What is the official website of Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) ?

The official website of Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) is http://www.caisse-epargne.fr.

What is Caisse d'Epargne Bourgogne Franche-Comté (CEBFC)'s cybersecurity risk score?

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) experienced?

According to Rankiteo, Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) been affected by any supply chain cyber incidents ?

According to Rankiteo, Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) have SOC 2 Type 1 certification ?

According to Rankiteo, Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) is not certified under SOC 2 Type 1.

Does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) have SOC 2 Type 2 certification ?

According to Rankiteo, Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) does not hold a SOC 2 Type 2 certification.

Does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) comply with GDPR ?

According to Rankiteo, Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) is not listed as GDPR compliant.

Does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) have PCI DSS certification ?

According to Rankiteo, Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) does not currently maintain PCI DSS compliance.

Does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) comply with HIPAA ?

According to Rankiteo, Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) is not compliant with HIPAA regulations.

Does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) have ISO 27001 certification ?

According to Rankiteo,Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) operate in ?

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) operates primarily in the Banking industry.

How many employees does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) have ?

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) employs approximately 0 people worldwide.

Does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) own any subsidiaries ?

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) presently has no subsidiaries across any sectors.

How many LinkedIn followers does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) have ?

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC)'s official LinkedIn profile has approximately 8,619 followers.

What is the NAICS classification code for Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) ?

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) have a Crunchbase profile ?

No, Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) does not have a profile on Crunchbase.

Does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) have a LinkedIn profile ?

Yes, Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cebfc.

How many cybersecurity incidents has Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) experienced ?

As of August 2, 2026, Rankiteo reports that Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) has not experienced any cybersecurity incidents.

How many peer or competitor companies does Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) have ?

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) has an estimated 7,448 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CDBF

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) Vendor Cyber Rating & Cyber Score

caisse-epargne.fr

Add Your Compliance Badge

La Caisse d’Epargne de Bourgogne Franche-Comté est une banque coopérative régionale au service du développement économique et social de son territoire. Grâce à une situation financière solide, elle poursuit un développement ambitieux. Son capital social est détenu par ses 200 000 clients sociétaires qui partagent ainsi ses valeurs. Ses 1 600 collaborateurs, à travers un réseau de 180 agences, 4 centres d’affaires et 1 Pôle Experts Santé, mettent chaque jour leurs compétences au service de près de 800 000 clients. Banque de proximité, la Caisse d’Epargne de Bourgogne Franche-Comté accompagne, avec expertise, l’ensemble des clientèles : particuliers, gestion privée, professionnels, entreprises, associations, Collectivités Territoriales,…

CDBF A.I CyberSecurity Scoring

Scoring History

CDBF

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CDBF Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CDBF

Incidents vs Banking Industry Avg (This Year)

No incidents recorded for Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) in 2026.

Incident Types CDBF vs Banking Industry Avg (This Year)

No incidents recorded for Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) in 2026.

Incident History - CDBF (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) Subsidiaries

