What is the official website of Go China Connection ?

The official website of Go China Connection is https://www.microsoft.com/zh-cn.

What is Go China Connection's cybersecurity risk score?

Go China Connection has an AI-generated cybersecurity risk score of 752 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Go China Connection experienced?

According to Rankiteo, Go China Connection currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Go China Connection been affected by any supply chain cyber incidents ?

According to Rankiteo, Go China Connection has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: OpenAI (Incident ID: CHE1784787889) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) AsyncAPI Initiative (Incident ID: ASYMIC1785327908) Packagist Conductors (Incident ID: WHMPACGITCPA1784816835) ShapedPlugin LLC (Incident ID: FORSHATANMICJAMIRHTEX1782147825) PRODAFT (Incident ID: MICSENKASESECRO1782073479) GitHub (Incident ID: GIT1780453444) npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) npm, Inc. (Incident ID: NPMGIT1779963893) ANTV INC (Incident ID: ANTGIT1779395279) Google (Incident ID: OPEMICBRAGOOVIVBRO1779395125) GitHub (Incident ID: GIT1779459975) Microsoft Security (Incident ID: PUTWEBANYMIC1779215753) NXP Semiconductors (Incident ID: NPMGITNXPMIC1779193496) TanStack (Incident ID: GRA1779006227) GitHub (Incident ID: GIT1779251025) GitHub (Incident ID: PHPGIT1778747372) GitHub (Incident ID: GOO1778567308) Anthropic (Incident ID: ANT1778581440) TanStack (Incident ID: MIS1778869722) Google AI (Incident ID: GITGOO1780431903) PyPI (Incident ID: PYPGIT1PA1778761827) GitHub (Incident ID: MICMICMICGIT1780813480) CodeRabbit (Incident ID: CODGIT1783765479) Citrix (Incident ID: MICTHESECCIT1785522270) Google (Incident ID: GITGOO1777302471) npm, Inc. (Incident ID: GITNPMASU1776918263) Bitwarden (Incident ID: BIT1776975830) Checkmarx (Incident ID: CHEDOCGIT1776961598) Mercor (Incident ID: ANTMIC1776882793)

Does Go China Connection have SOC 2 Type 1 certification ?

According to Rankiteo, Go China Connection is not certified under SOC 2 Type 1.

Does Go China Connection have SOC 2 Type 2 certification ?

According to Rankiteo, Go China Connection does not hold a SOC 2 Type 2 certification.

Does Go China Connection comply with GDPR ?

According to Rankiteo, Go China Connection is not listed as GDPR compliant.

Does Go China Connection have PCI DSS certification ?

According to Rankiteo, Go China Connection does not currently maintain PCI DSS compliance.

Does Go China Connection comply with HIPAA ?

According to Rankiteo, Go China Connection is not compliant with HIPAA regulations.

Does Go China Connection have ISO 27001 certification ?

According to Rankiteo,Go China Connection is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Go China Connection operate in ?

Go China Connection operates primarily in the IT Services and IT Consulting industry.

How many employees does Go China Connection have ?

Go China Connection employs approximately None employees people worldwide.

Does Go China Connection own any subsidiaries ?

Go China Connection presently has no subsidiaries across any sectors.

How many LinkedIn followers does Go China Connection have ?

Go China Connection's official LinkedIn profile has approximately 1,136 followers.

What is the NAICS classification code for Go China Connection ?

Go China Connection is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Go China Connection have a Crunchbase profile ?

No, Go China Connection does not have a profile on Crunchbase.

Does Go China Connection have a LinkedIn profile ?

Yes, Go China Connection maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/go-china-connection.

How many cybersecurity incidents has Go China Connection experienced ?

As of August 2, 2026, Rankiteo reports that Go China Connection has experienced 100 cybersecurity incidents.

How many peer or competitor companies does Go China Connection have ?

Go China Connection has an estimated 41,229 peer or competitor companies worldwide.

What types of cybersecurity incidents has Go China Connection faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

GCC

Boost Score +25 with badge (5 left)

752

/1000

Fair

777

/1000

Fair

Go China Connection Vendor Cyber Rating & Cyber Score

microsoft.com

Add Your Compliance Badge

Email: [email protected] To serve our most important multinational customers as they deepen their presence in China and empower them with rapidly iterating technology innovation. To address customers' challenge in China due to regulation and market landscape, we have a dedicated team here to serve MNC customers.

