What is the official website of HCA Florida Bayonet Point Hospital ?

The official website of HCA Florida Bayonet Point Hospital is https://www.hcafloridahealthcare.com/locations/bayonet-point-hospital/.

What is HCA Florida Bayonet Point Hospital's cybersecurity risk score?

HCA Florida Bayonet Point Hospital has an AI-generated cybersecurity risk score of 764 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has HCA Florida Bayonet Point Hospital experienced?

According to Rankiteo, HCA Florida Bayonet Point Hospital currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has HCA Florida Bayonet Point Hospital been affected by any supply chain cyber incidents ?

According to Rankiteo, HCA Florida Bayonet Point Hospital has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does HCA Florida Bayonet Point Hospital have SOC 2 Type 1 certification ?

According to Rankiteo, HCA Florida Bayonet Point Hospital is not certified under SOC 2 Type 1.

Does HCA Florida Bayonet Point Hospital have SOC 2 Type 2 certification ?

According to Rankiteo, HCA Florida Bayonet Point Hospital does not hold a SOC 2 Type 2 certification.

Does HCA Florida Bayonet Point Hospital comply with GDPR ?

According to Rankiteo, HCA Florida Bayonet Point Hospital is not listed as GDPR compliant.

Does HCA Florida Bayonet Point Hospital have PCI DSS certification ?

According to Rankiteo, HCA Florida Bayonet Point Hospital does not currently maintain PCI DSS compliance.

Does HCA Florida Bayonet Point Hospital comply with HIPAA ?

According to Rankiteo, HCA Florida Bayonet Point Hospital is not compliant with HIPAA regulations.

Does HCA Florida Bayonet Point Hospital have ISO 27001 certification ?

According to Rankiteo,HCA Florida Bayonet Point Hospital is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does HCA Florida Bayonet Point Hospital operate in ?

HCA Florida Bayonet Point Hospital operates primarily in the Hospitals and Health Care industry.

How many employees does HCA Florida Bayonet Point Hospital have ?

HCA Florida Bayonet Point Hospital employs approximately 504 people worldwide.

Does HCA Florida Bayonet Point Hospital own any subsidiaries ?

HCA Florida Bayonet Point Hospital presently has no subsidiaries across any sectors.

How many LinkedIn followers does HCA Florida Bayonet Point Hospital have ?

HCA Florida Bayonet Point Hospital's official LinkedIn profile has approximately 2,307 followers.

What is the NAICS classification code for HCA Florida Bayonet Point Hospital ?

HCA Florida Bayonet Point Hospital is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does HCA Florida Bayonet Point Hospital have a Crunchbase profile ?

No, HCA Florida Bayonet Point Hospital does not have a profile on Crunchbase.

Does HCA Florida Bayonet Point Hospital have a LinkedIn profile ?

Yes, HCA Florida Bayonet Point Hospital maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hca-florida-bayonet-point.

How many cybersecurity incidents has HCA Florida Bayonet Point Hospital experienced ?

As of August 2, 2026, Rankiteo reports that HCA Florida Bayonet Point Hospital has experienced 3 cybersecurity incidents.

How many peer or competitor companies does HCA Florida Bayonet Point Hospital have ?

HCA Florida Bayonet Point Hospital has an estimated 33,472 peer or competitor companies worldwide.

What types of cybersecurity incidents has HCA Florida Bayonet Point Hospital faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HFBPH

Boost Score +25 with badge (5 left)

764

/1000

Fair

789

/1000

Fair

HCA Florida Bayonet Point Hospital Vendor Cyber Rating & Cyber Score

hcafloridahealthcare.com

Add Your Compliance Badge

Regional Medical Center Bayonet Point is now HCA Florida Bayonet Point Hospital. Our 290-bed acute care facility proudly serves Pasco, Hernando and Citrus counties. Home to the only Level II Trauma Center and Comprehensive Stroke Center in the area, we offer lifesaving emergency care around the clock. Our team of skilled physicians and staff also specializes in bariatric surgery, comprehensive cardiac care, neurological care, and orthopedic and spine care. We offer treatments in occupational medicine, oncology services, imaging services, infusion therapy, surgical care, wound care, and treatment for sleep disorders. Visit our website to learn more about our hospital. We are the only Level II Trauma Center and Comprehensive Stroke Center

HFBPH A.I CyberSecurity Scoring

Scoring History

HFBPH

HCA Florida Bayonet Point Hospital CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

HCA Florida Bayonet...

