What is the official website of Bosch Romania ?

The official website of Bosch Romania is https://www.bosch.ro/.

What is Bosch Romania's cybersecurity risk score?

Bosch Romania has an AI-generated cybersecurity risk score of 760 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Bosch Romania experienced?

According to Rankiteo, Bosch Romania currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Bosch Romania been affected by any supply chain cyber incidents ?

According to Rankiteo, Bosch Romania has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Bosch Romania have SOC 2 Type 1 certification ?

According to Rankiteo, Bosch Romania is not certified under SOC 2 Type 1.

Does Bosch Romania have SOC 2 Type 2 certification ?

According to Rankiteo, Bosch Romania does not hold a SOC 2 Type 2 certification.

Does Bosch Romania comply with GDPR ?

According to Rankiteo, Bosch Romania is not listed as GDPR compliant.

Does Bosch Romania have PCI DSS certification ?

According to Rankiteo, Bosch Romania does not currently maintain PCI DSS compliance.

Does Bosch Romania comply with HIPAA ?

According to Rankiteo, Bosch Romania is not compliant with HIPAA regulations.

Does Bosch Romania have ISO 27001 certification ?

According to Rankiteo,Bosch Romania is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Bosch Romania operate in ?

Bosch Romania operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does Bosch Romania have ?

Bosch Romania employs approximately 3,096 people worldwide.

Does Bosch Romania own any subsidiaries ?

Bosch Romania presently has no subsidiaries across any sectors.

How many LinkedIn followers does Bosch Romania have ?

Bosch Romania's official LinkedIn profile has approximately 128,182 followers.

What is the NAICS classification code for Bosch Romania ?

Bosch Romania is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does Bosch Romania have a Crunchbase profile ?

No, Bosch Romania does not have a profile on Crunchbase.

Does Bosch Romania have a LinkedIn profile ?

Yes, Bosch Romania maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/boschromania.

How many cybersecurity incidents has Bosch Romania experienced ?

As of August 2, 2026, Rankiteo reports that Bosch Romania has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Bosch Romania have ?

Bosch Romania has an estimated 13,022 peer or competitor companies worldwide.

What types of cybersecurity incidents has Bosch Romania faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Bosch Romania

Boost Score +25 with badge (5 left)

760

/1000

Fair

785

/1000

Fair

Bosch Romania Vendor Cyber Rating & Cyber Score

bosch.ro

Add Your Compliance Badge

The Bosch Group has been present in Romania for over 30 years and employs around 10,320 associates. The company’s headquarters is based in Bucharest where Bosch also has a sales office for its Mobility, Consumer Goods, and Energy and Building Technology business sectors. Bosch runs a research and development center located in Cluj. In Cluj, Bosch operates a production unit for automotive technology. A production unit for industrial technology and one for automotive technology are located in Blaj. Moreover, there is a Bosch Rexroth division in Blaj that focuses on the sales of drive and control technology. In Timisoara, Bosch has a center for business and technology solutions. In addition, there is a branch of BSH Hausgeräte GmbH, active

Bosch Romania A.I CyberSecurity Scoring

Scoring History

Bosch Romania

Bosch Romania CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Bosch Romania

Breach

12/2025

BOS1764973211

Bosch

Breach

12/2025

BOS1780504416

Bosch Romania

Vulnerability

100

1/2024

BOS334333310272...

Loading…

A.I.

Bosch Romania Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Bosch Romania

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Bosch Romania in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Bosch Romania in 2026.

Incident Types Bosch Romania vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Bosch Romania in 2026.

Incident History - Bosch Romania (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Bosch Romania Subsidiaries

Bosch Romania

Motor Vehicle Manufacturing

Website: https://www.bosch.ro/

Company Size: 10,000+ employees

BoschSoftware Development

Bosch Global Software TechnologiesSoftware Development

Bosch IndiaMotor Vehicle Manufacturing

Bosch BrasilSoftware Development

Bosch Rexroth BrasilAutomation Machinery Manufacturing

Bosch Projects do BrasilIndustrial Machinery Manufacturing

Bosch TürkiyeIndustrial Machinery Manufacturing

Bosch Turkey Automotive TechnologyMotor Vehicle Manufacturing

Bosch Turkey Industrial TechnologyIT Services and IT Consulting

Bosch MobilityAutomobil

Bosch USASoftware Development

Robert Bosch Tool Corporation NAManufacturing

Dremel Power ToolsConsumer Goods

Bosch RexrothAutomation Machinery Manufacturing

ctrlX OS EcosystemAutomation Machinery Manufacturing

CU.BE by Bosch RexrothHerstellung von Industriemaschinen

Bosch ChinaIT Services and IT Consulting

Bosch Security and Safety SystemsAppliances, Electrical, and Electronics Manufacturing

