What is the official website of Hikma Pharmaceuticals ?

The official website of Hikma Pharmaceuticals is http://www.hikma.com.

What is Hikma Pharmaceuticals's cybersecurity risk score?

Hikma Pharmaceuticals has an AI-generated cybersecurity risk score of 767 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Hikma Pharmaceuticals experienced?

According to Rankiteo, Hikma Pharmaceuticals currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Hikma Pharmaceuticals been affected by any supply chain cyber incidents ?

According to Rankiteo, Hikma Pharmaceuticals has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Hikma Pharmaceuticals have SOC 2 Type 1 certification ?

According to Rankiteo, Hikma Pharmaceuticals is not certified under SOC 2 Type 1.

Does Hikma Pharmaceuticals have SOC 2 Type 2 certification ?

According to Rankiteo, Hikma Pharmaceuticals does not hold a SOC 2 Type 2 certification.

Does Hikma Pharmaceuticals comply with GDPR ?

According to Rankiteo, Hikma Pharmaceuticals is not listed as GDPR compliant.

Does Hikma Pharmaceuticals have PCI DSS certification ?

According to Rankiteo, Hikma Pharmaceuticals does not currently maintain PCI DSS compliance.

Does Hikma Pharmaceuticals comply with HIPAA ?

According to Rankiteo, Hikma Pharmaceuticals is not compliant with HIPAA regulations.

Does Hikma Pharmaceuticals have ISO 27001 certification ?

According to Rankiteo,Hikma Pharmaceuticals is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Hikma Pharmaceuticals operate in ?

Hikma Pharmaceuticals operates primarily in the Pharmaceutical Manufacturing industry.

How many employees does Hikma Pharmaceuticals have ?

Hikma Pharmaceuticals employs approximately 10,252 people worldwide.

Does Hikma Pharmaceuticals own any subsidiaries ?

Hikma Pharmaceuticals presently has no subsidiaries across any sectors.

How many LinkedIn followers does Hikma Pharmaceuticals have ?

Hikma Pharmaceuticals's official LinkedIn profile has approximately 637,630 followers.

What is the NAICS classification code for Hikma Pharmaceuticals ?

Hikma Pharmaceuticals is classified under the NAICS code 3254, which corresponds to Pharmaceutical and Medicine Manufacturing.

Does Hikma Pharmaceuticals have a Crunchbase profile ?

Yes, Hikma Pharmaceuticals has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/hikma-pharmaceuticals.

Does Hikma Pharmaceuticals have a LinkedIn profile ?

Yes, Hikma Pharmaceuticals maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hikma-pharmaceuticals.

How many cybersecurity incidents has Hikma Pharmaceuticals experienced ?

As of August 2, 2026, Rankiteo reports that Hikma Pharmaceuticals has not experienced any cybersecurity incidents.

How many peer or competitor companies does Hikma Pharmaceuticals have ?

Hikma Pharmaceuticals has an estimated 5,720 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Hikma Pharmaceuticals

Boost Score +25 with badge (5 left)

767

/1000

Fair

792

/1000

Fair

Hikma Pharmaceuticals Vendor Cyber Rating & Cyber Score

hikma.com

cb in

Add Your Compliance Badge

For almost 50 years, we’ve been creating high-quality medicines and making them accessible to the people who need them. We are a trusted, reliable partner and dependable source of over 800* high-quality generic, specialty and branded pharmaceutical products that hospitals, physicians and pharmacists need to treat their patients across North America, MENA and Europe. We have 29 manufacturing plants, 3 R&D hubs and c9,500 employees worldwide. *As of December 2025 Subscribe to our channel on YouTube https://youtube.com/@hikmapharmaceuticals5668 For all product information and enquiries, please contact us at [email protected]

Hikma Pharmaceuticals A.I CyberSecurity Scoring

Scoring History

Hikma Pharmaceuticals

Hikma Pharmaceuticals CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Hikma Pharmaceuticals Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Hikma Pharmaceuticals

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Hikma Pharmaceuticals in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Hikma Pharmaceuticals in 2026.

Incident Types Hikma Pharmaceuticals vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Hikma Pharmaceuticals in 2026.

Incident History - Hikma Pharmaceuticals (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Hikma Pharmaceuticals Subsidiaries

Parent Company

Hikma Pharmaceuticals

Pharmaceutical Manufacturing

Website: http://www.hikma.com

Company Size: 5,001-10,000 employees

No subsidiary data available for this company.