Ransomware

100

10/2023

ALA6595124

HCA Florida Bayonet...

Cyber Attack

7/2023

HCA433404309252...

HCA Florida Bayonet...

Breach

6/2023

HCA529295210302...

Loading…

A.I.

HFBPH Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HFBPH

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for HCA Florida Bayonet Point Hospital in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for HCA Florida Bayonet Point Hospital in 2026.

Incident Types HFBPH vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for HCA Florida Bayonet Point Hospital in 2026.

Incident History - HFBPH (X = Date, Y = Severity)

Loading…

SUBSIDIARY

HCA Florida Bayonet Point Hospital Subsidiaries

HFBPH

Hospitals and Health Care

Website: https://www.hcafloridahealthcare.com/locations/bayonet-point-hospital/

Company Size: 10,001+ employees

HCA HealthcareHospitals and Health Care

ParallonHospitals and Health Care

HealthTrust Performance GroupHospitals and Health Care

HealthTrust Physician AdvisorsHospitals and Health Care

HCA Healthcare Physician ServicesHospitals and Health Care

Methodist Healthcare SystemHospitals and Health Care

Medical City HealthcareHospitals and Health Care

Medical City DentonHospitals and Health Care

Medical City ArlingtonHospitals and Health Care

Medical City Las ColinasHospitals and Health Care

Medical City McKinneyHospitals and Health Care

HCA Houston HealthcareHospitals and Health Care

Texas Orthopedic HospitalHospitals and Health Care

HCA Houston Healthcare KingwoodHospitals and Health Care

Mission HealthHospitals and Health Care

Swedish Medical CenterHospitals and Health Care

HCA Healthcare | TriStar DivisionHospitals and Health Care

Parkridge Health SystemHospitals and Health Care

AdventHealth GeorgiaHospitals and Health Care

Eastside Medical CenterHospitals and Health Care

TriStar Greenview Regional HospitalHospitals and Health Care

Piedmont Cartersville Medical CenterHospitals and Health Care

Southern Kentucky General SurgeryMedical Practices

Memorial HealthHospitals and Health Care

Sarah Cannon Cancer NetworkHospitals and Health Care

Research Medical CenterHospitals and Health Care

Research Medical Center - ServicesHealth, Wellness & Fitness

MountainView HospitalHospitals and Health Care

Trident Medical CenterHospitals and Health Care

Overland Park Regional Medical CenterHospitals and Health Care

Grand Strand Medical Center – HCAHospitals and Health Care

HCA Florida Capital HospitalHospitals and Health Care

HCA Far West DivisionHospitals and Health Care

Good Samaritan Hospital - San Jose, CAHospitals and Health Care

West Hills Hospital & Medical CenterMedical Practices

Sunrise Children’s HospitalHospitals and Health Care

HCA Florida Memorial HospitalHospitals and Health Care

Eastern Idaho Regional Medical CenterHospitals and Health Care

Reston HospitalHospitals and Health Care

HCA Florida Aventura HospitalHospitals and Health Care

Alaska Regional HospitalHospitals and Health Care

HCA Florida Fort Walton-Destin HospitalHospitals and Health Care

HCA Florida Osceola HospitalHospitals and Health Care

HCA Florida JFK HospitalHospitals and Health Care

HCA Healthcare | South Atlantic DivisionHospitals and Health Care

HCA Healthcare Hospitals and Health Care

HCA Florida Fawcett HospitalHospitals and Health Care

HCA Florida Gulf Coast HospitalHospitals and Health Care

HCA Florida Lake Monroe HospitalHospitals and Health Care

Ogden Regional Medical CenterHospitals and Health Care

HCA Florida West HospitalHospitals and Health Care

TriStar Southern Hills Medical CenterHospitals and Health Care

