What is the official website of Ecobank Cameroon ?

The official website of Ecobank Cameroon is https://www.ecobank.com/cm/.

What is Ecobank Cameroon's cybersecurity risk score?

Ecobank Cameroon has an AI-generated cybersecurity risk score of 759 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Ecobank Cameroon experienced?

According to Rankiteo, Ecobank Cameroon currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ecobank Cameroon been affected by any supply chain cyber incidents ?

According to Rankiteo, Ecobank Cameroon has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Ecobank Cameroon have SOC 2 Type 1 certification ?

According to Rankiteo, Ecobank Cameroon is not certified under SOC 2 Type 1.

Does Ecobank Cameroon have SOC 2 Type 2 certification ?

According to Rankiteo, Ecobank Cameroon does not hold a SOC 2 Type 2 certification.

Does Ecobank Cameroon comply with GDPR ?

According to Rankiteo, Ecobank Cameroon is not listed as GDPR compliant.

Does Ecobank Cameroon have PCI DSS certification ?

According to Rankiteo, Ecobank Cameroon does not currently maintain PCI DSS compliance.

Does Ecobank Cameroon comply with HIPAA ?

According to Rankiteo, Ecobank Cameroon is not compliant with HIPAA regulations.

Does Ecobank Cameroon have ISO 27001 certification ?

According to Rankiteo,Ecobank Cameroon is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ecobank Cameroon operate in ?

Ecobank Cameroon operates primarily in the Banking industry.

How many employees does Ecobank Cameroon have ?

Ecobank Cameroon employs approximately 763 people worldwide.

Does Ecobank Cameroon own any subsidiaries ?

Ecobank Cameroon presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ecobank Cameroon have ?

Ecobank Cameroon's official LinkedIn profile has approximately 72,474 followers.

What is the NAICS classification code for Ecobank Cameroon ?

Ecobank Cameroon is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does Ecobank Cameroon have a Crunchbase profile ?

No, Ecobank Cameroon does not have a profile on Crunchbase.

Does Ecobank Cameroon have a LinkedIn profile ?

Yes, Ecobank Cameroon maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ecobankcameroun.

How many cybersecurity incidents has Ecobank Cameroon experienced ?

As of August 2, 2026, Rankiteo reports that Ecobank Cameroon has not experienced any cybersecurity incidents.

How many peer or competitor companies does Ecobank Cameroon have ?

Ecobank Cameroon has an estimated 7,448 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Ecobank Cameroon

Boost Score +25 with badge (5 left)

759

/1000

Fair

784

/1000

Fair

Ecobank Cameroon Vendor Cyber Rating & Cyber Score

ecobank.com

Add Your Compliance Badge

Ecobank Cameroon is a member of Ecobank, the leading pan-African Bank operating in 36 African countries (more than any other bank in the world) with an international presence in Paris, London, Dubai and Beijing. Ecobank Cameroon is a full-service bank providing wholesale, retail, investment and transaction banking services and products to government, financial institutions, multinationals, international organizations, medium, small and micro businesses and individuals.

Ecobank Cameroon A.I CyberSecurity Scoring

Scoring History

Ecobank Cameroon

Ecobank Cameroon CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Ecobank Cameroon Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Ecobank Cameroon

Incidents vs Banking Industry Avg (This Year)

No incidents recorded for Ecobank Cameroon in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Ecobank Cameroon in 2026.

Incident Types Ecobank Cameroon vs Banking Industry Avg (This Year)

No incidents recorded for Ecobank Cameroon in 2026.