Conference solutions by BoschProductie huishoudelijke apparaten en consumentenelektronica

Bosch MagyarországSoftware Development

Bosch PortugalSoftware Development

Bosch Industry Consulting PortugalMechanical Or Industrial Engineering

INNOVATIVE CAR HMIFabricação de veículos automotores, reboques e carrocerias

Projeto Safe CitiesSecurity and Investigations

Bosch Australia & New ZealandIndustrial Machinery Manufacturing

Bosch Australia Manufacturing Solutions (BAMS)Manufacturing

Bosch Middle EastIT Services and IT Consulting

Bosch ResearchResearch Services

Bosch Power ToolsAppliances, Electrical, and Electronics Manufacturing

Bosch Professional Power Tools and AccessoriesHerstellung von Haushalts-, Elektro- und Elektronikgeräten

Bosch DigitalIT Services and IT Consulting

Bosch Home Comfort GroupRenewable Energy Semiconductor Manufacturing

Bosch Thermotechnik GmbHRenewable Energy Semiconductor Manufacturing

Bosch Sensortec GmbHSemiconductor Manufacturing

Bosch Service SolutionsBusiness Consulting and Services

Bosch Secure Truck ParkingTransport, Logistik, Lieferkette und Lagerhaltung

Bosch PolskaIndustrial Machinery Manufacturing

Bosch FranceIndustrial Machinery Manufacturing

Bosch Home Comfort FranceIngénierie mécanique ou industrielle

Bosch Mobility Aftermarket FranceIndustrie automobile

Bosch Rodez Manufacturing and ServicesFabrication de machines industrielles

Bosch Hydrogen EnergyErneuerbare Energien und Halbleiterproduktion

Bosch NordicIT Services and IT Consulting

Bosch Energy and Building SolutionsElectrical Equipment Manufacturing

Bosch SwitzerlandSoftware Development

Bosch Software InnovationsSoftware Development

Bosch the NetherlandsTechnology, Information and Internet

Bosch JapanMotor Vehicle Manufacturing

Bosch Connected IndustryInformation Technology & Services

Bosch UK & IrelandSoftware Development

Bosch Automotive Service Solutions UKIT Services and IT Consulting

Bosch Automotive NAMotor Vehicle Manufacturing

Bosch VenturesVenture Capital and Private Equity Principals

Bosch Rexroth CanadaIndustrial Automation

Bosch Manufacturing Solutions | BMGAutomation Machinery Manufacturing

Bosch Business InnovationsVenture Capital and Private Equity Principals

Bosch Engineering and Production ServicesBusiness Consulting and Services

Bosch ConnectedWorldIT Services and IT Consulting

Bosch Industrial PortugalIndustrial Machinery Manufacturing

Junkers BoschHVAC and Refrigeration Equipment Manufacturing

CyberCompareIT Services and IT Consulting

CyberCompare Security DaysEvents Services

Bosch BelgiumTechnology, Information and Internet

Bosch Comercial e Industrial EspañaIndustrial Machinery Manufacturing

Bosch CanadaSoftware Development

Bosch Digital BulgariaIT Services and IT Consulting

Bosch Digital Twin IndustriesSoftware Development

Bosch Software FlowSoftware Development

Bosch Life Safety SystemsFire Protection

Loading…

Bosch Romania Similar Companies

Dana Incorporated

dana.com

In a world of constant motion, life is about balance. At Dana, our balanced approach considers the people, products, and planet that sustain us all. For 120 years, we've been powering innovation to move our world. Today, over 25,000 Dana people, in more than 20 countries, advance drive and motion systems, thermal and sealing technologies, and power management innovations. Supporting traditional, hybrid, and EV manufacturers, wherever the road takes us. We're not just adapting to the future of mobility. We're shaping it. Headquartered in Maumee, Ohio, United States — Dana reported sales of $7.7 billion in 2024. We were named among the "World's Most Ethical Companies 2025” by Ethisphere and as one of "America's Most Responsible Companies 2023" by Newsweek. We’re always looking for talented people to join the Dana team. For more, please visit https://jobs.dana.com.