CDBF

Banking

Website: http://www.caisse-epargne.fr

Company Size: 0

Groupe BPCEBanking

BRED Banque PopulaireBanking

BRED Banque Trading FloorBanking

BPCE LeaseBanking

Caisse d'Epargne de Midi-PyrénéesBanking

Crédit FoncierBanking

BPCE FactorBanking

Ostrum Asset ManagementFinancial Services

Crédit CoopératifBanking

Pramex InternationalInternational Trade and Development

Caisse d'Epargne Loire Drome ArdecheBanking

Banque BCPBanking

Banque de SavoieBanking

SOCFIMBanking

BPCE Solutions ClientsBanking

Crédit Maritime Grand OuestBanking

Banque Populaire OccitaneBanking

Banque Populaire du SudBanking

Inspection générale Groupe BPCEBanking

Banque Populaire du NordBanking

BPCE Solutions informatiquesInformation Technology & Services

Informatique Banque PopulaireInformation Technology & Services

Informatique et Technologies - Caisse d'EpargneSoftware Development

Banque Populaire Grand OuestBanking

Banque Populaire Auvergne Rhône AlpesBanking

Banque de la Transition EnergétiqueBanking

Caisse d'Epargne Hauts de FranceBanking

Caisse d'Epargne BelgiumBanking

Caisse d'Epargne NederlandBankwezen

Capital & MezzanineDirecteurs du capital-risque et du capital-investissement

Banque Populaire Méditerranée (BPMED)Banking

Caisse d'Epargne Aquitaine Poitou-CharentesBanking

CASDEN Banque PopulaireBanking

Banque Populaire Alsace Lorraine Champagne (BPALC)Banking

Banque Populaire Val de FranceBanking

La Terrasse Discovery +x by Banque Populaire Val de France Paris-SaclayBusiness Consulting and Services

BPCE Payment ServicesInformation Technology & Services

BimpliFinancial Services

Banque Populaire Aquitaine Centre Atlantique - BPACABanking

Caisse d'Epargne CEPACBanking

Banque Populaire Rives de ParisBanking

Loading…

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) Similar Companies

OCBC

ocbc.com

OCBC is the longest established Singapore bank, formed in 1932 from the merger of three local banks, the oldest of which was founded in 1912. It is now the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker. OCBC and its subsidiaries offer a broad array of commercial banking, specialist financial and wealth management services, ranging from consumer, corporate, investment, private and transaction banking to treasury, insurance, asset management and stockbroking services. OCBC’s key markets are Singapore, Malaysia, Indonesia and Greater China. It has more than 570 branches and representative offices in 19 countries and regions. These include about 300 branches and offices in Indonesia under subsidiary Bank OCBC NISP, and over 90 branches and offices in Mainland China, Hong Kong SAR and Macau SAR under OCBC Wing Hang. OCBC’s private banking services are provided by its wholly-owned subsidiary Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals. OCBC's insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia. Its asset management subsidiary, Lion Global Investors, is one of the largest private sector asset management companies in Southeast Asia.

Regions Bank

regions.com

Regions Financial Corporation is a member of the S&P 500 Index and is one of the nation’s largest full-service providers of consumer and commercial banking, wealth management, and mortgage products and services. Regions serves customers across the South, Midwest and Texas, and through its subsidiary, Regions Bank, operates more than 1,250 banking offices and more than 2,000 ATMs. Additional information about Regions and its full line of products and services can be found at www.regions.com. Ticker Symbol: RF on the NYSE Regions' Social Media & Community Guidelines: http://spr.ly/lismcg Regions' Privacy & Security Policy: http://spr.ly/lipp https://www.regions.com/help/social-media Regions Bank, Member FDIC. Equal Housing Lender. NMLS #174490. Only bank deposits are FDIC insured. Non-Deposit Products including Investments, Securities, Mutual Funds, Insurance Products, Crypto Assets, and Annuities Are Not FDIC Insured | Are Not Bank Guaranteed | May Lose Value | Are Not Deposits | Are not a condition of any Banking Activity | Are Not Insured by any Government Agency Equal Opportunity Employer/Including Disabled/Veterans Regions provides links to other websites or apps for your convenience and does not control the content, services or products provided on the linked website or app, whose Privacy and security policies or procedures may differ. Consult the policies or disclosures on their website. © 2025 Regions Bank. Regions and the Regions logo are registered trademarks of Regions Bank. The LifeGreen color is a trademark of Regions Bank.

HBL

hbl.com

HBL, Pakistan’s leading Bank, was the first commercial Bank to be established in Pakistan in 1947. Over the years, HBL has grown its branch network and maintained its position as the largest private sector Bank in Pakistan with over 1,728+ branches and 2,300+ ATMs globally, serving 37million+ clients worldwide. HBL will never ask for customer's personal data on public platforms. Please avoid sharing such data via social media.