HCA Central/West TexasHospitals and Health Care

West Valley Medical CenterHospitals and Health Care

Tulane Medical CenterHospitals and Health Care

HCA Florida Westside HospitalHospitals and Health Care

HCA Florida Trinity HospitalHospitals and Health Care

HCA Florida Oak Hill HospitalHospitals and Health Care

North Suburban Medical CenterHospitals and Health Care

Del Sol Medical CenterHospitals and Health Care

Integrated Regional LaboratoriesHospitals and Health Care

Las Palmas Medical CenterHospitals and Health Care

HCA Florida Palms West HospitalHospitals and Health Care

HCA Florida University HospitalHospitals and Health Care

Lakeview HospitalHospitals and Health Care

Oviedo Medical CenterHospitals and Health Care

Timpanogos Regional HospitalHospitals and Health Care

Presbyterian/St. Luke's Medical CenterHospitals and Health Care

HCA Florida St. Petersburg HospitalHospitals and Health Care

HCA Florida Woodmont HospitalHospitals and Health Care

TriStar Hendersonville Medical CenterHospitals and Health Care

HCA Florida St. Lucie HospitalHospitals and Health Care

Dominion HospitalHospitals and Health Care

HCA Florida Pasadena HospitalHospitals and Health Care

TriStar Horizon Medical CenterHospitals and Health Care

Colleton Medical CenterHospitals and Health Care

HCA Florida South Shore HospitalHospitals and Health Care

Parkridge East HospitalHospitals and Health Care

HCA Florida Englewood HospitalHospitals and Health Care

HCA Florida Raulerson HospitalHospitals and Health Care

Parkridge Medical CenterHospitals and Health Care

HCA Florida Highlands HospitalHospitals and Health Care

Parkridge ValleyHospitals and Health Care

Fairview Park HospitalHospitals and Health Care

Brigham City Community HospitalHospitals and Health Care

HCA Florida Poinciana HospitalHospitals and Health Care

HCA Florida Putnam HospitalHospitals and Health Care

Lee's Summit Medical CenterHospitals and Health Care

Lafayette Regional Health CenterHospitals and Health Care

Pinewood Springs Mental Health & WellnessHospitals and Health Care

TriStar Summit Medical CenterHospitals and Health Care

HCA Florida Sarasota Doctors HospitalHospitals and Health Care

Loading…

HCA Florida Bayonet Point Hospital Similar Companies

Aveanna Healthcare

cb aveanna.com

About Aveanna It all started with a simple idea: How can we help people live better lives by providing better homecare? That idea became a company called Aveanna, dedicated to bringing new possibilities and new hope to those we serve. At Aveanna, we believe that the ultimate place for caring is right in the comfort of home. We are a new company that has quickly established itself as a pre-eminent, national leader in healthcare as well as homecare. We believe in clinical excellence, innovation, and compassionate care to every patient and family we are privileged to help. But what sets us apart most is our focus on the relationship between the caregiver and the patient. By surrounding our patients with superior resources, and by giving our caregivers better technology and training, we are able to provide superior care that makes a difference in what’s possible in outcomes and daily living. Aveanna’s leadership team has worked for more than 40 years building other great homecare companies on a national level. Now that experience is building the homecare company of the future. Today, Aveanna Healthcare cares for patients and families in 33 states through our rapidly growing network of more than 300 branch offices, offering a variety of care and services to more than 80,000 children and adults.