Porsche AG

porsche.click

“In the beginning I looked around and could not find quite the car I dreamed of. So I decided to build it myself.“ This quote by Ferry Porsche sums up everything that makes Porsche what it is. It has been our guiding star for more than 75 years. Every day, we search for the best solution with commitment, passion and enthusiasm. We courageously tread new and untested paths. Our entrepreneurial pioneering spirit makes unique solutions possible. We love challenges, act quickly and always act respectfully and fairly towards people and the environment. Driven by dreams: At Porsche we believe in the power of dreams. As different as they may be, they have one thing in common: they are what drive us. If you too want to dream and change the world, then you have come to the right place. We invite you to dream with us and together make the world more innovative, more sustainable and more colourful. What could that be like? On our website www.porsche.com/careers you can gain an insight into the Porsche working environment and experience first-hand what makes working at Porsche so fascinating. Make your own dream come true. And the dreams of millions of others. This is where you will find all our job offers based on your preferences. Take your chance and apply online: jobs.porsche.com News, background stories and more about Porsche: www.newsroom.porsche.com Legal notice: http://www.porsche.com/germany/legal-notice/ Social privacy: https://www.porsche.com/germany/social-privacy/

Continental

continental-careers.com

Continental develops pioneering technologies and services for sustainable and connected mobility of people and their goods. Founded in 1871, the technology company offers safe, efficient, intelligent and affordable solutions for vehicles, machines, traffic and transportation. In 2023, Continental generated sales of €41.4 billion and currently employs around 200,000 people in 56 countries and markets. - 💛 Our Netiquette 💛 - The purpose of our LinkedIn page is to offer information about products and solutions at Continental, about our company culture and about our actions and initiatives. Moreover, we would like to provide you with quick and easy contact for your questions and comments related to the above mentioned topics. We emphasize the importance of an appropriate and respectful style when communicating on our page and therefore we established the following community rules: - Please post only comments related to the topics covered by this page. - Treat each user in a respectful way, as you expect to be treated as well. Abusive language, aggression and bullying are not allowed on our page. We therefore reserve the right to remove posted comments or any other content from this site: - which is offensive or abusive, - includes a commercial benefit or unwanted advertising messages, - violates the rights of third parties as well as the right to intellectual property, - which is irrelevant or misleading - which is a spam (repeated duplicate posting) - for any other reason deemed necessary to create a helpful and respectful community The comments on our contributions reflect the opinion of individual users. Our LinkedIn page is frequently checked for possible violations as mentioned above. However, ongoing inspection of the content of the posted comments is not reasonable without concrete indication of a (legal) violation as mentioned above. We will immediately remove the relevant links if they are found to violate any aforementioned law or principle.

Ford Motor Company

ford.com

We don't just make history -- we make the future. Ford put the world on wheels over a century ago, and our teams are re-inventing icons and creating groundbreaking connected and electric vehicles for the next century. We believe in serving our customers, our communities, and the world. If you do, too, come move the world and make the future with us. Ford is a global company with shared ideals and a deep sense of family. From our earliest days as a pioneer of modern transportation, we have sought to make the world a better place – one that benefits lives, communities and the planet. We are here to provide the means for every person to move and pursue their dreams, serving as a bridge between personal freedom and the future of mobility. In that pursuit, our 186,000 employees around the world help to set the pace of innovation every day. Privacy Policy: https://www.ford.com/help/privacy/

Tata Motors

cb tatamotors.com

At the forefront of shaping mobility for over eight decades, driven by a legacy of innovation and an unwavering commitment to excellence. We fuse next-generation technologies with operational precision and continuous value creation — across every vehicle and process. But what truly sets us apart is our purpose: transforming lives, empowering communities, and building next-gen mobility solutions. Smart tech. Safer mobility. Greener journeys — creating a cleaner, more connected world and shaping a better future.