Incident History - Ecobank Cameroon (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ecobank Cameroon Subsidiaries

Ecobank Cameroon

Banking

Website: https://www.ecobank.com/cm/

Company Size: 201-500 employees

Ecobank Transnational IncorporatedFinancial Services

Ecobank Ghana PLCFinancial Services

Ecobank RDCBanking

Ecobank GuinéeBanking

Ecobank SénégalBanking

Ecobank NigeriaFinancial Services

Ecobank Côte d'IvoireFinancial Services

Ecobank TchadBanking

Ecobank BurkinaBanking

Ecobank GabonBanking

EcobankTogoBanking

Ecobank ZambiaFinancial Services

Ecobank Kenya LimitedBanking

Ecobank MaliBanking

Ecobank UgandaFinancial Services

Ecobank Uganda LimitedBanking

Ecobank International SABanking

Ecobank LiberiaBanking

ECOBANK BENIN LIMITEDFinancial Services

Ecobank RwandaBanking

Ecobank Cape VerdeBanking

ECOBANK GUINE-BISSAU SABanking

Ecobank Guinea EcuatorialBanking

Ecobank TanzaniaBanking

Ecobank Gambia LimitedFinancial Services

Ecobank Guiné-BissauBanking

Loading…

Ecobank Cameroon Similar Companies

Maybank

maybank.com

Maybank Group is the leading financial services provider in Malaysia catering to the needs of consumers, investors, entrepreneurs, non-profit organisations and corporations. The Group, which has expanded internationally, has the largest network among Malaysian banks of over 2,400 branches and offices in 20 countries, employing over 44,000 Maybankers and serving over 22 million customers. It is the only regional bank with a presence in all 10 ASEAN countries (as of November 2016). By strengthening our core business and franchise, we gain competitive advantage by achieving synergies across our diverse group. Domestically we aim to achieve leadership across key and profitable segments. Internationally we capture value from new investments and continue to pursue organic expansion by delivering innovation and superior customer value. We are a top recruiter of talent and view our leadership pool and talent pipeline as key to realising our aspirations. We constantly seek to enhance performance management and achieve cost optimisation by focusing on effective IT operations and enhancing employee productivity. Maybank & Maybank Islamic are members of PIDM in Malaysia.

SEB

sebgroup.com

SEB is a leading northern European financial services group with a strong belief that entrepreneurial minds and innovative companies are key in creating a better world. SEB takes a long-term perspective and supports its customers in good times and bad. In Sweden and the Baltic countries, SEB offers financial advice and a wide range of financial services. In Denmark, Finland, Norway and Germany the bank's operations have a strong focus on corporate and investment banking based on a full-service offering to corporate and institutional clients. The international nature of SEB's business is reflected in its presence in some 20 countries worldwide. Read more about SEB at www.sebgroup.com Privacy note about SEB’s processing of your personal data can be found at: www.sebgroup.com/legal-and-regulatory-information/privacy-at-seb-group Content shared on this page may contain commercial information from SEB.

Regions Bank

regions.com

Regions Financial Corporation is a member of the S&P 500 Index and is one of the nation’s largest full-service providers of consumer and commercial banking, wealth management, and mortgage products and services. Regions serves customers across the South, Midwest and Texas, and through its subsidiary, Regions Bank, operates more than 1,250 banking offices and more than 2,000 ATMs. Additional information about Regions and its full line of products and services can be found at www.regions.com. Ticker Symbol: RF on the NYSE Regions' Social Media & Community Guidelines: http://spr.ly/lismcg Regions' Privacy & Security Policy: http://spr.ly/lipp https://www.regions.com/help/social-media Regions Bank, Member FDIC. Equal Housing Lender. NMLS #174490. Only bank deposits are FDIC insured. Non-Deposit Products including Investments, Securities, Mutual Funds, Insurance Products, Crypto Assets, and Annuities Are Not FDIC Insured | Are Not Bank Guaranteed | May Lose Value | Are Not Deposits | Are not a condition of any Banking Activity | Are Not Insured by any Government Agency Equal Opportunity Employer/Including Disabled/Veterans Regions provides links to other websites or apps for your convenience and does not control the content, services or products provided on the linked website or app, whose Privacy and security policies or procedures may differ. Consult the policies or disclosures on their website. © 2025 Regions Bank. Regions and the Regions logo are registered trademarks of Regions Bank. The LifeGreen color is a trademark of Regions Bank.

