What is the official website of Centre for Advances in Reliability and Safety ?

The official website of Centre for Advances in Reliability and Safety is http://www.cairs.hk/.

What is Centre for Advances in Reliability and Safety's cybersecurity risk score?

Centre for Advances in Reliability and Safety has an AI-generated cybersecurity risk score of 746 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Centre for Advances in Reliability and Safety experienced?

According to Rankiteo, Centre for Advances in Reliability and Safety currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Centre for Advances in Reliability and Safety been affected by any supply chain cyber incidents ?

According to Rankiteo, Centre for Advances in Reliability and Safety has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Centre for Advances in Reliability and Safety have SOC 2 Type 1 certification ?

According to Rankiteo, Centre for Advances in Reliability and Safety is not certified under SOC 2 Type 1.

Does Centre for Advances in Reliability and Safety have SOC 2 Type 2 certification ?

According to Rankiteo, Centre for Advances in Reliability and Safety does not hold a SOC 2 Type 2 certification.

Does Centre for Advances in Reliability and Safety comply with GDPR ?

According to Rankiteo, Centre for Advances in Reliability and Safety is not listed as GDPR compliant.

Does Centre for Advances in Reliability and Safety have PCI DSS certification ?

According to Rankiteo, Centre for Advances in Reliability and Safety does not currently maintain PCI DSS compliance.

Does Centre for Advances in Reliability and Safety comply with HIPAA ?

According to Rankiteo, Centre for Advances in Reliability and Safety is not compliant with HIPAA regulations.

Does Centre for Advances in Reliability and Safety have ISO 27001 certification ?

According to Rankiteo,Centre for Advances in Reliability and Safety is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Centre for Advances in Reliability and Safety operate in ?

Centre for Advances in Reliability and Safety operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does Centre for Advances in Reliability and Safety have ?

Centre for Advances in Reliability and Safety employs approximately 24 people worldwide.

Does Centre for Advances in Reliability and Safety own any subsidiaries ?

Centre for Advances in Reliability and Safety presently has no subsidiaries across any sectors.

How many LinkedIn followers does Centre for Advances in Reliability and Safety have ?

Centre for Advances in Reliability and Safety's official LinkedIn profile has approximately 690 followers.

What is the NAICS classification code for Centre for Advances in Reliability and Safety ?

Centre for Advances in Reliability and Safety is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does Centre for Advances in Reliability and Safety have a Crunchbase profile ?

No, Centre for Advances in Reliability and Safety does not have a profile on Crunchbase.

Does Centre for Advances in Reliability and Safety have a LinkedIn profile ?

Yes, Centre for Advances in Reliability and Safety maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cairshk.

How many cybersecurity incidents has Centre for Advances in Reliability and Safety experienced ?

As of August 3, 2026, Rankiteo reports that Centre for Advances in Reliability and Safety has not experienced any cybersecurity incidents.

How many peer or competitor companies does Centre for Advances in Reliability and Safety have ?

Centre for Advances in Reliability and Safety has an estimated 9,676 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CARS

Boost Score +25 with badge (5 left)

746

/1000

Moderate

771

/1000

Fair

Centre for Advances in Reliability and Safety Vendor Cyber Rating & Cyber Score

cairs.hk

Add Your Compliance Badge

The world leading and regional hub for Research in Reliability and Safety Innovation. High level of world renowned expertise in Artificial Intelligence methodologies, industry based cluster data, and reliability & safety modelling and algorithms. dentification and bridging of Knowledge gaps in acquisition of useful data relating to reliability and safety of (processes and products). Development of different AI technologies in bridging the above knowledge gaps. Data Characterization, filtering and clustering to form industry big data. Research on failure modes and their criticality and trend analysis. Integration of Data-driven and Physics of Failures approaches on data set in various industry sectors. Development of algorithm for

CARS A.I CyberSecurity Scoring

Scoring History

CARS

Centre for Advances in Reliability and Safety CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CARS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CARS

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Centre for Advances in Reliability and Safety in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Centre for Advances in Reliability and Safety in 2026.

Incident Types CARS vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Centre for Advances in Reliability and Safety in 2026.

