What is the official website of Bosch Secure Truck Parking ?

The official website of Bosch Secure Truck Parking is https://www.bosch-secure-truck-parking.com/en/.

What is Bosch Secure Truck Parking's cybersecurity risk score?

Bosch Secure Truck Parking has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Bosch Secure Truck Parking experienced?

According to Rankiteo, Bosch Secure Truck Parking currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Bosch Secure Truck Parking been affected by any supply chain cyber incidents ?

According to Rankiteo, Bosch Secure Truck Parking has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Bosch Secure Truck Parking have SOC 2 Type 1 certification ?

According to Rankiteo, Bosch Secure Truck Parking is not certified under SOC 2 Type 1.

Does Bosch Secure Truck Parking have SOC 2 Type 2 certification ?

According to Rankiteo, Bosch Secure Truck Parking does not hold a SOC 2 Type 2 certification.

Does Bosch Secure Truck Parking comply with GDPR ?

According to Rankiteo, Bosch Secure Truck Parking is not listed as GDPR compliant.

Does Bosch Secure Truck Parking have PCI DSS certification ?

According to Rankiteo, Bosch Secure Truck Parking does not currently maintain PCI DSS compliance.

Does Bosch Secure Truck Parking comply with HIPAA ?

According to Rankiteo, Bosch Secure Truck Parking is not compliant with HIPAA regulations.

Does Bosch Secure Truck Parking have ISO 27001 certification ?

According to Rankiteo,Bosch Secure Truck Parking is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Bosch Secure Truck Parking operate in ?

Bosch Secure Truck Parking operates primarily in the Transportation, Logistics, Supply Chain and Storage industry.

How many employees does Bosch Secure Truck Parking have ?

Bosch Secure Truck Parking employs approximately None employees people worldwide.

Does Bosch Secure Truck Parking own any subsidiaries ?

Bosch Secure Truck Parking presently has no subsidiaries across any sectors.

How many LinkedIn followers does Bosch Secure Truck Parking have ?

Bosch Secure Truck Parking's official LinkedIn profile has approximately 1,025 followers.

What is the NAICS classification code for Bosch Secure Truck Parking ?

Bosch Secure Truck Parking is classified under the NAICS code 47, which corresponds to Transportation and Warehousing.

Does Bosch Secure Truck Parking have a Crunchbase profile ?

No, Bosch Secure Truck Parking does not have a profile on Crunchbase.

Does Bosch Secure Truck Parking have a LinkedIn profile ?

Yes, Bosch Secure Truck Parking maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bosch-secure-truck-parking.

How many cybersecurity incidents has Bosch Secure Truck Parking experienced ?

As of August 3, 2026, Rankiteo reports that Bosch Secure Truck Parking has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Bosch Secure Truck Parking have ?

Bosch Secure Truck Parking has an estimated 6,695 peer or competitor companies worldwide.

What types of cybersecurity incidents has Bosch Secure Truck Parking faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

BSTP

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Bosch Secure Truck Parking Vendor Cyber Rating & Cyber Score

bosch-secure-truck-parking.com

Add Your Compliance Badge

Bosch Secure Truck Parking is the European booking platform for secure truck parking and has over 400 parking areas in 17 countries across Europe. With Bosch Secure Truck Parking, Bosch offers a 360° solution for the digitalization and security of truck stops and rest areas: Via the booking platform and by app, freight forwarders and truck drivers can view available parking spaces along their route in real time and reserve them online. Corporate information: https://www.bosch-secure-truck-parking.com/en/terms-and-conditions/corporate-information/ Privacy statement: https://www.bosch-secure-truck-parking.com/en/terms-and-conditions/privacy-statement/

BSTP A.I CyberSecurity Scoring

Scoring History

BSTP

Bosch Secure Truck Parking CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Bosch Secure Truck ...

Breach

12/2025

BOS1764973211

Bosch

Breach

12/2025

BOS1780504416

Bosch Secure Truck ...

Vulnerability

100

1/2024

BOS334333310272...

Loading…

A.I.

BSTP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for BSTP

Incidents vs Transportation, Logistics, Supply Chain and Storage Industry Avg (This Year)

No incidents recorded for Bosch Secure Truck Parking in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Bosch Secure Truck Parking in 2026.

Incident Types BSTP vs Transportation, Logistics, Supply Chain and Storage Industry Avg (This Year)

No incidents recorded for Bosch Secure Truck Parking in 2026.