Banco do Brasil

cb bb.com.br

Eu experimentei um novo jeito de me comunicar com você. Você usa o mundo digital para criar um universo totalmente seu e nesse novo universo eu acompanho você. Eu sei… Você é muito mais que digital. Eu olho para você e me vejo. Este é um dos motivos de eu estar aqui para conversar com você. Eu sou brasileiro como você. Eu sou um banco de mercado para manter a sustentabilidade da minha atuação. Eu fomento a produção agropecuária e a indústria nacional. Sou o maior parceiro das micro e pequenas empresas. Invisto há décadas no esporte brasileiro porque acredito na sua competência e garra. Eu tenho espírito público para criar valor para cada um dos brasileiros. Persigo a eficiência, com determinação, para otimizar os recursos disponíveis pensando nesta e em futuras gerações. Acredito no potencial de todas as pessoas e tenho como objetivo de vida ser uma referência de comportamento pessoal e profissional. Inovo a cada passo que dou para garantir que você e todos os brasileiros possam contar comigo sempre. Eu sou mais que digital. Estou aqui no LinkedIn para conversar com você sobre como podemos fazer um presente e um futuro melhores. Me encontre também nos outros canais: Facebook: www.facebook.com/bancodobrasil Twitter: www.twitter.com/bancodobrasil Instagram: www.instagram.com/bancodobrasil

OCBC

ocbc.com

OCBC is the longest established Singapore bank, formed in 1932 from the merger of three local banks, the oldest of which was founded in 1912. It is now the second largest financial services group in Southeast Asia by assets and one of the world’s most highly-rated banks, with an Aa1 rating from Moody’s. Recognised for its financial strength and stability, OCBC is consistently ranked among the World’s Top 50 Safest Banks by Global Finance and has been named Best Managed Bank in Singapore by The Asian Banker. OCBC and its subsidiaries offer a broad array of commercial banking, specialist financial and wealth management services, ranging from consumer, corporate, investment, private and transaction banking to treasury, insurance, asset management and stockbroking services. OCBC’s key markets are Singapore, Malaysia, Indonesia and Greater China. It has more than 570 branches and representative offices in 19 countries and regions. These include about 300 branches and offices in Indonesia under subsidiary Bank OCBC NISP, and over 90 branches and offices in Mainland China, Hong Kong SAR and Macau SAR under OCBC Wing Hang. OCBC’s private banking services are provided by its wholly-owned subsidiary Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals. OCBC's insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia. Its asset management subsidiary, Lion Global Investors, is one of the largest private sector asset management companies in Southeast Asia.

QNB Türkiye

qnb.com.tr

Finansbank A.Ş. 26 Ekim 1987 tarihinde iş insanı Hüsnü Özyeğin liderliğinde 100 ortakla Bankalar Kanunu ve Türk Ticaret Kanunu hükümleri uyarınca kuruldu. Sektörde hızlı büyeme ile ilk 5 büyük özel banka arasına giren QNB Finansbank, 2006 yılında Yunanistan'ın en büyük bankası National Bank of Greece (NBG) tarafından satın alındı. Bu birleşme sonucunda NBG'nin Güneydoğu Avrupa'da sahip olduğu lider konumu ile bankanın Türkiye'deki yüksek büyüme potansiyeli bir araya geldi. 2006 yılından itibaren bireysel bankacılıkta da hızla büyüyen Finansbank; kredi kartı, dijitalleşme, teknoloji alanındaki yatırımları ve yarattığı çözümleri ile sektörde ilklere imza atan banka konumuna geldi. Ekim 2012'de tüm hizmetlerini sadece dijital kanallar üzerinden sunan ve Türkiye'nin ilk şubesiz dijital bankası olan Enpara.com'u kuran Finansbank, bu alanda Türkiye'de sektörde yeni bir dönemin kapılarını açtı. 2016 yılının haziran ayında Orta Doğu ve Afrika bölgesinin lider finansal kuruluşu olan Katar'ın en büyük bankası Qatar National Bank S.A.Q (QNB Group) tarafından satın alınan QNB Finansbank, uluslararası bir yapının parçası haline geldi. Böylelikle bankanın yeni ismi Ekim 2016 itibarıyla QNB Finansbank oldu. QNB Group'un, global bir marka olma vizyonu doğrultusunda ismini 2024 yılının Ekim ayı itibarıyla QNB Türkiye olarak yeniledi. QNB Türkiye, kurum kültürünü geleceğe taşıyan dinamik ve yenilikçi bir yapıya sahip. "Önce İnsan'' anlayışıyla çalışanların gelişimine öncelik veren banka, "Güven'' ile güçlü bir iş birliği ortamı kuruyor. Bankanın değerleri arasında yer alan "Adaptasyon'' ile değişimlere hızla uyum sağlarken, "Öncü Olmak'' vizyonuyla sektörde fark yaratıyor, "Birlikte Gelişim'' ilkesiyle de başarıya hep birlikte ulaşıyor. QNB Türkiye, çatısı altındaki iştirakleri QNB Leasing, QNB Invest, QNB Portföy, QNB Faktoring, QNB Sağlık, IBTech ve QNB eSolutions ile müşterilerinin tüm finansal ihtiyaçlarına yaratıcı, hızlı ve kolay çözümler sunmaya devam ediyor.

