What is Defra Public Appointments's cybersecurity risk score?

Defra Public Appointments has an AI-generated cybersecurity risk score of 762 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Defra Public Appointments experienced?

According to Rankiteo, Defra Public Appointments currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Defra Public Appointments been affected by any supply chain cyber incidents ?

According to Rankiteo, Defra Public Appointments has been affected by a supply chain cyber incident involving Fortinet, with the incident ID FORGOV1783297461.

Does Defra Public Appointments have SOC 2 Type 1 certification ?

According to Rankiteo, Defra Public Appointments is not certified under SOC 2 Type 1.

Does Defra Public Appointments have SOC 2 Type 2 certification ?

According to Rankiteo, Defra Public Appointments does not hold a SOC 2 Type 2 certification.

Does Defra Public Appointments comply with GDPR ?

According to Rankiteo, Defra Public Appointments is not listed as GDPR compliant.

Does Defra Public Appointments have PCI DSS certification ?

According to Rankiteo, Defra Public Appointments does not currently maintain PCI DSS compliance.

Does Defra Public Appointments comply with HIPAA ?

According to Rankiteo, Defra Public Appointments is not compliant with HIPAA regulations.

Does Defra Public Appointments have ISO 27001 certification ?

According to Rankiteo,Defra Public Appointments is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Defra Public Appointments operate in ?

Defra Public Appointments operates primarily in the Government Administration industry.

How many employees does Defra Public Appointments have ?

Defra Public Appointments employs approximately None employees people worldwide.

Does Defra Public Appointments own any subsidiaries ?

Defra Public Appointments presently has no subsidiaries across any sectors.

How many LinkedIn followers does Defra Public Appointments have ?

Defra Public Appointments's official LinkedIn profile has approximately 6,201 followers.

What is the NAICS classification code for Defra Public Appointments ?

Defra Public Appointments is classified under the NAICS code 92, which corresponds to Public Administration.

Does Defra Public Appointments have a Crunchbase profile ?

No, Defra Public Appointments does not have a profile on Crunchbase.

Does Defra Public Appointments have a LinkedIn profile ?

Yes, Defra Public Appointments maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/defra-public-appointments.

How many cybersecurity incidents has Defra Public Appointments experienced ?

As of August 3, 2026, Rankiteo reports that Defra Public Appointments has experienced 28 cybersecurity incidents.

How many peer or competitor companies does Defra Public Appointments have ?

Defra Public Appointments has an estimated 13,114 peer or competitor companies worldwide.

What types of cybersecurity incidents has Defra Public Appointments faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Breach, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DPA

Boost Score +25 with badge (5 left)

762

/1000

Fair

787

/1000

Fair

Defra Public Appointments Vendor Cyber Rating & Cyber Score

service.gov.uk

Add Your Compliance Badge

👉 What is a public appointment? A public appointment is a ministerial appointment to the board of a public body or advisory committee. At Defra, we make appointments to a wide range of organisations including the Environment Agency, Natural England, the Forestry Commission, Royal Botanic Gardens Kew, and Ofwat, among others. Board members of public bodies play an important role in providing strategic direction, supporting good governance, holding senior leaders to account, and representing the views and work of the organisation. Appointees to advisory bodies offer independent, expert advice to government and ministers on specific issues. 👉 Why apply? A public appointment is an opportunity to contribute your expertise to organisations

DPA A.I CyberSecurity Scoring

Scoring History

DPA

Defra Public Appointments CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UK Ministry of Defe...

Breach

100

8/2026

UK-1785709637

UK Ministry of Defe...

Breach

100

7/2026

UK-1785371161

Foreign and Commonw...

Cyber Attack

100

7/2026

Fortinet

FORGOV178329746...

Cabinet Office

Breach

5/2026

CAB1777832879

Defra Public Appoin...

Vulnerability

12/2025

DCM1765433387

Defra Public Appoin...

Breach

11/2025

UK-523475211042...

Defra Public Appoin...

Cyber Attack

100

10/2025

UK-556215510202...

Foreign and Commonw...

Breach

10/2025

FOR1766412101

Defra Public Appoin...

Ransomware

100

9/2025

DCM1764770468

Defra Public Appoin...

Breach

100

8/2025

UK-841081625

Defra Public Appoin...

Breach

6/2025

HMR745060625

UK Home Office

Breach

4/2025

UK-1777581082

Defra Public Appoin...

Breach

100

7/2024

UK-421016421104...