Incident History - BSTP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Bosch Secure Truck Parking Subsidiaries

BSTP

Transportation, Logistics, Supply Chain and Storage

Website: https://www.bosch-secure-truck-parking.com/en/

Company Size: 10,001+ employees

BoschSoftware Development

Bosch IndiaMotor Vehicle Manufacturing

Bosch BrasilSoftware Development

Bosch Rexroth BrasilAutomation Machinery Manufacturing

Bosch Projects do BrasilIndustrial Machinery Manufacturing

Bosch Global Software TechnologiesSoftware Development

Bosch RexrothAutomation Machinery Manufacturing

CU.BE @Bosch RexrothIndustrial Machinery Manufacturing

ctrlX OS EcosystemAutomation Machinery Manufacturing

Bosch TürkiyeIndustrial Machinery Manufacturing

Bosch Turkey Automotive TechnologyMotor Vehicle Manufacturing

Bosch Turkey Industrial TechnologyIT Services and IT Consulting

Bosch MobilityAutomotive

Bosch ÖsterreichSoftware Development

Bosch Industry ConsultingBusiness Consulting and Services

Origify Product AuthenticationTechnology, Information and Internet

Bosch USASoftware Development

Bosch Security and Safety SystemsAppliances, Electrical, and Electronics Manufacturing

Conference solutions by BoschProductie huishoudelijke apparaten en consumentenelektronica

IQSIGHTAppliances, Electrical, and Electronics Manufacturing

Bosch Middle EastIT Services and IT Consulting

Bosch PortugalSoftware Development

Projeto Safe CitiesSecurity and Investigations

INNOVATIVE CAR HMIFabricação de veículos automotores, reboques e carrocerias

Bosch Industry Consulting PortugalMechanical Or Industrial Engineering

Bosch ResearchResearch Services

Bosch MagyarországSoftware Development

Bosch ChinaIT Services and IT Consulting

Bosch RomaniaMotor Vehicle Manufacturing

Bosch Power ToolsAppliances, Electrical, and Electronics Manufacturing

Bosch Professional Power Tools and AccessoriesHerstellung von Haushalts-, Elektro- und Elektronikgeräten

Bosch Australia & New ZealandIndustrial Machinery Manufacturing

Bosch Australia Manufacturing Solutions (BAMS)Manufacturing

Bosch Home Comfort GroupRenewable Energy Semiconductor Manufacturing

Bosch Thermotechnik GmbHRenewable Energy Semiconductor Manufacturing

Bosch Hydrogen EnergyErneuerbare Energien und Halbleiterproduktion

Bosch DigitalIT Services and IT Consulting

Bosch Sensortec GmbHSemiconductor Manufacturing

Bosch FranceIndustrial Machinery Manufacturing

Bosch Home Comfort FranceIngénierie mécanique ou industrielle

Bosch Mobility Aftermarket FranceAutomotive

Bosch Rodez Manufacturing and ServicesIndustrial Machinery Manufacturing

Bosch the NetherlandsTechnology, Information and Internet

Bosch Energy and Building SolutionsElectrical Equipment Manufacturing

Bosch SwitzerlandSoftware Development

Bosch Automotive NAMotor Vehicle Manufacturing

Bosch Business InnovationsVenture Capital and Private Equity Principals

Bosch Manufacturing Solutions | BMGAutomation Machinery Manufacturing

Moehwald GmbHIndustrial Machinery Manufacturing

Bosch Manufacturing Solutions | BMG MexicoAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG Czech RepublicAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG ChinaAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG SpainMachinery Manufacturing

Bosch Manufacturing Solutions | BMG IndiaAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG USAAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG Middle EastAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG ASEANAutomation Machinery Manufacturing