GCC A.I CyberSecurity Scoring

Scoring History

GCC

Go China Connection CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Microsoft Security ...

Vulnerability

100

7/2026

MIC1785392682

Microsoft Security

Cyber Attack

7/2026

MIC1784881741

Microsoft Security

Vulnerability

7/2026

MIC1784744777

Microsoft Security ...

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Microsoft Security

Cyber Attack

7/2026

MIC1784658331

Microsoft Threat In...

Vulnerability

7/2026

MICNOVBRU178442...

Microsoft Security

Vulnerability

7/2026

MIC1784096635

Microsoft

Vulnerability

100

7/2026

MIC1784125827

Microsoft Security

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Microsoft Security

Vulnerability

7/2026

MIC1784096831

Microsoft Security

Vulnerability

100

7/2026

MIC1784141218

Microsoft

Vulnerability

7/2026

MIC1784089434

Microsoft

Vulnerability

7/2026

MIC1784816949

Microsoft Threat In...

Cyber Attack

100

7/2026

AsyncAPI Initia...

ASYMIC178532790...

Microsoft Security ...

Vulnerability

7/2026

MIC1784298242

GitHub

Cyber Attack

100

7/2026

Packagist Condu...

WHMPACGITCPA178...

Microsoft Threat In...

Cyber Attack

100

7/2026

MIC1783680524

GitHub

Vulnerability

7/2026

GIT1783441439

Microsoft Security ...

Vulnerability

100

7/2026

MIC1783441514

Microsoft Security ...

Vulnerability

7/2026

MIC1783067043

Microsoft

Vulnerability

6/2026

MIC1782721445

Microsoft Security

Cyber Attack

6/2026

MIC1782483842

Microsoft Security

Cyber Attack

6/2026

MIC1782404840

Microsoft Security

Vulnerability

6/2026

MIC1782375843

Microsoft

Breach

6/2026

ANAMIC178542315...

Microsoft Security

Cyber Attack

6/2026

ShapedPlugin LL...

FORSHATANMICJAM...

Microsoft Security ...

Ransomware

100

6/2026

MIC1782204242

Microsoft Security

Cyber Attack

6/2026

PRODAFT

MICSENKASESECRO...

GitHub

Cyber Attack

6/2026

GIT1781778547

Microsoft Security

Vulnerability

6/2026

MIC1781785861

Microsoft Threat In...

Cyber Attack

6/2026

MIC1781713463

Microsoft Security ...

Vulnerability

6/2026

MIC1781238231

Microsoft Security

Cyber Attack

6/2026

SPOMICADO178120...

Microsoft Security ...

Vulnerability

6/2026

MIC1781072633

Microsoft Security ...

Vulnerability

6/2026

MIC1781785666

Microsoft Security ...

Vulnerability

6/2026

MIC1781101475

Microsoft Security

Vulnerability

6/2026

MIC1782296659

Microsoft Security ...

Breach

6/2026

MIC1780986305

Microsoft

Cyber Attack

6/2026

MIC1780900177

Microsoft Security ...

Vulnerability

6/2026

MIC1780640667

Microsoft 365

Vulnerability

6/2026

LINMIC178053984...

Microsoft Threat In...

Cyber Attack

6/2026

MICISR178456517...

GitHub

Vulnerability

100

6/2026

GitHub

GIT1780453444

Microsoft Visual St...

Vulnerability

6/2026

MIC1782398423

Microsoft Security ...

Vulnerability

100

6/2026

MIC1780287882

Microsoft Security ...

Vulnerability

6/2026

MIC1781540872

Microsoft Security

Vulnerability

6/2026

MIC1781591215

Microsoft

Vulnerability

6/2026

MIC1781541072

Microsoft Security ...

Vulnerability

100

6/2026

MIC1784910234

Microsoft Security

Cyber Attack

100

5/2026

OKTMICATTNVI178...

GitHub

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

GitHub

Cyber Attack

5/2026

npm, Inc.