Defra Public Appoin...

Breach

100

6/2024

UK-169221610212...

Defra Public Appoin...

Breach

100

4/2024

UK-493314910132...

Defra Public Appoin...

Breach

100

8/2023

UK-707072025

Defra Public Appoin...

Breach

100

7/2023

UK-221002221104...

Defra Public Appoin...

Cyber Attack

100

01/2023

DEP225811123

Defra Public Appoin...

Breach

100

6/2022

UK-289342811142...

Defra Public Appoin...

Breach

100

2/2022

UK-503305010202...

Defra Public Appoin...

Breach

1/2022

UK-559215509112...

Defra Public Appoin...

Breach

11/2021

GOV1527121122

Defra Public Appoin...

Breach

100

10/2021

UK-576295710232...

HM Revenue & Custom...

Cyber Attack

9/2021

HMR1782752907

Defra Public Appoin...

Breach

100

8/2021

UK-552175511242...

Defra Public Appoin...

Breach

100

6/2021

UK-089380810032...

Defra Public Appoin...

Cyber Attack

100

09/2015

NAT233920422

Defra Public Appoin...

Breach

100

6/2010

UK-069420609202...

Loading…

A.I.

DPA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DPA

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Defra Public Appointments in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Defra Public Appointments in 2026.

Incident Types DPA vs Government Administration Industry Avg (This Year)

No incidents recorded for Defra Public Appointments in 2026.

Incident History - DPA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Defra Public Appointments Subsidiaries

DPA

Government Administration

Website: https://apply-for-public-appointment.service.gov.uk/roles?titleSearch=&bodySearch=&department=1006&regulated=&bodyJustice=&remunerated=&status=open&sort=openingAt%3Adesc#search-results

Company Size: 1,001-5,000 employees

UK Civil ServiceGovernment Administration

Department for EducationGovernment Administration

TeachingPrimary and Secondary Education

Buying for SchoolsGovernment Administration

DfE Digital, Data and TechnologyGovernment Relations Services

Skills PartnerGovernment Administration

UK Ministry of DefenceDefense and Space Manufacturing

Defence Equipment & Support (DE&S)Defense and Space Manufacturing

Defence ProcurementDefense & Space

UK Home OfficeGovernment Administration

HM Revenue & CustomsGovernment Administration

National Crime Agency (NCA)Law Enforcement

UK Financial Intelligence Unit (UKFIU)Law Enforcement

Department of Health and Social CareGovernment Relations Services

OfstedGovernment Administration

Department for Science, Innovation and TechnologyGovernment Administration

Careers at the Department for Science, Innovation and TechnologyGovernment Administration

Department for Work and Pensions (DWP)Government Administration

See PotentialGovernment Administration

Disability ConfidentGovernment Administration

Cabinet OfficeGovernment Administration

GOV.UKGovernment Relations Services

HM Government Public AppointmentsGovernment Administration

Foreign and Commonwealth OfficeGovernment Administration

HM TreasuryPublic Policy Offices

Office of Financial Sanctions Implementation (OFSI)Government Administration

Food Standards AgencyGovernment Administration

Starting a Food BusinessFood & Beverages

Department for Transport (DfT), United KingdomGovernment Administration

Crown Prosecution ServiceLaw Practice

Forestry CommissionGovernment Administration

OfgemUtilities

Department for Culture, Media and SportGovernment Administration

Office of Rail and Road (ORR)Truck Transportation

DstlDefense and Space Manufacturing

Data Science ChallengeGovernment Administration

Charity Commission for England and WalesGovernment Administration

Competition and Markets AuthorityGovernment Administration

OfqualGovernment Administration

HM Land RegistryGovernment Administration

Attorney General's Office (UK)Government Administration

OfwatUtilities

Regulators’ Alliance for Progressing Infrastructure Development (RAPID)Utilities

NS&IFinancial Services

NS&I Government Payment ServicesGovernment Administration

UK Government Wales/Llywodraeth DU CymruGovernment Administration

Valuation Office AgencyGovernment Administration

UK Statistics Authority Government Administration

Scotland OfficeGovernment Administration

Government Actuary's DepartmentGovernment Administration

Government Legal DepartmentLegal Services

UK Export FinanceFinancial Services

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Northern PowerhouseCivic and Social Organizations

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Office for National StatisticsGovernment Administration