Incident History - CARS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Centre for Advances in Reliability and Safety Subsidiaries

CARS

Appliances, Electrical, and Electronics Manufacturing

Website: http://www.cairs.hk/

Company Size: 24

HKSTP - Hong Kong Science and Technology Parks CorporationIT Services and IT Consulting

LalamoveSoftware Development

Fano (Fano Labs)Technology, Information and Internet

CredoSemiconductor Manufacturing

HKRITA - The Hong Kong Research Institute of Textiles and Apparel LimitedResearch Services

Pantheon Lab LimitedSoftware Development

BioMapBiotechnology Research

August RoboticsComputers and Electronics Manufacturing

HKSTP CapitalVenture Capital and Private Equity Principals

ApoideaTechnology, Information and Media

CryptoBLKBlockchain Services

Singular GlobalBlockchain Services

Hong Kong Industrial Artificial Intelligence and Robotics Centre (FLAIR)Appliances, Electrical, and Electronics Manufacturing

Insight Robotics Ltd.IT Services and IT Consulting

Dayta AIIT Services and IT Consulting

MadheadInformation Technology & Services

Well Being Digital Limited (WBD101)Semiconductor Manufacturing

RaSpectSoftware Development

Buy&ShipInternet Marketplace Platforms

PanopticAISoftware Development

Blockchain Solutions LimitedIT Services and IT Consulting

CerTrazeInformation Technology & Services

FreightAmigoIT Services and IT Consulting

Belun Technology Company LimitedMedical Equipment Manufacturing

Centre for Oncology and ImmunologyResearch Services

NovoheartBiotechnology Research

Sycra Technologies LimitedAppliances, Electrical, and Electronics Manufacturing

ClusterTech LimitedInformation Technology & Services

SquareDog RoboticsIndustrial Automation

Aura LabsIT Services and IT Consulting

Studio AOEAdvertising Services

ArbeleBiotechnology Research

Multi-Scale Medical Robotics Center LtdMedical Equipment Manufacturing

HKCeND - Hong Kong Center for Neurodegenerative Diseases (香港神經退行性疾病中心)Research Services