Optum

optum.com

At Optum, we take a bold approach to solving the challenges of healthcare. We call it Healthy Optumism — the realistic yet hopeful belief that when you’re grounded in real world needs, human connection and data-driven expertise, better is always possible. We use advanced technology to connect people to insights in real time, focus on prevention, and strip away inefficiencies. We know change doesn’t happen overnight, but every success moves us closer to delivering efficient, affordable, high-quality care.

UT Southwestern Medical Center

utsouthwestern.edu

UT Southwestern is an academic medical center, world-renowned for its research, regarded among the best in the country for medical education and for clinical and scientific training, and nationally recognized for the quality of care its faculty provides to patients at UT Southwestern’s University Hospital & Clinics and affiliated institutions. The Medical Center includes three degree-granting institutions: UT Southwestern Medical School, UT Southwestern Graduate School of Biomedical Sciences, and UT Southwestern School of Health Professions. - The schools train nearly 3,700 medical, graduate, and health profession students, residents, and postdoctoral fellows each year. - Ongoing support from federal agencies, along with foundations, individuals, and corporations, provides more than $524 million per year to fund faculty research. - UT Southwestern physicians provide care in about 80 specialties to more than 117,000 hospitalized patients, more than 360,000 emergency room cases, and oversee nearly 3 million outpatient visits a year. - UT Southwestern has approximately 25,000 employees and an operating budget of $3.7 billion. - UT Southwestern is the #1 hospital in Dallas-Fort Worth for the ninth year in a row, according to U.S. News & World Report. In addition, 12 of our specialties are nationally ranked for 2025-2026 – the most of any hospital in Texas. Those specialties include: Cancer; Cardiology, Heart & Vascular Surgery; Diabetes & Endocrinology; Gastroenterology & GI Surgery; Geriatrics; Neurology & Neurosurgery; Obstetrics & Gynecology; Orthopedics; Otolaryngology – Ear, Nose & Throat; Pulmonology & Lung Surgery; Rehabilitation; and Urology.

Penn Medicine, University of Pennsylvania Health System

pennmedicine.org

Penn Medicine is a world leader in academic medicine, setting the standard for cutting-edge research, compassionate patient care, and the education of future health care professionals. From founding the nation’s first hospital and medical school to pioneering Nobel Prize-winning mRNA vaccines and lifesaving cancer therapies, Penn Medicine continues to show the world what comes next. Home to more than 49,000 team members, Penn Medicine includes the University of Pennsylvania Health System and the Perelman School of Medicine. Together, our clinicians and scientists drive discoveries that transform patient care and improve lives across Pennsylvania, New Jersey, and beyond. Penn Medicine’s seven hospitals—the Hospital of the University of Pennsylvania, Penn Presbyterian Medical Center, Pennsylvania Hospital, Chester County Hospital, Lancaster General Health, Penn Medicine Princeton Health, and Doylestown Health—along with hundreds of outpatient sites and home care services, provide exceptional care throughout the region. At Penn Medicine, innovation and collaboration fuel everything we do. Our mission is to advance knowledge and improve health through research, patient care, and education in an inclusive culture that embraces diversity, fosters innovation, and sustains our legacy of excellence. Learn more: www.pennmedicine.org Read the latest stories: www.pennmedicine.org/news

Genesis

genesishcc.com

As a premier care provider since 1985, Genesis HealthCare is a holding company with subsidiaries that, on a combined basis, provide services to skilled nursing facilities and senior living communities. Genesis also specializes in contract rehabilitation therapy, respiratory therapy, physician services, staffing services and accountable care. Mission Statement: We improve the lives we touch through the delivery of high-quality healthcare and everyday compassion. We care about fostering an environment where our employees, patients, and visitors can be their authentic selves and feel celebrated and welcomed. By raising awareness about diversity, equity, and inclusion, we aim to enhance teamwork and synergy among staff. Diversity, Equity, and Inclusion (DEI) is part of our organization’s DNA! View our job opportunities at www.genesiscareers.jobs.