Loading…

Hikma Pharmaceuticals Similar Companies

Novartis

cb novartis.com

Novartis is an innovative medicines company. Every day, working to reimagine medicine to improve and extend people’s lives so that patients, healthcare professionals and societies are empowered in the face of serious disease. Our medicines reach more than 250 million people worldwide. Find out more at https://www.novartis.com See our community guidelines: https://go.novartis.social/3Nboxki

Intas Pharmaceuticals

intaspharma.com

Intas is one of the leading multinational pharmaceutical formulation development, manufacturing, and marketing organization in the world. It has been growing at 19% CAGR and crossed the $2.5 billion mark in the past financial year. The company has set up a network of subsidiaries, under the name Accord Healthcare in the EU, US, Canada, SA, Australia, APAC as well as CIS & MENA regions. Intas is present in 85+ countries, with more than 70% of its revenue coming from global business. Currently ranked 6th in the Indian pharmaceutical market, it’s the largest privately owned Indian generic pharma company. Intas has established leadership in key therapeutic segments like CNS, Cardio, Diabeto, Gastro, Urology, Oncology & Animal Health in India. We are among the top 10 generic players in the highly regulated markets of EU, US & UK. Intas operates 17 advanced formulations, R&D, and distribution facilities, of which 10 are in India and the rest in the UK, Mexico & Greece with the help of our 23,000+ Human Capital. Between them, the facilities are accredited by global regulators such as USFDA, EMA, MHRA, TGA, and others. The company invests ~6-7% of its revenues in R&D and has over 10,000 product registrations worldwide with a strategic pipeline of 300+ high-value FTF/FTM, Biosimilars, and NDDS products. Intas' highly advanced EU-GMP Certified Biopharma division is fueled by a mission to provide affordable “Biosimilars for Billions” across niche segments such as oncology, auto-immune, ophthalmology, nephrology, rheumatology, and hormone-based therapies. The Plasma Fractionation Unit of Intas Pharmaceuticals is a pioneer in manufacturing plasma-derived therapeutics. It houses a full-fledged R&D lab and a state-of-the-art WHO-GMP-certified manufacturing facility complemented with a GLP-compliant QC lab. Our values of Innovation, Customer Delight, Ownership & Collaboration, Performance Focus & Care for Society are the driving forces toward excellence.

PT Kalbe Farma, Tbk

kalbe.co.id

Established in 1966, PT Kalbe Farma Tbk. (“the Company” or “Kalbe”) has gone a long way from its humble beginnings as a garage-operated pharmaceutical business in North Jakarta. It has expanded by strategic acquisitions of pharmaceutical companies, building a leading brand positioning and reaching to international markets to transform itself into an integrated consumer health and nutrition enterprise to promote its mission to improve health for a better life. Kalbe expands its business interests and transformed itself to become a provider of an integrated healthcare solution through its 4 business divisions: the Prescription Pharmaceutical Division, Consumer Health Division, Nutritionals Division and Distribution and Logistics Division. These business divisions manage an extensive portfolio of prescription pharmaceuticals and OTC drugs, energy drink and nutrition products, as well as a robust distribution arm serving over one million outlets across Indonesia’s vast archipelago. In the international market, the Company has established its footprint in ASEAN countries, Nigeria, and South Africa, positioning Kalbe as a national pharmaceutical company with a competitive edge in the export market. Kalbe Farma has established a robust research and development activities in leading edge generic drug formulation and continuous development of innovative consumer and nutritional products. Through strategic alliances with international partners, Kalbe have also started to support several successful research and development venture working on cancer drugs, stem cells and biotechnology research. With 17,000 employees, Kalbe Farma is the largest healthcare provider in Indonesia, with unrivaled marketing, branding, distribution, financial strength and research and development expertise. Kalbe Farma is also the largest publicly-listed pharmaceutical company in Southeast Asia, commanding a market capitalization of Rp71.0 trillion and sales turnover Rp21.0 trillion by end of 2018.

Dr. Reddy's Laboratories

drreddys.com

Established in 1984, we are a global pharmaceutical company headquartered in Hyderabad, India. Driven by our purpose of ‘Good Health Can’t Wait’, we work to provide access to affordable and innovative medicines. We offer a portfolio of products and services including APIs, generics, branded generics, biosimilars and OTC. Our major markets include USA, India, Russia & CIS countries, China, Brazil and Europe. As a company with a history of deep science that has led to several industry firsts, we continue to plan ahead and invest in future growth drivers such as access to novel molecules, digital therapeutics and consumer healthcare. As an early adopter of sustainability and ESG actions, we released our first Sustainability Report in 2004. Our current ESG goals aim to set the bar high in environmental stewardship; access and affordability for patients; diversity; and governance. For more information, log on to: www.drreddys.com. Caution Notice: Dr. Reddy's has been made aware of candidates receiving fraudulent job opportunities from unauthorised recruiting agencies or people impersonating Dr. Reddy's leaders. These fraudulent jobs may be advertised on employment sites or mimic our careers site and company email addresses. Please know that Dr. Reddy's Laboratories has no affiliation or connection to these situations. Dr. Reddy's (and its associated/group companies) follows a formal recruitment process through its own HR department. Please report immediately in case you suspect a fraudulent job. You may raise your concern by: Accessing https://drreddys.ethicspoint.com. Calling on the hotline number. List of hotline numbers are available in https://drreddys.ethicspoint.com. The hotline is available 24x7 in multiple languages. Writing to [email protected] or [email protected]. For our community guidelines on LinkedIn, please visit: https://shorturl.at/LTvNZ