Government Statistical ServiceGovernment Administration

Civil Service Fast Stream Statisticians' OutreachGovernment Administration

Census2021Government Administration

Northern Ireland OfficeGovernment Administration

Infrastructure and Projects Authority (IPA)Government Administration

Department for Business and TradeGovernment Administration

GREAT Trade and InvestmentWholesale Import and Export

Business SupportGovernment Relations

UK Business and Trade - North AmericaGovernment Relations Services

Department for International Development (DFID)Government Administration

UK-Africa Investment Summit 2020Government Administration

Department for Environment, Food and Rural AffairsGovernment Administration

Defra digital, data, technology and securityIT Services and IT Consulting

Loading…

Defra Public Appointments Similar Companies

National Institute of Statistics and Geography of Mexico (INEGI)

inegi.org.mx

The National Institute of Statistics and Geography of Mexico (INEGI) is an autonomous institution of the Federal Public Sector. INEGI is the coordinator of the National System of Statistical and Geographical Information of Mexico. The main objective of INEGI is to provide statistical and geographical information to the state and to the society of Mexico, in order to contribute to national development under the principles of accessibility, transparency, objectivity and independence.

IBGE

ibge.gov.br

The Brazilian Institute of Geography and Statistics or IBGE (Portuguese: Instituto Brasileiro de Geografia e Estatística), is the agency responsible for statistical, geographic, cartographic, geodetic and environmental information in Brazil. The IBGE performs a national census every ten years, and the questionnaires account for information such as age, household income, literacy, education, occupation and hygiene levels. IBGE is an institution of the Federal Government, constituted a public foundation by Decree Law No. 161 of February 13, 1967, and is bound to the Brazilian Department of Planning, Budget and Management. It has four directors and two other central organs. IBGE has a network of national research and dissemination components, comprising: 27 state units (26 in state capitals and one in the Federal District); 27 centres for documentation and dissemination of information (26 in the capital and one in the Federal District); 581 data collection agencies in major cities. The IBGE also maintains the Roncador Ecological Reserve, situated 35 km south of Brasília.

I work for NSW

nsw.gov.au

The NSW public sector includes ten departments and many agencies and organisations working together to develop policy and deliver important services such as health, education, housing, transport and infrastructure across NSW. We are over 300,000 dedicated people who share the same values - making a difference, giving back and responding to the future. Read our community guidelines: bit.ly/PD-community-guidelines

Workingfor.be

workingfor.be

Workingfor.be is the job platform of the federal administration. Here, you will find a wide variety of jobs in different fields of profession. Every day thousands of our employees help build tomorrow's society. When you choose the federal administration, you choose an employer who embraces your talent and individuality and gives you the opportunity to develop yourself and your skills further every single day. Moreover, we offer you a job where you can easily find the balance between your professional and personal life. Do you want to contribute to the Belgium of tomorrow? Feel like making a difference and developing your talents? Discover our wide range of vacancies at www.workingfor.be

CONICET

conicet.gov.ar

El Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) es el principal organismo dedicado a la promoción de la ciencia y la tecnología en la Argentina. Su actividad se desarrolla en cuatro grandes áreas: • Ciencias agrarias, ingeniería y de materiales • Ciencias biológicas y de la salud • Ciencias exactas y naturales • Ciencias sociales y humanidades En el CONICET, además promovemos y gestionamos la transferencia de tecnologías, servicios y capacidades de Investigación y Desarrollo (I+D) que genera su comunidad científica hacia los sectores socioproductivos, Pymes, Gobiernos, organismos públicos y la sociedad civil. En ese sentido: • Conectamos recursos humanos altamente especializados con empresarios/as para generar oportunidades conjuntas. • Impulsamos la participación con cámaras y asociaciones empresarias, parques tecnológicos e industriales, organismos del Estado, ONG, organizaciones civiles, y redes nacionales e internacionales de vinculación tecnológica. • Facilitamos la transferencia al sector productivo mediante procesos de escalado, pruebas de concepto, entre otros. • Promovemos la creación de Empresas de Base Tecnológica. El CONICET es un ente autárquico del Estado Nacional en jurisdicción del Ministerio de Ciencia, Tecnología e Innovación.