ALiA BioTechMedical Equipment Manufacturing

Centre for Immunology & Infection - C2iResearch Services

PuraPharm Corporation LimitedPharmaceutical Manufacturing

Atom Semiconductor Technologies Ltd.Semiconductors

Integrated Solutions LimitedSoftware Development

PerksBarSoftware Development

Imsight TechnologySoftware Development

Imsight – Health CornerSoftware Development

GoByBus.hkIT Services and IT Consulting

BeeInventor 點子建IT Services and IT Consulting

eNano Health LimitedBiotechnology Research

uHey LimitedSpectator Sports

Growgreen LimitedComputers and Electronics Manufacturing

n-hop technologies LimitedTelecommunications

Zensis LimitedIT Services and IT Consulting

QBS System LimitedIT Services and IT Consulting

Life Code LimitedBiotechnology Research

JSAB Technologies LimitedSemiconductor Manufacturing

Profiled Group LimitedAppliances, Electrical, and Electronics Manufacturing

Sebit Company LimitedIT Services and IT Consulting

AIVISoftware Development

HSK GeneTech | ProbioLifeBiotechnology Research

AppoTech LimitedSemiconductors

BrainNow Medical Technology LimitedMedical Device

The GrindTechnology, Information and Internet

Datago Technology LimitedFinancial Services

Hessner TechnologiesResearch Services

Motive Force Technology LimitedSoftware Development

2GoTradeFinancial Services

AppciderIT Services and IT Consulting

Homie Living | 靈感+購物香港線上家居平台Furniture and Home Furnishings Manufacturing

Add Care LimitedBiotechnology

Hong Kong Academy of EngineeringNon-profit Organizations

LaSense Technology LimitedIndustrial Machinery Manufacturing

ReflectionBio – By Patients, For PatientsBiotechnology Research

Propagation Systems LimitedAppliances, Electrical, and Electronics Manufacturing

LinkedTech Solutions LimitedInformation Technology & Services

XOOCITY Hong Kong Metaverse 数宇城香港Technology, Information and Internet

Stellerus Technology LimitedInformation Services

Narrative ProjectsTechnology, Information and Internet

Loading…

Centre for Advances in Reliability and Safety Similar Companies

Foxconn

cb foxconn.com

Established in Taiwan in 1974, Hon Hai Technology Group (Foxconn) (2317: Taiwan) is the world’s largest electronics manufacturer. Foxconn is also the leading technological solution provider, and it continuously leverages its expertise in software and hardware to integrate its unique manufacturing systems with emerging technologies. By capitalizing on its expertise in Cloud Computing, Mobile Devices, IoT, Big Data, AI, Smart Networks, and Robotics / Automation, the Group has expanded not only its capabilities into the development of electric vehicles, digital health and robotics, but also three key technologies –AI, semiconductors and new-generation communications technology – which are key to driving its long-term growth strategy and the four core product pillars: Consumer Products, Enterprise Products, Computing Products and Components and Others. In 2021, Hon Hai's annual revenue reached NT$5.99 trillion. The company has established R&D and manufacturing centers in other markets around the world including China, India, Japan, Vietnam, Malaysia, Czech Republic, U.S. and more. With a focus on research and development, the company owns more than 54,253 patents. In addition to maximizing value-creation for customers who include many of the world’s leading technology companies, Foxconn is also dedicated to championing environmental sustainability in the manufacturing process and serving as a best-practices model for global enterprises. The company has received widespread international accolades and recognition since its establishment. The company ranked 22nd on the Fortune Global 500 rankings in 2021 and 25th in the Top 100 Digital Companies in the Forbes ranking of the World’s Best Employers in 2019. Moreover, on Forbes’ World’s Best Employers 2021 rankings, the company ranked 1st in Taiwan. Foxconn is also the only Taiwanese private company awarded for 5 consecutive years of Clarivate Top 100 Global Innovators (2018 - 2022).

Sanmina

sanmina.com

Sanmina Corporation (Nasdaq: SANM) is a leading integrated manufacturing solutions provider serving the fastest-growing segments of the global Electronics Manufacturing Services (EMS) market. Recognized as a technology leader, Sanmina Corporationprovides end-to-end manufacturing solutions, delivering superior quality and support to Original Equipment Manufacturers (OEMs) primarily in the communications networks, defense and aerospace, industrial and semiconductor systems, medical, multimedia, computing and storage, automotive and clean technology sectors. Sanmina Corporation has facilities strategically located in key regions throughout the world.

Molex

molex.com

Molex makes a connected world possible by enabling technologies that transform the future and improve lives. With a presence in more than 40 countries, Molex offers a complete range of connectivity products, services and solutions for the data communications, medical, industrial, automotive and consumer electronics industries. We’re doing more than developing solutions for our customers, we’re Creating Connections for Life.

Panasonic

cb holdings.panasonic

Founded in 1918, and today a global leader in developing innovative technologies and solutions for wide-ranging applications in the consumer electronics, housing, devices, B2B solutions and energy sectors worldwide, the Panasonic Group switched to an operating company system on April 1, 2022 with Panasonic Holdings Corporation serving as a holding company. The Group reported consolidated net sales of 8,458.2 billion yen for the year ended March 31, 2025.

Keysight Technologies

keysight.com

Keysight empowers innovators to explore, design, and bring world-changing technologies to life. As the industry’s premier global innovation partner, Keysight’s software-centric solutions serve engineers across the design and development environment, enabling them to deliver tomorrow’s breakthroughs at speed and with reduced risk. Keysight leverages its strength as the world’s leading test and measurement provider and today enables innovators to push the boundaries of engineering by quickly solving design, emulation, and test challenges to help create the best product experiences. Whether you're looking to improve your design and development process, optimize and secure your network, or harness AI and digital twins to get a head start on technologies like 6G, AV and EV, IoT, or quantum computing — Keysight accelerates innovation across the workflow with intelligent insights built on the most accurate measurements. Our fusion of technology knowledge, measurement science expertise, and tailored solutions helps you forge ahead with confidence in our connected and dynamic world. Keysight Technologies (NYSE: KEYS) is an S&P 500 technology company, headquartered in Santa Rosa, California, with offices and manufacturing worldwide. Keysight owns 2,000+ patents and our ~15,000 employees work with nearly 32,000 customers worldwide to start technology revolutions. Keysight customers span the communications, industrial automation, aerospace and defense, automotive, energy, semiconductor, and general electronics markets. Join us! To accelerate innovation to connect and secure the world, innovators start here, with Keysight.