Bosch NordicIT Services and IT Consulting

Bosch Connected IndustryInformation Technology & Services

Bosch Rexroth CanadaIndustrial Automation

Bosch Software InnovationsSoftware Development

Bosch Industrial PortugalIndustrial Machinery Manufacturing

Bosch VenturesVenture Capital and Private Equity Principals

Bosch PolskaIndustrial Machinery Manufacturing

Bosch UK & IrelandSoftware Development

Bosch Automotive Service Solutions UKIT Services and IT Consulting

Bosch Comercial e Industrial EspañaIndustrial Machinery Manufacturing

Junkers BoschHVAC and Refrigeration Equipment Manufacturing

Bosch JapanMotor Vehicle Manufacturing

Bosch ConnectedWorldIT Services and IT Consulting

Bosch Software FlowSoftware Development

Bosch Digital BulgariaIT Services and IT Consulting

Bosch CanadaSoftware Development

Bosch Life Safety SystemsFire Protection

CyberCompareIT Services and IT Consulting

CyberCompare Security DaysEvents Services

Bosch Digital Twin IndustriesSoftware Development

Bosch BelgiumTechnology, Information and Internet

Bosch Service SolutionsBusiness Consulting and Services

Loading…

Bosch Secure Truck Parking Similar Companies

PostNord

postnord.com

We make everyday life easier. PostNord is a leading provider of parcel and logistics services to, from, and within the Nordic region. We ensure the provision of a postal service to households and businesses in Sweden, regardless of where they live and work. PostNord connects companies, public authorities and consumers and enables business, trade and communication in the Nordic region. With our expertise and strong distribution network, we put in place the conditions for the e-commerce, distribution, logistics and communication solutions of tomorrow in the Nordic region. In 2023, the Group had around 24,500 employees and sales of SEK 39.3 billion. The Parent Company is a Swedish public limited company with Group headquarters in Solna, Sweden. Visit us at www.group.postnord.com

DB Schenker

dbschenker.com

At DB Schenker, we're not just about logistics; we're about understanding what truly matters to you. As a global leader in transportation and logistics, we're dedicated to supporting industries and businesses worldwide in the seamless exchange of goods. Our integrated approach ensures that every step of the supply chain is optimized for success, from land transport to air and ocean freight, contract logistics, and supply chain management. We operate at the heart of crucial intersections, where the flow of goods meets the demands of industry. Our top positions in automotive, technology, consumer goods, trade fair logistics, special transports, and special events logistics demonstrate our commitment to delivering tailored solutions that meet the unique needs of each sector. With a global team of over 76,100 talented individuals, DB Schenker offers unparalleled opportunities for growth and challenge. If professional development truly matters to you, then seize the chance to elevate your career in logistics and transportation by joining us now! #Logistics #WhatMattersToYou Learn more: Information about DB Schenker: https://www.dbschenker.com/global Careers at DB Schenker: https://www.dbschenker.com/global/careers Impressum & Legal notice: https://www.dbschenker.com/global/meta/legal

Lineage

onelineage.com

Lineage is one of the world’s leading temperature-controlled industrial REITs and integrated solutions providers with a global network of over 480 strategically located facilities, totaling nearly 2.9 billion cubic feet of capacity across countries in North America, Europe, and Asia-Pacific. Coupling industry-leading expertise in end-to-end logistical solutions and innovative technology, Lineage partners with the world’s largest food and beverage companies to increase distribution efficiency, advance sustainability, minimize supply chain waste, and, most importantly, help feed the world. In recognition of the company’s leading innovations and sustainability initiatives, Lineage has been named a CNBC Disruptor 50 Company for three consecutive years, twice named a US Best Managed Company, named the No. 1 Data Science company, and 23rd overall, on Fast Company’s list of The World’s Most Innovative Companies, and was included on Fortune’s Change the World list. Nasdaq: LINE

Yusen Logistics

yusen-logistics.com

Yusen Logistics is the insight-driven, customer-centric logistics partner to global business. We deliver this through an extended range of services from International Freight Forwarding and Contract Logistics to Supply Chain Solutions and Industry insights covering the full supply chain. We invest in a deep understanding of our customers' business, their customers, the challenges they face and the goals they want to achieve. Yusen Logistics has a global network linking Japan, the Americas, Europe, East Asia and South Asia & Oceania, and operates more than 650 distribution centers/offices in 46 countries and over 25.000 employees. Designing and implementing award winning solutions to complex supply chain requirements, Yusen Logistics’ skilled teams, state-of-the-art equipment and sophisticated technology deliver cost effective results with added value. Yusen Logistics delivers high performance solutions from raw materials to finished products throughout the supply chain. Working with manufacturers and retailers Yusen Logistics offers specialist expertise in: • Automotive • Aerospace • Consumer Electronics & Technology • Healthcare & Pharmaceuticals • Retail • Food Logistics Yusen Logistics works closely with customers to create enhanced solutions with the design, planning, and execution of key services including: • Global Freight Forwarding • Transportation Management • Warehousing and Distribution • End to end Supply Chains With regional headquarters in Europe, Japan, East Asia, Oceania and the Americas, Yusen Logistics’ international network covers almost every country in the world. Building on its established infrastructure Yusen Logistics is rolling out networks in emerging markets to mirror clients’ changing sourcing patterns. INSIGHT INTO ACTION. YUSEN LOGISTICS

Walmart Distribution Center

walmart.com

Saving people money so they can live better is a big job. That’s why we have one of the largest private distribution networks in the world. Each of our 42 regional U.S. distribution centers is over 1 million square feet, with more than 12 miles of conveyor belts to move 5.5 billion cases of merchandise. Some distribution centers operate 24/7 around the clock to keep the Walmart fleet rolling. It’s all designed to pass on savings to our customers and communities. Working here, you’ll be part of an unrivaled operation that’s leading the way for innovation, efficiency and safety. By joining one of the largest private fleets and distribution networks in the world, you’ll gain the training, teamwork and technology you need to move your career – and 5.5 billion cases of merchandise each year.

