What is Deutsche Telekom - Digital, Experience & Delivery's cybersecurity risk score?

Deutsche Telekom - Digital, Experience & Delivery has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Deutsche Telekom - Digital, Experience & Delivery experienced?

According to Rankiteo, Deutsche Telekom - Digital, Experience & Delivery currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Deutsche Telekom - Digital, Experience & Delivery been affected by any supply chain cyber incidents ?

According to Rankiteo, Deutsche Telekom - Digital, Experience & Delivery has been affected by a supply chain cyber incident involving Lovable, with the incident ID LOV1776717678.

Does Deutsche Telekom - Digital, Experience & Delivery have SOC 2 Type 1 certification ?

According to Rankiteo, Deutsche Telekom - Digital, Experience & Delivery is not certified under SOC 2 Type 1.

Does Deutsche Telekom - Digital, Experience & Delivery have SOC 2 Type 2 certification ?

According to Rankiteo, Deutsche Telekom - Digital, Experience & Delivery does not hold a SOC 2 Type 2 certification.

Does Deutsche Telekom - Digital, Experience & Delivery comply with GDPR ?

According to Rankiteo, Deutsche Telekom - Digital, Experience & Delivery is not listed as GDPR compliant.

Does Deutsche Telekom - Digital, Experience & Delivery have PCI DSS certification ?

According to Rankiteo, Deutsche Telekom - Digital, Experience & Delivery does not currently maintain PCI DSS compliance.

Does Deutsche Telekom - Digital, Experience & Delivery comply with HIPAA ?

According to Rankiteo, Deutsche Telekom - Digital, Experience & Delivery is not compliant with HIPAA regulations.

Does Deutsche Telekom - Digital, Experience & Delivery have ISO 27001 certification ?

According to Rankiteo,Deutsche Telekom - Digital, Experience & Delivery is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Deutsche Telekom - Digital, Experience & Delivery operate in ?

Deutsche Telekom - Digital, Experience & Delivery operates primarily in the Telecommunications industry.

How many employees does Deutsche Telekom - Digital, Experience & Delivery have ?

Deutsche Telekom - Digital, Experience & Delivery employs approximately 5 people worldwide.

Does Deutsche Telekom - Digital, Experience & Delivery own any subsidiaries ?

Deutsche Telekom - Digital, Experience & Delivery presently has no subsidiaries across any sectors.

How many LinkedIn followers does Deutsche Telekom - Digital, Experience & Delivery have ?

Deutsche Telekom - Digital, Experience & Delivery's official LinkedIn profile has approximately 1,012 followers.

What is the NAICS classification code for Deutsche Telekom - Digital, Experience & Delivery ?

Deutsche Telekom - Digital, Experience & Delivery is classified under the NAICS code 517, which corresponds to Telecommunications.

Does Deutsche Telekom - Digital, Experience & Delivery have a Crunchbase profile ?

No, Deutsche Telekom - Digital, Experience & Delivery does not have a profile on Crunchbase.

Does Deutsche Telekom - Digital, Experience & Delivery have a LinkedIn profile ?

Yes, Deutsche Telekom - Digital, Experience & Delivery maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/deutsche-telekom-digital-experience-delivery.

How many cybersecurity incidents has Deutsche Telekom - Digital, Experience & Delivery experienced ?

As of August 2, 2026, Rankiteo reports that Deutsche Telekom - Digital, Experience & Delivery has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Deutsche Telekom - Digital, Experience & Delivery have ?

Deutsche Telekom - Digital, Experience & Delivery has an estimated 10,260 peer or competitor companies worldwide.

What types of cybersecurity incidents has Deutsche Telekom - Digital, Experience & Delivery faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DTDED

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

Deutsche Telekom - Digital, Experience & Delivery Vendor Cyber Rating & Cyber Score

telekom.com

Add Your Compliance Badge

Digital, Product and Engineering for Deutsche Telekom Europe

DTDED A.I CyberSecurity Scoring

Scoring History

DTDED

Deutsche Telekom - Digital, Experience & Delivery CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Deutsche Telekom

Breach

4/2026

Lovable

LOV1776717678

Loading…

A.I.

DTDED Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DTDED

Incidents vs Telecommunications Industry Avg (This Year)

No incidents recorded for Deutsche Telekom - Digital, Experience & Delivery in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Deutsche Telekom - Digital, Experience & Delivery in 2026.