Sandoz

sandoz.com

Sandoz is the global leader in generic and biosimilar medicines. Our Purpose is to pioneer access to medicines for patients globally. We are on a mission to drive innovation in the healthcare industry by freeing up resources sustainably and responsibly while continuing to address global health challenges such as antimicrobial resistance. We are present in more than 100 countries and our medicines serve some 500 million people every year. We have two main global businesses: Generics - divided between standard generics and complex generics - and Biosimilars. Read our community engagement guidelines: http://bit.ly/4ofoggc

Fresenius Kabi

fresenius-kabi.com

As a global healthcare company, Fresenius Kabi is Committed to Life. The company’s products, technologies, and services are used for the therapy and care of critically and chronically ill patients. With over 41,000 employees and present in over 100 countries, Fresenius Kabi’s expansive product portfolio focuses on providing access to high-quality and lifesaving medicines and technologies. In Biopharma, Fresenius Kabi offers cutting-edge biosimilars for autoimmune diseases and oncology. With leading market positions in Clinical Nutrition, a broad portfolio of enteral and parenteral products makes a distinct difference in patients’ nutritional status. In MedTech, the company provides vital infusion pumps, cell and gene therapy devices, disposables, and more. Fresenius Kabi is the global leader in supplying blood collection bags and devices, supporting blood banks and healthcare facilities worldwide. The company’s I.V. Generics and Fluids for infusion therapy help save millions of lives every year, in emergency medicine, surgery, oncology, and intensive care. Fresenius Kabi takes a holistic approach to healthcare and uniquely combines experience, expertise, innovation, and dedication – making a difference in the lives of 450 million patients annually. With the #FutureFresenius strategy, the company is developing, producing, and selling new products and technologies and aspires to expand its position as a leading global provider of therapies, improve patient care, generate sustainable value for stakeholders – shaping the future of healthcare. Fresenius Kabi is an operating company of the Fresenius Group, founded in 1912, along with Helios and Quirónsalud. As ONE team, the companies in the Fresenius Group are committed to providing lifesaving and life-changing healthcare solutions on a global scale. User information & community guidelines: https://www.fresenius-kabi.com/social-media-terms-conditions Imprint: www.fresenius-kabi.com/imprint

Alkem Laboratories Ltd.

alkemlabs.com

A single idea, which sprouts from a human mind, contains the potential to create marvels that can influence generations. It can redefine rules, it can transform the world. Back in the year 1973, a team of individuals came with such an idea – The idea called Alkem. It was highly potent and resilient, like a spark that could ignite a thousand more ideas. And it did! Looking back at our 4 decade, illustrious journey, that one small idea has Not only triggered us to become one of India’s largest generic and specialty pharmaceutical company but also, create a foothold in over 50 countries 32% of our revenue is generated via offshore sales. As well as we have consistently been ranked amongst the top ten pharmaceutical companies in India. Our portfolio includes illustrious brands like Clavam, Pan, Pan-D and Taxim-O, which feature amongst top 50 pharmaceutical brands in India. For over a decade, our dominance in anti-infective segment has remained unchallenged. We have 21 manufacturing facilities at multiple locations in India and the United States of America. Our upper-crest facilities are inspected and audited as per cGMP guidelines as laid down by leading regulatory authorities such as USFDA, MHRA - UK, SAHPRA-South Africa, TGA - Australia, ANVISA - Brazil, WHO - Geneva, TPD - Health Canada, PPB - Kenya, NDA - Uganda, MOH - Sudan, INVIMA - Colombia, TFDA - Tanzania, Zimbabwe, BfArM-Germany & Other Africa, Asian & CIS Countries. Another feather in our cap was added on December 23rd, 2015, when, Alkem completed it's Initial Public Offering (IPO) and was listed on the Bombay Stock Exchange Limited and the National Stock Exchange of India Limited. Although passion is the fuel that keeps ideas alive, innovation is the catalyst that gives it flight! With over 500 scientists working in 5 global R&D centers, we are empowering innovations that align with our philosophy of ‘Extended Lifecare Beyond Boundaries’.