Security Bank Corporation

cb securitybank.com

Security Bank is one of the Philippines’ best-capitalized private domestic universal banks. Established in 1951 and publicly listed with the Philippine Stock Exchange (PSE: SECB) in 1995, our major businesses cover retail, corporate, commercial, and business (MSME) banking. We’re recognized as an Employer of Choice in Philippine banking by various award-giving bodies for our values-based culture, industry-leading engagement and benefits, and commitment to work-life balance. Most recently, we ranked #2 best employer in the Philippines and #54 globally on the prestigious Forbes’ World’s Best Employers 2023 list. At Security Bank, our approach to Human Capital Management (HCM) is embodied by our Employee Value Proposition (EVP): “YOU matter.” Start your BetterBankingcareer with us today. For the complete list of Security Bank's awards, you may visit: https://www.securitybank.com/about-us/awards/

TD

td.com

The Toronto-Dominion Bank & its subsidiaries are collectively known as TD Bank Group (TD). TD is the sixth largest bank in North America by assets & serves approx. 28 million customers in a number of locations in key financial centres around the globe. With over 95,000 employees, TD ranks among the world's leading online financial firms, with more than 17 million active online and mobile customers. Delivering legendary customer experiences is who we are & is part of our goal to be the Better Bank. Visit our Careers page to learn more about TD & why TD is a great place to work.

Comerica Bank

comerica.com

Comerica Bank, a division of Fifth Third Bank, N.A. Member FDIC. Comerica Incorporated (NYSE: CMA) is a financial services company headquartered in Dallas, Texas, strategically aligned by the Business Bank, the Retail Bank, and Wealth Management. The Business Bank provides companies of all sizes with an array of credit and non-credit financial products and services. The Retail Bank delivers personalized financial products and services to consumers. Wealth Management serves the needs of high net worth clients and institutions. Comerica’s approximately 8,000 colleagues focus on relationships, and helping people and businesses be successful. Comerica operates in seven of the 10 largest U.S. cities, with more than 430 banking centers in its primary markets of Texas, Arizona, California, Florida and Michigan. Select businesses operate in several other states, as well as in Canada and Mexico. Comerica is among the 25 largest U.S. banking companies. Visit Comerica's Facebook page at facebook.com/Comerica or on Twitter at @ComericaBank for more information on how Comerica is making a positive difference in the communities it serves. To learn more about Comerica’s products, services and career opportunities, visit Comerica.com.

Loading…

NEWS

Ecobank Cameroon CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 23, 2025 07:00 AM

Flutterwave expands further with license in Cameroon

Flutterwave has launched financial services for enterprises in Cameroon after securing a digital payment license through a technical partnership with Ecobank.

Read Article

December 15, 2022 12:55 PM

"Africa's mobile money platform has become more attractive to fraudsters": In conversation with Ecobank's Mark Akinyode

Ecobank group chief information security officer Mark Akinyode explains the state of play regarding cyber security in Africa.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…