Incident Types DTDED vs Telecommunications Industry Avg (This Year)

No incidents recorded for Deutsche Telekom - Digital, Experience & Delivery in 2026.

Incident History - DTDED (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Deutsche Telekom - Digital, Experience & Delivery Subsidiaries

DTDED

Telecommunications

Website: https://www.telekom.com/en

Company Size: 5

Deutsche TelekomTelecommunications

T-Systems InternationalIT Services and IT Consulting

T-Systems MéxicoIT Services and IT Consulting

T-Systems Nederland B.V.IT Services and IT Consulting

T-Systems CloudIT-Dienstleistungen und IT-Beratung

T-Systems do BrasilIT Services and IT Consulting

T-Security ConnectAtividades de monitoramento de sistemas de segurança

T-Systems ICT India Pvt. Ltd.IT Services and IT Consulting

Deutsche Telekom IoTIT Services and IT Consulting

Hrvatski TelekomTelecommunications

Telekom HUTelecommunications

T BusinessTelekommunikation

T-Systems SingaporeIT Services and IT Consulting

T-Mobile PolskaTelecommunications

Slovak TelekomTelecommunications

Telekom Business EuropeTelecommunications

DeteconBusiness Consulting and Services

Deutsche Telekom Cloud ServicesTelecommunications

Deutsche Telekom Global CarrierTelekommunikation

Deutsche Telekom Services Europe Romania (DTSE Romania)Outsourcing and Offshoring Consulting

Deutsche Telekom IT Solutions SlovakiaIT Services and IT Consulting

T-Systems SwitzerlandIT Services and IT Consulting

Makedonski Telekom ADTelecommunications

congstarTelecommunications

T-Mobile Biznes PolskaTelecommunications

Deutsche Telekom Services Europe - SlovakiaOutsourcing and Offshoring Consulting

Deutsche Telekom Services Europe - Czech RepublicOutsourcing and Offshoring Consulting

T-Systems RomaniaIT Services and IT Consulting

MagentaZuhauseTelekommunikation

T-Mobile Czech Republic a.s.Telecommunications

Deutsche Telekom HealthcareHospitals and Health Care

LIFECARE Laboratorium InformatiesysteemZiekenhuizen en gezondheidszorg

Deutsche Telekom Design & Customer ExperienceTelecommunications

Deutsche Telekom Investor RelationsTelekommunikation

T SportTelecommunications

Deutsche Telekom UK LimitedTelecommunications

Deutsche Telekom Clinical Solutions India Pvt. Ltd.IT Services and IT Consulting

Telekom MMSIT Services and IT Consulting

T-Systems MMSIT Services and IT Consulting

T-Systems NordicIT Services and IT Consulting

Telekom Open SpacesTelekommunikation

DeTeAssekuranz Vermittlungsgesellschaft mbHInsurance

Deutsche Telekom EU PolicyTelecommunications

T-Systems UKIT Services and IT Consulting

Cyber Security at T-SystemsIT Services and IT Consulting

T-Systems VamosaIT Services and IT Consulting

T-Mobile Polska Business Solutions IT Services and IT Consulting

T-Systems AustriaInformation Technology & Services

Digitales GesundheitswesenWellness und Fitness

Deutsche Telekom Global Business Solutions FranceInformation Technology & Services

T-Systems Hungary Ltd.IT Services and IT Consulting

T-Systems FranceIT Services and IT Consulting

Deutsche Telekom StiftungNon-profit Organizations

T-Mobile Czech RepublicTelekomunikace

Telekom TechBoostTelekommunikation

Inflight Services of Deutsche TelekomTelekommunikation

Deutsche Telekom Global BusinessTelecommunications

Telekom Strategy ConsultingTelekommunikation

Deutsche Telekom Digital LabsTelecommunications

T-Systems IberiaIT Services and IT Consulting

Agile Hub T-Systems IberiaServicios y consultoría de TI

DigiCloudServicios y consultoría de TI

GIMM SolutionsIT Services and IT Consulting

J-EDI Digital SolutionsInformation Technology & Services

Loading…

Deutsche Telekom - Digital, Experience & Delivery Similar Companies

Telia

teliacompany.com

Our 15 000 talented colleagues serve millions of customers every day in one of the world’s most connected regions. With a strong connectivity base, we’re the hub in the digital ecosystem, empowering people, companies and societies to stay in touch with everything that matters 24/7/365 - on their terms. Our goal is to make Telia better for customers, employees, owners and societies in the Nordics and the Baltics.

