with UNECE Vehicle Regulations

Bentley Motors have collaborated together to establish robust Cybersecurity and Software Update Management Systems (CSMS & SUMS) for the Bentley landscape.

Read Article

July 30, 2024 07:00 AM

Test-Driving The 2024 Bentley Bentayga EWB

There's luxury and then there's ultra luxury. It's hard to define a line between the two until you take a seat in a Bentley Bentayga.

Read Article

August 08, 2023 07:00 AM

2023 Bentley Bentayga EWB: The Ultimate Passenger Oasis

The 2023 Bentley Bentayga EWB Azure First Edition is undeniably of the latter breed. With an extended wheelbase that lends itself to a notably elongated...

Read Article

February 16, 2021 08:00 AM

2021 Bentley Bentayga: The Luxury SUV’s Best Feature Is Hidden

After a week of driving Bentley's luxurious vehicle, we were left most impressed by a part of the Bentayga that most everyone will never see...

Read Article

June 30, 2020 07:00 AM

2020 Bentley Bentayga Luxury SUV Launches With A V8 And Soon Hybrid

Luxury car brand Bentley has launched the redesigned second-generation Bentayga SUV, powered by V8 and soon hybrid engines and with...

Read Article

August 28, 2019 07:00 AM

Exclusive: The World's First Bulletproof Bentley SUV Includes Optional Smokescreen And Shocking Door Handles

The $500k armored Bentley Bentayga can withstand fire from high-power rifles such as AK47s and AR10s as well as the simultaneous detonation...

Read Article

April 01, 2019 07:00 AM

Test-Drive: 2019 Bentley Bentayga Blows Away All Other SUVs, For Now

The 2019 Bentayga's been tamed down from 12 cylinders to 8 for 2019; it's still a stylish, ferocious 5-star experience.

Read Article

February 18, 2019 08:00 AM

Bentley's V8-Powered Bentayga Is a Whispering Ghost of an SUV

Silence has a way of erasing stress, particularly when it's in motion. Your brain focuses alternately on the driving, the tunes,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…