GEODIS

geodis.com

GEODIS is a leading global logistics provider acknowledged for its expertise across all aspects of the supply chain. As a growth partner to its clients, GEODIS specializes in four lines of business: Global Freight Forwarding, Global Contract Logistics, Distribution & Express Transport, and European Road Network. With a global network spanning nearly 170 countries and more than 49,400 employees, GEODIS is ranked no. 5 in its sector across the world. In 2022, GEODIS generated €13.7 billion in revenue. GEODIS is a company owned by SNCF group. 

PostNL

postnl.nl

Welcome! We are PostNL. Your favorite delivery service is what we want to be. Every day, over 35,000 colleagues work hard to achieve this goal, on your streets and in your neighborhood, in our sorting centers and depots, and at the office. On an average day, we deliver about 1.1 million packages and 7.4 million letters, so chances are we will meet. In addition to delivering, we're always innovating. For example, we're developing more sustainable ways of delivering and clever products and services like delivery preferences. Making your life easier, that is why we continuously work on new and improved products and services. Such as the parcel locker and convenient online services for webshops and other business customers. Will you help us be your favorite delivery service? Come join us and become a colleague! Check out our job opportunities at www.postnl.nl/werkenbij (work with us). See you soon or as we say in Dutch: tot snel!

Kuehne+Nagel

cb kuehne-nagel.com

With more than 82,000 employees at almost 1,300 sites in close to 100 countries, the Kuehne+Nagel Group is one of the world's leading logistics providers. Headquartered in Switzerland, Kuehne+Nagel is listed in the Swiss blue-chip stock market index, the SMI. The Group is the global number one in air and sea logistics and has strong market positions in road and contract logistics. Kuehne+Nagel is the logistics partner of choice for 400,000 customers worldwide. Using its global network, logistics expertise and data-based insights, the Group provides end-to-end supply chain solutions for global companies and industries.

C.H. Robinson

chrobinson.com

C.H. Robinson is the global leader in Lean AI supply chains. For more than a century, companies everywhere have looked to us to reimagine how goods move. Now, as we redefine what’s next for the industry, that same drive fuels our commitment to Building Tomorrow’s Supply Chains, Today™. Trusted by 83,000 customers and 450,000 contract carriers, we manage an unmatched 37 million shipments annually, representing $23 billion in freight. We deliver tailored solutions across the world via truckload, less-than-truckload, ocean, air, and more. With our unique combination of human insight and Lean AI working as one, supply chains move faster, smarter, and more sustainably. As a responsible global citizen, we proudly contribute millions to the causes that matter most to our employees. For more information visit www.chrobinson.com. (Nasdaq: CHRW)

Loading…

NEWS

Bosch Secure Truck Parking CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 25, 2025 07:00 AM

Driver-assistance in upheaval: Qualcomm brings fleet ADAS with Ride Pilot

Autonomous driving (road traffic), Electronics and software, Fleet and fleet management: The challenge of ADAS in commercial vehicle...

Read Article

September 19, 2025 07:00 AM

Mobility transition: Desay SV as a 'Hidden Champion' for interior electronics

Autonomous driving (road traffic), Suppliers, Digital, trends, science and research: While many OEMs rely on visible technology, Desay SV...

Read Article

July 21, 2023 07:00 AM

Bosch cloud platform unlocks operational efficiencies for logistics industry

by Andrea Tauschmann, Kevan Anand, Kimberly Pajtas, Alex Artamonov, Aryam Gutierrez, Florent Batard, Leo Hellwich, Scott Ferguson,...

Read Article

July 27, 2021 07:00 AM

Intelligent truck parking solution from Bosch protects driver and freight

From asphalt to apps, Bosch has implemented a connected security solution for the Frechen truck stop near the A1 to protect people and...

Read Article

May 18, 2020 07:00 AM

Smart truck parking system rolled out in Calais, France

The Bosch Secure Truck Parking booking platform has launched its first location in France, serving the busy port of Calais.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…