Spectrum

spectrum.com

Spectrum is a suite of advanced communications services offered by Charter Communications, Inc. (NASDAQ:CHTR), a leading broadband connectivity company available to more than 57 million homes and small to large businesses across 41 states. Founded in 1993, Charter has evolved from providing cable TV to streaming, and from high-speed Internet to a converged broadband, WiFi and mobile experience. Over the Spectrum Fiber Broadband Network and supported by our 100% U.S.-based employees, the Company offers Seamless Connectivity and Entertainment with Spectrum Internet®, Mobile, TV and Voice products. More information can be found at corporate.charter.com.

Vodafone Idea Limited

cb myvi.in

Vodafone Idea Limited is an Aditya Birla Group and Vodafone Group partnership. It is India’s leading telecom service provider. The Company provides pan India Voice and Data services across 2G, 3G and 4G platform. With the large spectrum portfolio to support the growing demand for data and voice, the company is committed to deliver delightful customer experiences and contribute towards creating a truly ‘Digital India’ by enabling millions of citizens to connect and build a better tomorrow. The Company is developing infrastructure to introduce newer and smarter technologies, making both retail and enterprise customers future ready with innovative offerings, conveniently accessible through an ecosystem of digital channels as well as extensive on-ground presence. The Company is listed on National Stock Exchange (NSE) and Bombay Stock Exchange (BSE) in India.

e& Egypt

eand.com.eg

Building on 17 years of technology excellence in the Egyptian market, and in our relentless quest to bring you more and better services, etisalat by e& in Egypt has now evolved into the digital telco of the future. Covering and serving 99% of the inhabited areas in Egypt, our mission as etisalat by e& in Egypt is to continuously grow and transform to empower our customers by enhancing their digital experience and ensuring operation agility. etisalat by e& in Egypt offers digital experiences that cater to your ever-changing lifestyle and ever-expanding demands – covering not only telecom, but a wide collection of services that suit your various needs. We will continue to be your trusted companion and consultant, enabling connectivity and everything beyond, accelerating the digital world and pioneering future-forward spaces. Together, as we embark on this new era of etisalat by e& in Egypt, we make possible countless connections across continents and create the limitless possibilities of tomorrow, today. etisalat by e& in Egypt #MakePossible بعد ١٥ سنة من تفوقنا التكنولوجي في مصر، ولإننا حابين نقدم خدمات كتيرة عالية الجودة لكل عملائنا، جه الوقت إللي نطور في “اتصالات من &e في مصر” وندخل المستقبل الرقمي من أوسع الأبواب! شبكتنا النهاردة بتغطي ۹۹% من مناطق مصر، وبنطور يوم ورا يوم عشان نوصل رسالتنا بالنمو والتحول والتفوق، كل دا عشان نوفر لعملائنا أفضل تجربة رقمية، ونسرع العملية التشغيلية. النهاردة في “اتصالات من &e في مصر” إحنا جاهزين نقدملكم خدمات رقمية جديدة تسهلكو حياتكم اليومية، ومع خدمة المكالمات التقليدية، حنوفرلكم خدمات تانية كتير! لإننا بجد شريكم الموثوق، إللي بيخليكم على تواصل، وبياخدكم للمستقبل عبر تسريع الاقتصاد الرقمي والريادة. مع “اتصالات من &e في مصر” حنبدأ مع بعض عصر جديد، ونقربكم من بعض عبر القارات، ومع بعض حنكتشف إمكانيات بكرة اللامحدودة من النهاردة. “اتصالات من &e في مصر” ... معانا #makepossible

SFR

sfr.com

SFR is the number one alternative telecoms operator in France. SFR is also an operator providing a comprehensive range of services meeting the expectations of private and business customers alike, offering them the best of the digital world. At year-end 2011, the total number of mobile customers was 21.5 million, and the active broadband residential customer base represented 5 million customers, which represent respectively a 31.3% and 22% market share.

Orange

orange.com

Orange is one of the world’s leading telecommunications operators with revenues of 40.3 billion euros in 2024 and 127,000 employees worldwide at 31 December 2024, including 71,000 employees in France. The Group has a total customer base of 291 million customers worldwide at 31 December 2024, including 253 million mobile customers and 22 million fixed broadband customers. The Group is present in 26 countries. Orange is also a leading provider of global IT and telecommunication services to multinational companies under the brand Orange Business. In February 2023, the Group presented its strategic plan « Lead the future », built on a new business model and guided by responsibility and efficiency. « Lead the future » capitalizes on network excellence to reinforce Orange's leadership in service quality.