NPMGIT177996389...

Microsoft Threat In...

Cyber Attack

5/2026

MIC1784291489

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779704661

GitHub

Cyber Attack

100

5/2026

ANTV INC

ANTGIT177939527...

Microsoft Security ...

Vulnerability

5/2026

Google

OPEMICBRAGOOVIV...

Microsoft Security

Cyber Attack

5/2026

MIC1779258738

Microsoft Security

Vulnerability

5/2026

MIC1779272687

GitHub

Cyber Attack

5/2026

GIT1779179198

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779164698

GitHub

Cyber Attack

100

5/2026

GitHub

GIT1779459975

Microsoft Security

Cyber Attack

5/2026

Microsoft Secur...

PUTWEBANYMIC177...

GitHub

Cyber Attack

5/2026

NXP Semiconduct...

NPMGITNXPMIC177...

GitHub

Breach

5/2026

TanStack

GRA1779006227

Microsoft Security ...

Vulnerability

5/2026

MIC1778833438

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778732772

GitHub

Breach

5/2026

GitHub

GIT1779251025

Microsoft Security

Vulnerability

5/2026

MIC1778682772

GitHub

Vulnerability

5/2026

GitHub

PHPGIT177874737...

Microsoft Security

Vulnerability

5/2026

MIC1780475036

Microsoft Security ...

Vulnerability

5/2026

MIC1780511463

Microsoft Security

Vulnerability

5/2026

MIC1778646305

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778747112

GitHub

Cyber Attack

100

5/2026

GitHub

GOO1778567308

Microsoft

Vulnerability

100

5/2026

MIC1778229035

GitHub

Vulnerability

5/2026

Anthropic

ANT1778581440

GitHub

Cyber Attack

5/2026

GIT1781001050

GitHub

Vulnerability

100

5/2026

ANTFOX7-ECARGIT...

GitHub

Breach

5/2026

TanStack

MIS1778869722

GitHub

Cyber Attack

5/2026

Google AI

GITGOO178043190...

GitHub

Cyber Attack

100

5/2026

PyPI

PYPGIT1PA177876...

Microsoft

Cyber Attack

100

5/2026

GitHub

MICMICMICGIT178...

GitHub

Cyber Attack

5/2026

CodeRabbit

CODGIT178376547...

Microsoft Threat In...

Vulnerability

100

5/2026

Citrix

MICTHESECCIT178...

Microsoft Security

Vulnerability

100

4/2026

LINCISMIC177793...

GitHub

Vulnerability

100

4/2026

GITCPAADTROB177...

Microsoft Security

Vulnerability

4/2026

MICFED177746571...

Microsoft

Vulnerability

4/2026

GOOMICMED177765...

GitHub

Vulnerability

4/2026

Google

GITGOO177730247...

Microsoft Security ...

Vulnerability

100

4/2026

MIC1777141431

Microsoft Security

Cyber Attack

100

4/2026

MIC1777019139

GitHub

Cyber Attack

4/2026

npm, Inc.

GITNPMASU177691...

GitHub

Cyber Attack

4/2026

Bitwarden

BIT1776975830

GitHub

Cyber Attack

100

4/2026

Checkmarx

CHEDOCGIT177696...

Microsoft

Vulnerability

4/2026

MIC1776839097

Microsoft Threat In...

Cyber Attack

100

4/2026

MIC1777004961

Microsoft Research

Breach

4/2026

Mercor

ANTMIC177688279...

GitHub

Vulnerability

4/2026

GITANT177677464...

Microsoft Security

Vulnerability

100

4/2026

MIC1776963128

Microsoft Security

Cyber Attack

4/2026

MIC1783931313

Loading…

A.I.

GCC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for GCC

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Go China Connection in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Go China Connection in 2026.

Incident Types GCC vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Go China Connection in 2026.