Transportation Security Administration (TSA)

tsa.gov

The Transportation Security Administration (TSA) is a component agency of the U.S. Department of Homeland Security (DHS), committed to securing the nation’s transportation systems to ensure safe and efficient travel for all. Our mission is to protect the American people by preventing threats and disruptions in the transportation sector, while enhancing the overall passenger experience. 🔹 Mission: Safeguard transportation systems and prevent security threats 🔹 Vision: Achieve a secure and resilient transportation network 🔹 Values: Integrity, Excellence, Accountability, and Innovation More than 60,000 people around the world make up #TeamTSA and ensure the safety of millions of people each day as they travel by plane, train, automobile or ferry. From the officers you see on the frontlines to our cybersecurity and mission support teams, we’re working hard to combat evolving threats and keep you safe. Join us in our commitment to a more secure travel experience. For more information, visit tsa.gov.

NOAA: National Oceanic & Atmospheric Administration

cb noaa.gov

Welcome! We're the National Oceanic & Atmospheric Administration or NOAA. From daily weather forecasts, severe storm warnings and climate monitoring to fisheries management, coastal restoration and supporting marine commerce, our products and services support economic vitality and affect more than one-third of America’s gross domestic product. NOAA’s dedicated scientists use cutting-edge research and high-tech instrumentation to provide citizens, planners, emergency managers and other decision makers with reliable information they need when they need it. *Looking for your official local weather forecast? Enter your zip code at www.weather.gov or mobile.weather.gov for mobile device users. *Interested in working for NOAA? Find job openings by typing "NOAA" in the search field at www.USAjobs.gov. Connect with us on social media: X: @NOAA Bluesky: noaa.gov Facebook: www.facebook.com/noaa Instagram: www.instagram.com/noaa YouTube: www.youtube.com/noaa LinkedIn: www.linkedin.com/company/noaa For a list of NOAA's major social media channels by mission area, please visit www.noaa.gov/stay-connected

Gouvernement du Québec – Carrières

quebec.ca

Travailler dans la fonction publique du Québec, c'est plus qu'une carrière! Réparti(e)s dans une vingtaine de ministères et une soixantaine d'organismes à travers le Québec, tous les gestes posés par les employé(e)s de la fonction publique façonnent l’avenir de la société et contribuent à améliorer la vie des Québécoises et Québécois; nous rendons nos routes sécuritaires; nous protégeons nos richesses naturelles; nous faisons rayonner notre culture; nous améliorons nos milieux de vie; etc. Pour nous, être au service de la population, c’est bien plus qu’une carrière! Travailler dans la fonction publique québécoise permet d’œuvrer dans différentes organisations tout en maintenant ses conditions de travail. Nous adhérons aux valeurs de compétence, d’impartialité, d’intégrité, de loyauté et de respect; nous offrons de bonnes conditions de travail, de même que des milieux de travail sains et motivants, nous valorisons l’équité, la diversité et l’inclusion par notre Programme d’accès à l’égalité en emploi dont l’objectif principal est d’assurer une meilleure représentativité des groupes victimes de discrimination en emploi, nous favorisons l’équilibre entre la vie professionnelle et personnelle, nous misons sur le développement des compétences, nous sommes fier(ères) et dévoué(e)s. Nous sommes la fonction publique du Québec!

Secretaría de Educación Pública

onlinecareer360.com

MISIÓN/PROPÓSITO: La SEP tiene como propósito esencial crear condiciones que permitan asegurar el acceso de todas las mexicanas y mexicanos a una educación de calidad, en el nivel y modalidad que la requieran y en el lugar donde la demanden. VISIÓN: En el año 2025, México cuenta con un sistema educativo amplio, articulado y diversificado, que ofrece educación para el desarrollo humano integral de su población. El sistema es reconocido nacional e internacionalmente por su calidad y constituye el eje básico del desarrollo cultural, científico, tecnológico, económico y social de la Nación.

Loading…

NEWS

Defra Public Appointments CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

List of Ministerial Responsibilities (HTML)

1. Departments' correspondence email addresses for MPs and Peers 2. List of Cabinet Ministers Prime Minister, First Lord of the Treasury, Minister for the ...

Read Article

Rural Payments Agency framework document

RPA's responsibilities include making direct aid and rural development payments to farmers in England on behalf of the Secretary of State and ...

Read Article

VMD Framework Document

The Responsible Minister · is responsible for the policy framework within which the VMD operates · provides guidance and direction to ensure the ...

Read Article

CST register of members' interests

Personal and Business Interests · Principal, Jesus College Oxford · Professor of Computing Science, University of Oxford · Pro-Vice-Chancellor, University of ...

Read Article

Animal and Plant Health Agency framework document

The framework document sets out the broad governance framework within which APHA and Defra operate. It sets out and describes:

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…