Viatris

viatris.com

Viatris Inc. (NASDAQ: VTRS) is a global healthcare company uniquely positioned to bridge the traditional divide between generics and brands, combining the best of both to more holistically address healthcare needs globally. With a mission to empower people worldwide to live healthier at every stage of life, we provide access at scale. In 2022 alone, we supplied high-quality medicines to approximately 1 billion patients around the world. With our exceptionally extensive and diverse portfolio of medicines, a one-of-a-kind global supply chain designed to reach more people when and where they need them, and the scientific expertise to address some of the world’s most enduring health challenges, access takes on deep meaning at Viatris. We have the ability to touch all of life’s moments, from birth to end of life, acute conditions to chronic diseases. We are headquartered in the U.S., with global centers in Pittsburgh, Shanghai and Hyderabad, India Social Media Guidelines: https://newsroom.viatris.com/social-media-community-guidelines Investors: https://investor.viatris.com Corporate Social Responsibility: https://www.viatris.com/sustainability Connect with Viatris Instagram: https://www.instagram.com/viatrisinc X: https://www.x.com/viatrisinc Viatris and our recruiting firms will not ask for sensitive personal information, such as your social security number, date of birth or bank account details via text, email or social media. Additionally, Viatris representatives do not request payment or personal bank information nor send payment to purchase hardware on your own. Viatris.com is the primary source of all company job postings and authorized third-party career websites.

AUROBINDO PHARMA LTD

aurobindo.com

Aurobindo Pharma Limited (NSE: AUROPHARMA, BSE: 524804, Reuters: ARBN.NS, Bloomberg: ARBP IN) is an integrated global pharmaceutical company headquartered in Hyderabad, India. The Company develops, manufactures, and markets a wide range of generic pharmaceuticals, branded specialty drugs, and active pharmaceutical ingredients (APIs) across more than 150 countries. It is ranked among the top 10 generic companies in eight European nations and holds the distinction of being the largest generic pharmaceutical company in the United States. With over 30 state-of-the-art manufacturing and packaging facilities approved by leading global regulatory authorities including USFDA, UK MHRA, EDQM, Japan PMDA, WHO, Health Canada, South Africa MCC, and Brazil ANVISA, Aurobindo Pharma ensures the highest standards of quality. Its robust portfolio spans eight major therapeutic areas: Central Nervous System (CNS), Antiretroviral (ARV), Cardiovascular (CVS), Antibiotics, Gastroenterology, Anti-diabetics, Oncology, and Dermatology, supported by a strong R&D infrastructure that drives innovation, affordability, and accessibility.

Loading…

NEWS

Hikma Pharmaceuticals CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 05, 2026 08:00 AM

How The Hikma Pharmaceuticals (LSE:HIK) Investment Story Is Shifting As Analyst Views Diverge

Hikma Pharmaceuticals is back in focus after its fair value estimate was trimmed from £21.82 to £20.47. This shift has put fresh attention...

Read Article

February 26, 2026 08:00 AM

Hikma Pharma's gloomy outlook kicks shares to more than three-year low

British generic drugmaker Hikma Pharmaceuticals scrapped its medium-term targets as it forecast slower annual revenue growth and profit on...

Read Article

February 06, 2026 08:00 AM

What Analysts Think Is Changing The Story For Hikma Pharmaceuticals (LSE:HIK)

The latest update on Hikma Pharmaceuticals focuses on the price target, with the modelled fair value held at 22.14 while core assumptions...

Read Article

January 08, 2026 08:00 AM

Looking At The Narrative For Hikma Pharmaceuticals LSE HIK After Analyst Split On Fair Value

Hikma Pharmaceuticals' fair value estimate has been nudged down from £22.66 to £22.00 per share, a small adjustment that better reflects the...

Read Article

December 16, 2025 08:00 AM

The Character of the Corporation 2025: Navigating Tumultuous Times for Multinational Businesses

Directors Nina Henderson and John Zangardi on the key differences between serving on multinational and domestic boards.

Read Article

December 15, 2025 08:00 AM

How the Narrative Around Hikma Pharmaceuticals Is Shifting After Recent Analyst Target Moves

Hikma Pharmaceuticals' latest valuation update points to a slightly lower fair value estimate of about $22.66 per share, even as analysts...

Read Article

November 28, 2025 08:00 AM

How Recent Developments Are Shaping the Hikma Pharmaceuticals Story and Its Valuation

Hikma Pharmaceuticals' consensus analyst price target has seen a slight dip, moving from £23.55 to £23.36 per share.

Read Article

November 13, 2025 08:00 AM

Why The Narrative Around Hikma Pharmaceuticals Is Shifting After Recent Analyst Updates

Hikma Pharmaceuticals has recently seen its fair value estimate reduced from £25.40 to £23.55, as analysts update their assessments in light...

Read Article

September 19, 2025 07:00 AM

Hikma Pharmaceuticals PLC (LON:HIK) is favoured by institutional owners who hold 59% of the company

Key Insights Institutions' substantial holdings in Hikma Pharmaceuticals implies that they have significant influence...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…