Ooredoo Group

ooredoo.com

We are an award-winning international communications company operating across the Middle East, North Africa and Southeast Asia. Serving consumers and businesses in 10 countries, we deliver a leading data experience through a broad range of content and services via our advanced, data-centric mobile and fixed networks. With a customer base of more than 138 million people, we work hard to provide the best customer and network experience we can. We believe in the power of mobile technology to bring about social and economic progress.

Lumen Technologies

lumen.com

Lumen connects the world. We digitally connect people, data and applications – quickly, securely and effortlessly. Everything we do at Lumen takes advantage of our network strength. From metro connectivity to long-haul data transport to our edge cloud, security, and managed service capabilities, we meet our customers’ needs today and as they build for tomorrow.

Zain Group

zain.com

Zain Group is a leading provider of innovative ICT technologies & digital lifestyle communications operating in 8 markets across the Middle East & Africa, serving 51.3 million active customers as of 30 September 2025. Zain provides mobile voice, data and B2B services in: Kuwait, Bahrain, Iraq, Jordan, Saudi Arabia, Sudan and South Sudan. Headquartered in the UAE, ZainTECH, the Group’s one-stop digital and ICT solutions provider, is playing a key role in the digital transformation of enterprise and government clientele across the MENA region. Also UAE based, Zain Omantel International (ZOI) is revolutionizing the international telecommunications wholesale landscape as the premier wholesale powerhouse serving regional operators, international carriers, and global hyperscalers. In Morocco, Zain has a 15.5% stake in ‘INWI’, through a joint venture. Zain is listed on the Boursa Kuwait (stock ticker: ZAIN). We recommend the Investor Community to download the “Zain Group Investor Relations” Mobile App. For more, please email [email protected]

Loading…

NEWS

Deutsche Telekom - Digital, Experience & Delivery CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 15, 2026 08:00 AM

ElevenLabs and Deutsche Telekom Bet Big on AI Voice Agents for Customer Service

After countless CX conversations, one theme consistently stands out: customers do not judge an experience by your intent, they judge it by...

Read Article

January 09, 2026 08:00 AM

First Orion partners with Deutsche Telekom to launch branded calling to combat call fraud in Germany

NORTH LITTLE ROCK, AR — First Orion, a leading provider of branded calling solutions, today announced a new go-to-market collaboration with...

Read Article

November 12, 2025 02:15 AM

Deutsche Telekom Launches RAN Guardian AI Agent for Autonomous Network Management

Deutsche Telekom's AI agent, the RAN Guardian Agent, is now live. Operating in the context of network events and exceptional situations, the agent actively...

Read Article

November 10, 2025 08:00 AM

Decagon Announces Commercial Pilot With Deutsche Telekom And Strategic Investment from T.Capital

Decagon announced a new commercial pilot with Deutsche Telekom, along with a strategic investment from T.Capital, the corporate venture arm...

Read Article

November 10, 2025 08:00 AM

Decagon Announces Commercial Pilot with Deutsche Telekom and Strategic Investment from T.Capital to Fuel Enterprise Growth

SAN FRANCISCO–(BUSINESS WIRE)–WEB SUMMIT 2025 – Decagon, the leader in conversational AI agents for concierge customer experiences,...

Read Article

October 30, 2025 07:00 AM

Aduna, Deutsche Telekom, mBank and Vonage Join Forces at World Banking Forum to Showcase the Future of Banking Security

PRNewswire/ -- Vonage, a part of Ericsson (NASDAQ: ERIC), today announced that, together with leaders from Aduna, Deutsche Telekom,...

Read Article

October 24, 2025 07:00 AM

T-Mobile says joint OpenAI platform now live, ‘paying dividends’

The Un-Carrier's tie-up with OpenAI is now 'touching customers' and said to be bearing fruit by optimising handset upgrades…

Read Article

September 29, 2025 01:52 AM

Magyar Telekom Expands Fiber Network with 10Gb XGSPON & WiFi 7 Innovation

Magyar Telekom has reached another milestone: it has launched XGSPON technology covering the whole country, which takes the home and business connectivity...

Read Article

September 10, 2025 07:00 AM

Solos partners with Deutsche Telekom and Showcases the Future of Smart Glasses at Digital X

First joint initiative brings an AI-powered cooking app to Solos' AirGo™ smart glasses, demonstrating the potential of Solos' open SDK...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…