QNB Türkiye

qnb.com.tr

Finansbank A.Ş. 26 Ekim 1987 tarihinde iş insanı Hüsnü Özyeğin liderliğinde 100 ortakla Bankalar Kanunu ve Türk Ticaret Kanunu hükümleri uyarınca kuruldu. Sektörde hızlı büyeme ile ilk 5 büyük özel banka arasına giren QNB Finansbank, 2006 yılında Yunanistan'ın en büyük bankası National Bank of Greece (NBG) tarafından satın alındı. Bu birleşme sonucunda NBG'nin Güneydoğu Avrupa'da sahip olduğu lider konumu ile bankanın Türkiye'deki yüksek büyüme potansiyeli bir araya geldi. 2006 yılından itibaren bireysel bankacılıkta da hızla büyüyen Finansbank; kredi kartı, dijitalleşme, teknoloji alanındaki yatırımları ve yarattığı çözümleri ile sektörde ilklere imza atan banka konumuna geldi. Ekim 2012'de tüm hizmetlerini sadece dijital kanallar üzerinden sunan ve Türkiye'nin ilk şubesiz dijital bankası olan Enpara.com'u kuran Finansbank, bu alanda Türkiye'de sektörde yeni bir dönemin kapılarını açtı. 2016 yılının haziran ayında Orta Doğu ve Afrika bölgesinin lider finansal kuruluşu olan Katar'ın en büyük bankası Qatar National Bank S.A.Q (QNB Group) tarafından satın alınan QNB Finansbank, uluslararası bir yapının parçası haline geldi. Böylelikle bankanın yeni ismi Ekim 2016 itibarıyla QNB Finansbank oldu. QNB Group'un, global bir marka olma vizyonu doğrultusunda ismini 2024 yılının Ekim ayı itibarıyla QNB Türkiye olarak yeniledi. QNB Türkiye, kurum kültürünü geleceğe taşıyan dinamik ve yenilikçi bir yapıya sahip. "Önce İnsan'' anlayışıyla çalışanların gelişimine öncelik veren banka, "Güven'' ile güçlü bir iş birliği ortamı kuruyor. Bankanın değerleri arasında yer alan "Adaptasyon'' ile değişimlere hızla uyum sağlarken, "Öncü Olmak'' vizyonuyla sektörde fark yaratıyor, "Birlikte Gelişim'' ilkesiyle de başarıya hep birlikte ulaşıyor. QNB Türkiye, çatısı altındaki iştirakleri QNB Leasing, QNB Invest, QNB Portföy, QNB Faktoring, QNB Sağlık, IBTech ve QNB eSolutions ile müşterilerinin tüm finansal ihtiyaçlarına yaratıcı, hızlı ve kolay çözümler sunmaya devam ediyor.

Bank Alfalah Limited

bankalfalah.com

Bank Alfalah is one of the largest private Banks in Pakistan with a network of over 1100 branches in more than 200 cities across Pakistan with an international presence in Afghanistan, Bangladesh, Bahrain, and a representative office in the UAE. The Bank is owned and operated by the Abu Dhabi Group. The International Finance Corporation (IFC) of the World Bank partnered with the Bank in 2014 and holds a 15 percent stake in Bank Alfalah. Incorporated as a public limited company on 21st June 1992, under the Companies Ordinance, 1984, Bank Alfalah commenced banking operations from 1st November 1997. The Bank provides financial solutions to consumers, corporations, institutions, and governments through a broad spectrum of products and services, including corporate and investment banking, consumer banking and credit, securities brokerage, commercial, SME, agri-finance, Islamic and asset financing. JCR-VIS has assigned an entity rating of ‘AA+’ (double-A plus) for the long-term and ‘A1+’ (One plus) for the short-term, with a stable outlook. PACRA has assigned Bank Alfalah ‘AA+’ (double-A plus) entity rating for the long-term and ‘A1+’ (One plus) for the short-term, with a positive outlook. The Bank is listed on the Pakistan Stock Exchange.