Incident History - GCC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Go China Connection Subsidiaries

GCC

IT Services and IT Consulting

Website: https://www.microsoft.com/zh-cn

Company Size: 10,001+ employees

GitHubSoftware Development

GitHub BrasilSoftware Development

GitHub LATAMSoftware Development

GitHub EducationSoftware Development

MicrosoftSoftware Development

343 IndustriesComputer Games

Visual Studio CodeSoftware Development

Microsoft EventsTechnology, Information and Internet

Microsoft Most Valued ProfessionalSoftware Development

Microsoft 365IT Services and IT Consulting

Microsoft SecurityIT Services and IT Consulting

Microsoft LearnIT Services and IT Consulting

Loading…

Go China Connection Similar Companies

LTIMindtree

ltimindtree.com

LTIMindtree is a global technology consulting and digital solutions company that partners with enterprises across industries to reimagine business models, accelerate innovation, and drive AI-centric growth. Trusted by more than 700 clients worldwide, we use advanced technologies to enable operational excellence, elevated customer experiences, and long-term value creation. With a workforce of more than 86,000 talented and entrepreneurial professionals across over 40 countries, LTIMindtree — a Larsen & Toubro Group company — is dedicated to solving complex business challenges and delivering transformation at scale. LTIMindtree is proud to be an equal opportunity employer. We are committed to providing equal employment opportunities regardless of race, ethnicity, nationality, gender, gender identity, gender expression, language, age, sexual orientation, religion, marital status, veteran status, socio-economic status, disability, or any other characteristic protected by applicable law. Please note that neither LTIMindtree nor any of its authorized recruitment agencies/partners charge candidates any registration fees or other fees for appearing in interviews or securing employment/internships. Candidates are solely responsible for verifying the credentials of any agency or consultant claiming to work with LTIMindtree for recruitment purposes. Please note that anyone relying on representations made by fraudulent employment agencies/consultant does so at their own risk. LTIMindtree disclaims any liability for loss or damage suffered as a result of such actions. For more info, please visit www.ltimindtree.com.

Allianz Technology

allianz.com

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in more than 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience. We service the entire spectrum of digitalization - from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction. In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

NTT DATA Business Solutions

nttdata-solutions.com

We understand the business of our clients and know what it takes to transform it into the future. At NTT DATA Business Solutions, we drive innovation – from advisory and implementation to managed services and beyond. With SAP at our core and a powerful ecosystem of partners, we continuously improve solutions and technology to make them work for companies – and for their people. Aiming to transform, grow and become more successful? We provide you with more than in-depth expertise for SAP solutions: As your passionate partner, we connect your business opportunities with the latest technologies – and offer you a unique approach to get the job done as smoothly as possible. Our close ties to our partners give you access to innovative solutions and developments. Being part of the global NTT DATA group enables us to master any scope of project. With operations in more than 30 countries, we have enabled thousands of companies become more efficient and effective during the last three decades. Our more than 16,000 experts around the world will also accompany you on your journey toward a truly intelligent enterprise – wherever you want to start!

Cognizant

cognizant.ai

Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value. We build full-stack AI solutions powered by deep industry, process and engineering expertise — embedding an organization's unique context into technology systems that amplify human potential and drive tangible outcomes. From strategy to deployment, we help global enterprises move from AI ambition to AI impact and stay ahead in a fast-changing world. See how at cognizant.ai | Follow us @cognizant

Apex Systems

apexsystems.com

Apex Systems is a leading global technology services firm that incorporates industry insights and experience to deliver solutions that fulfill our clients’ digital visions. We offer a continuum of services, specializing in strategy, transformation, and managed services across application development, data, enterprise platforms, cloud and infrastructure, and cybersecurity. Through our ability to innovate alongside our customers, we build and deploy the right artificial intelligence solutions to realize business value and improve customer experiences. Our alliances with cutting-edge technology partners empower our customers by providing them with the latest advancements. Apex has a presence in over 70 markets across North America, Europe, and India. Apex is a part of the commercial segment of ASGN Incorporated (NYSE: ASGN). To learn more, visit www.apexsystems.com. Apex strives to provide our talent with the best possible experience, from start to finish. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico. Visit us today to join our team: www.apexsystems.com/careers.