Vertiv

Vertiv.com

Vertiv is a global leader in critical digital infrastructure for applications in data centers, communication networks, and commercial and industrial environments. As businesses, industries, and communities become more connected, we pioneer and deliver end-to-end power and cooling technologies to help our customers stay resilient, optimized, and future-ready. With our industry-leading innovative technologies and global services network, we are fueling the revolution of the digital world - keeping technology ecosystems running efficiently and without interruption. Vertiv is supercharging data’s potential; accelerating the pace of technology, raising the bar for accelerated compute and redefining the limits of densification. The world depends on data we power and cool™

TE Connectivity

te.com

TE Connectivity plc (NYSE: TEL) is a global industrial technology leader creating a safer, sustainable, productive and connected future. As a trusted innovation partner, our broad range of connectivity and sensor solutions enable the distribution of power, signal and data to advance next-generation transportation, energy networks, automated factories, data centers enabling artificial intelligence and more. Our more than 90,000 employees, including 10,000 engineers, work alongside customers in approximately 130 countries. In a world that is racing ahead, TE ensures that EVERY CONNECTION COUNTS.

Legrand

legrandgroup.com

Legrand is a global specialist in electrical and digital building infrastructures, dedicated to supporting technological, societal and environmental change around the globe. Our purpose is to improve lives by transforming the spaces where people live, work and meet by delivering electrical and digital infrastructures and connected solutions that are simple, innovative and sustainable. With nearly 38,000 employees around the world, we work hard every day to make the buildings of tomorrow more sustainable for everyone. Legrand reported sales of €8.3 billion in 2022. The company is listed on Euronext Paris and is notably a component stock of the CAC 40, CAC 40 ESG and CAC SBT 1.5 indexes. (code ISIN FR0010307819).

Signify

signify.com

Signify (Euronext: LIGHT Signify is the world leader in lighting for professionals and consumers. We unlock the extraordinary potential of light for brighter lives and a better world. Our global portfolio of brands deliver advanced products, connected systems and services, designed to enhance well-being and performance, to elevate experiences and advance sustainability. In 2024, we had sales of EUR 6.1 billion, approximately 29,000 employees and a presence in over 70 countries. We are featured in the Dow Jones Sustainability World Index and hold the EcoVadis Platinum rating. News and updates from Signify can be found in the Newsroom, on LinkedIn and Instagram. Information for investors is located on the Investor Relations page.

Loading…

NEWS

Centre for Advances in Reliability and Safety CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 13, 2026 08:19 PM

Group-IB, VAS Integrated Solutions partner to boost cybersecurity in Saudi Arabia

VAS Integrated Solutions will play a key role in delivering these capabilities across the Kingdom, utilising its established partner network.

Read Article

February 26, 2026 08:00 AM

Beyond compliance: Why cybersecurity transparency has become a boardroom priority

As cyber risk moves from a technical concern to a governance issue, transparency, not just protection, is becoming the real benchmark for...

Read Article

February 13, 2026 08:00 AM

The Model War Is Over. AI Progress Now Depends on Physical Infrastructure.

Summary: AI progress in 2026 shifts from general models to physical capacity. As electricity and data center scarcity grows,...

Read Article

February 13, 2026 08:00 AM

UP Allocates Rs 95 Crore for Advanced Cybersecurity Center

Approval of Rs 95 Crore for Cyber Security Operations Centre in Lucknow. The government of Uttar Pradesh has sanctioned an allocation of Rs...

Read Article

February 09, 2026 08:00 AM

Beyond Cybersecurity: Network Reliability as a Core Pillar of Internet Safety -

February 9, 2026 | Blogs. Sanjeev Goel, Chief Business Officer, Shaurrya Teleservices. Normally, the conversation on internet safety starts and stops in...

Read Article

February 06, 2026 08:00 AM

Mastercard partners UAE Cyber Security Council to boost national cyber resilience

The agreement was announced on the sidelines of the World Governments Summit 2026 in Dubai.

Read Article

January 23, 2026 08:00 AM

Cellular Connectivity and the Software-Defined Vehicle | Automotive IQ

An article by Alex Vakulov, Cybersecurity Researcher, on connectivity as a core safety system, including cybersecurity and compliance.

Read Article

January 15, 2026 08:00 AM

NCSC-led global guidance sets out principles for designing secure connectivity into OT networks

Global cybersecurity agencies have released joint guidance, led by the U.K.'s National Cyber Security Centre (NCSC), providing owners and...

Read Article

January 14, 2026 08:00 AM

APPA Urges Reauthorization of Rural and Municipal Utility Advanced Cybersecurity Grant and Technical Assistance Program

At a House hearing on Jan. 13, Adrienne Lotto, Senior Vice President of Grid Security, Technical and Operations Services at the American...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…