Ferrari

cb ferrari.com

Ferrari's story officially began in 1947 when its first road car, the 125 S, emerged from the gate of no. 4 Via Abetone Inferiore in Maranello. The iconic two-seater went on to win the Rome Grand Prix later that year and shortly thereafter was developed into a refined GT roadster. The company has travelled a long way since then, but its mission has remained unaltered: to make unique sports cars that represent the finest in Italian design and craftsmanship, both on the track and on the road. The very definition of excellence and sportiness, Ferrari needs no introduction. Its principal calling card is the numerous Formula One titles it has won: a total of 16 constructors’ championships and 15 drivers’ championships. And of course, there is the impressive lineup of legendary GT models. Cars that are unique for their design, technology and luxurious styling and that represent the best in Italian the world over.

JLR

cb jlr.com

At JLR, we create exceptional experiences through our brands: Range Rover, Defender, Discovery and Jaguar. As the corporate home of these iconic British brands, we bring together world-class design, pioneering innovation and the creative ambition that drives our business forward. Our heritage matters, but it's our future that excites us. We're transforming at pace, shaping new technologies, electrifying our products and reimagining how people move through the world. None of this happens by accident. It happens because of our people – creators, problem-solvers and pioneers who bring bold ideas to life every day. Everyone at JLR plays a role in building an enterprise that is as exceptional as the experiences we deliver. Here, you'll find the scale of a global organisation and the opportunity to make a meaningful impact from day one. We are proud of the brands we steward, but even prouder of the culture we're building – one where curiosity is encouraged, craftsmanship is celebrated and every colleague is supported to grow. If you would like to be part of our journey, you can explore our business areas and current opportunities right here on LinkedIn. You can also connect with our teams, ask questions and hear from the people who make JLR what it is. The future is exciting. We hope you will help us create it.

Freudenberg Group

freudenberg.com

Freudenberg is a global technology group that strengthens its customers and society long-term through forward-looking innovations. Together with its partners, customers and research institutions, the Freudenberg Group develops leading-edge technologies and excellent products and services for about 40 markets and for thousands of applications: seals, vibration control components, technical textiles, filters, specialty chemicals, medical products and the most modern cleaning products. Strength of innovation, strong customer orientation, diversity, and team spirit are the cornerstones of the Group. The 175-year-old company holds strong to its core values: a commitment to excellence, reliability and pro-active, responsible action. In 2024, the Freudenberg Group employed more than 52,000 people in some 60 countries worldwide and generated sales of more than €11.95 billion. Learn more about us and visit our digital home at freudenberg.com and read the stories that make us Freudenberg. Visit and follow us at www.freudenberg.com https://www.instagram.com/freudenberg.group/ www.youtube.com/FreudenbergGroup *** Netiquette *** We look forward to receiving your comments and posts. On behalf of all users, we ask for constructive contributions, mutual respect, courtesy and tolerance. All contributions will be checked and we reserve the right to delete contributions. This applies in particular to unlawful content, incorrect statements, advertising for third parties, spam or slander. In addition, we reserve the right to remove comments that are otherwise inappropriate or incorrect. Contributions made by external users do not necessarily reflect Freudenberg’s opinion. Please find our data protect information here: https://www.freudenberg.com/fileadmin/downloads/english/Freudenberg_Social-Media-Data-Protection-Information.pdf Legal Notice: https://www.freudenberg.com/legal-notice

Scania Group

scania.com

Scania is a world-leading provider of transport solutions committed to a better tomorrow. Our purpose is to drive the shift towards a sustainable transport system. In doing so, we are creating a world of mobility that’s better for business, society and our environment. Employing more than 50,000 people in about 100 countries, Scania’s research and development is concentrated in Sweden, while production takes place in Europe and South America.

Loading…

NEWS

Bosch Romania CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 11, 2026 08:00 AM

Politehnica Bucharest and Bosch inaugurate laboratory for mobility engineers

Bucharest Politehnica University and Bosch Group Romania inaugurated the Software Defined Vehicles laboratory last week, an educational and...

Read Article

November 15, 2024 08:00 AM

New Cohort of Fellows to Research the Political Economy Behind AI

A new cohort of journalists and data scientists who will work on stories about the foundations of Artificial Intelligence and its supply chain.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…