Capgemini

capgemini.com

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion. Make it real | www.capgemini.com

Tata Consultancy Services

tcs.com

Tata Consultancy Services (TCS) is the technology partner of choice for industry leading organizations worldwide. Since its inception in 1968, TCS has upheld the highest standards of innovation, engineering excellence, and customer service. It has set an aspiration to become the world's largest AI-led technology services company and is enabling its clients to transform themselves across the full AI stack, from infrastructure to intelligence. Rooted in the heritage of the Tata Group, TCS is focused on creating long term value for its clients, its investors, its employees, and the community at large. With a highly skilled workforce spread across 55 countries and 202 service delivery centers across the world, the company has been recognized as a top employer in six continents. With the ability to rapidly apply and scale new technologies, the company has built long term partnerships with its clients – helping them emerge as perpetually adaptive enterprises. Many of these relationships have endured into decades and navigated every technology cycle, from mainframes in the 1970s to artificial intelligence today. TCS sponsors 14 of the world’s most prestigious marathons and endurance events, including the TCS New York City Marathon, TCS London Marathon and TCS Sydney Marathon with a focus on promoting health, sustainability, and community empowerment. Caution against fraudulent job offers: TCS doesn’t charge any fee throughout the recruitment process. Refer here: https://www.tcs.com/careers/india/recruitment-fraud-alert

Accenture in India

accenture.com

Accenture is a global professional services company with leading capabilities in digital, cloud and security. Combining unmatched experience and specialized skills across more than 40 industries, we offer Strategy and Consulting, Interactive, Technology and Operations services — all powered by the world’s largest network of Advanced Technology and Intelligent Operations centers. Our 699,000 people deliver on the promise of technology and human ingenuity every day, serving clients in more than 120 countries. We embrace the power of change to create value and shared success for our clients, people, shareholders, partners and communities. Visit us at accenture.com.

Amadeus

amadeus.com

We make the experience of travel better for everyone, everywhere by inspiring innovation, partnerships and responsibility to people, places and planet. Our technology powers the travel and tourism industry. We inspire more connected ways of thinking, centered around the traveler. Our platform connects the travel and hospitality ecosystem. We are making travel a force for social and environmental good. We are passionate about travel. With a unique perspective, at the heart of our industry, we are redesigning the travel of tomorrow.

Loading…

NEWS

Go China Connection CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 21, 2026 08:00 AM

Cybercrime To Cost The World $10.5 Trillion Annually By 2025

Cybersecurity Ventures expects global cybercrime costs to grow by 15 percent per year over the next five years, reaching $10.5 trillion USD annually by 2025.

Read Article

February 01, 2026 08:00 AM

Japan, Britain to boost cybersecurity and critical minerals cooperation as China’s influence grows

Japan and Britain agreed Saturday to accelerate cooperation on cybersecurity and the supply of critical minerals, as China's influence grows...

Read Article

January 02, 2026 08:00 AM

China’s New Cybersecurity Law Demands Faster Incident Reporting From Companies

China has enacted a major revision of its Cybersecurity Law, effective January 1, 2026. The amendments mark the most significant shift since...

Read Article

January 01, 2026 08:00 AM

The New China Cybersecurity Law Becomes a Reality in 2026

China has officially entered a new era of cyber regulation. As of January 1, 2026, the amended China cybersecurity law is now in effect, representing the...

Read Article

December 02, 2025 08:00 AM

James Uthmeier files subpoena against Wi-Fi router tech firm, alleges links to China

It's the second time this year Uthmeier has initiated legal action alleging cybersecurity issues about a company with Chinese connections.

Read Article

November 20, 2025 08:00 AM

Chinese use of Claude AI for hacking will drive demand for AI cyber defense, say experts

We're now going to see agentic cyber defenses deployed against agentic cyber attacks,” said Lt. Gen. Jack Shanahan, founder of the...

Read Article

September 24, 2025 07:00 AM

China-linked groups are using stealthy malware to hack software suppliers

Google, which disclosed the campaign, said it was one of the most significant supply-chain hacks in recent memory.

Read Article

September 24, 2025 07:00 AM

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

UNC5221 uses BRICKSTORM malware to maintain 393-day stealthy access to U.S. SaaS, legal, and tech sectors.

Read Article

August 21, 2025 03:13 AM

The State of Cybersecurity in Africa: The Chinese Effect

In Africa, core services such as communications, electric grids, transport systems, health services, and smart cities, are increasingly dependent on cloud...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…