Intesa Sanpaolo

intesasanpaolo.com

Intesa Sanpaolo è il maggior gruppo bancario in Italia con una significativa presenza internazionale. Il suo business model distintivo la rende leader a livello europeo nel Wealth Management, Protection & Advisory e ne caratterizza l’orientamento al digitale. I’impegno in ambito ESG prevede, entro il 2025, €115 miliardi di finanziamenti impact e contributi per 500 milioni a supporto delle persone in difficoltà. Gallerie d’Italia, è la sede espositiva del patrimonio artistico della banca e di progetti artistici di riconosciuto valore. https://group.intesasanpaolo.com/it/ _______________ Intesa Sanpaolo is the largest banking group in Italy with a significant international presence. Its distinctive business model makes it a European leader in wealth management, protection and advisory and ensures its strong focus on digital. Its commitment to ESG foresees, by 2025, €115 billion of impact financing and contributions of €500 million to support people in need. Gallerie d'Italia, is the exhibition venue for the bank's artistic heritage and artistic projects of recognised value. https://group.intesasanpaolo.com/en/ _________________ Sede Legale: Piazza San Carlo 156, 10121 Torino – Sede Secondaria: Via Monte di Pietà 8, 20121 Milano Tel. 011 555.1 – mail: [email protected] pec: [email protected] Registro delle Imprese di Torino e Codice Fiscale 00799960158 – Partita Iva 10810700152 N. Iscr. Albo Banche 5361 N. Iscr. Registro degli Intermediari Assicurativi e Riassicurativi - Sez. D. 000027210, data di iscrizione 01.02.2007 - Intermediario soggetto alla vigilanza dell'IVASS: https://servizi.ivass.it/RuirPubblica Per la presentazione dei reclami e eventuali sistemi di risoluzione delle controversie https://www.intesasanpaolo.com/it/persone-e-famiglie/reclami.html. Per assistenza: https://www.intesasanpaolo.com/it/common/parla-con-noi.html. Netiquette: https://www.intesasanpaolo.com/it/common/landing/anti-phishing/netiquette.html

Bank of the Philippine Islands (BPI)

bpi.com.ph

Founded in 1851, the Bank of the Philippine Islands is the first bank in the Philippines and in Southeast Asia. Together with its subsidiaries and affiliates, BPI, a universal bank, offers a wide range of financial products and services that serve both retail and corporate clients. Get ready to start a bright future with us. We have diverse talents and expertise — from individuals who keep up with the gyrations of the financial markets, to those who collect and analyze data, to people who help clients with their simple or complex financial needs and even tech-savvy millennials with a knack for creating apps. Our Mission We are your trusted financial adviser, nurturing your future and making life easier Our Vision Building a better Philippines -- one family, one community at a time Our Values We are Nurturing. We act with Integrity. We are Customer Obsessed. We act with Excellence. WHY CHOOSE BPI 1. Rich heritage in banking and finance - BPI continues to pave the way for the Philippine banking and financial industry, supporting economic growth and nation-building. 2. Reputation for financial prudence and client trust - BPI is widely known and respected for its financial expertise and prudence, client trust, and industry leadership. 3. Culture of excellence - BPI has a culture of excellence, where employees feel that they are working on something meaningful, significant and purpose-driven, towards a common goal and purpose.

Banco de Chile

cb bancochile.cl

Somos una Corporación líder y comprometida con el país que brinda servicios financieros de excelencia a cada segmento de clientes. Buscamos permanentemente ser el mejor Banco para ellos, ser el mejor lugar para trabajar y ser la mejor inversión para nuestros accionistas. Lo hacemos de forma colaborativa y comprometida con las personas que conforman nuestra organización y con el desarrollo de la comunidad.

Bank of America

cb bankofamerica.com

Bank of America is one of the world's largest financial institutions, serving individuals, small- and middle-market businesses and large corporations with a full range of banking, investing, asset management and other financial and risk management products and services. The company serves approximately 56 million U.S. consumer and small business relationships. It is among the world's leading wealth management companies and is a global leader in corporate and investment banking and trading. This LinkedIn company page is moderated. For more information, please visit: https://bit.ly/32FDdQr. For account issues, please visit: https://bit.ly/2GeTIeP.

Loading…

NEWS

Caisse d'Epargne Bourgogne Franche-Comté (CEBFC) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…