RWJBarnabas Health

rwjbh.org

RWJBarnabas Health is New Jersey’s largest and most comprehensive academic health system, caring for more than 5 million people annually. Nationally renowned for quality and safety, the system includes 14 hospitals and 9,000 affiliated physicians integrated to provide care at more than 700 patient care locations. RWJBarnabas Health is among New Jersey’s largest private employers, with more than 44,000 employees, contributing more than $5.5 billion to the state economy every year. RWJBarnabas Health partners with its diverse communities to build and sustain a healthier New Jersey. It provides patient-centered care in a compassionate and equitable manner. RWJBarnabas Health’s commitment to enhancing access to care includes a transformative partnership with Rutgers University, including the Rutgers Cancer Institute — the state's only NCI-designated Comprehensive Cancer Center - and Rutgers Robert Wood Johnson Medical School.

Piedmont

piedmont.org

Piedmont is empowering Georgians by changing health care. We continue to fuel Georgia’s growth through safe, cost-effective, high-quality care close to home through an integrated health care system that provides a hassle-free, unified experience. We are a private, not-for-profit organization with more than 12,000 donors annually that for centuries has sought to make a positive difference in every life we touch in the communities we serve. Across our 2,171 physical locations we care for more than 4.5 million patients and serve communities that comprise 85 percent of Georgia’s population. This includes 27 hospitals, 113 immediate care locations, 1,875 Piedmont Clinic physician practices and more than 3,600 Piedmont Clinic members. Our patients conveniently engage with Piedmont online, as they scheduled more than 560,000 online appointments and over 120,000 virtual visits. With more than 47,000 care givers we are the largest Georgia-based private employer of Georgians, who all came for the job, but stayed for the people. In 2024 and 2023, Piedmont has earned recognition from Newsweek as one of America’s Greatest Workplaces for Diversity and also as one of America's Greatest Workplaces for Women. In 2022, Forbes ranked Piedmont on its list of the Best Large Employers in the United States. Piedmont provided more than $607 million in community impact in Fiscal Year 2024. For more information, or booking your next appointment, visit piedmont.org.

Encompass Health

encompasshealth.com

Encompass Health is the largest owner and operator of rehabilitation hospitals in the United States. With a national footprint that includes more than 170 hospitals in 39 states and Puerto Rico, the Company provides high-quality, compassionate rehabilitative care for patients recovering from a major injury or illness, using advanced technology and innovative treatments to maximize recovery. Encompass Health is ranked as one of Fortune’s 100 Best Companies to Work For and Modern Healthcare’s Best Places to Work in Healthcare.

Houston Methodist

houstonmethodist.org

Houston Methodist is one of the nation’s leading health systems and academic medical centers. The health system consists of eight hospitals: Houston Methodist Hospital, its flagship academic hospital in the Texas Medical Center, seven community hospitals and one long-term acute care hospital throughout the Greater Houston metropolitan area. Houston Methodist also includes a research institute; a comprehensive residency program; international patient services; freestanding comprehensive care, emergency care and imaging centers; and outpatient facilities. Houston Methodist employs more than 32,000 people. Come lead with us.

Loading…

NEWS

HCA Florida Bayonet Point Hospital CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 01, 2024 08:00 AM

Doctors at Florida hospital say patient care has suffered since HCA's cost cuts

Four doctors at HCA's Bayonet Point hospital in Florida said the quality of care has declined since 2021, when HCA cut costs and staff and...

Read Article

November 01, 2015 11:38 AM

Cardiologists Hit HCA With Suit Over Suspensions

A group of nine cardiologists has slapped HCA Inc. with a lawsuit, accusing the nation's largest hospital chain of damaging their reputation by suspending...

Read Article

August 07, 2012 07:00 AM

Hospital Chain Inquiry Cited Unnecessary Cardiac Work

One of hospital giant HCA's hospitals in Florida is at the center of an accusation that it has performed heart procedures on patients who...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…