What is the official website of Hyatt ?

The official website of Hyatt is http://www.hyatt.com.

What is Hyatt's cybersecurity risk score?

Hyatt has an AI-generated cybersecurity risk score of 583 out of 1000, indicating a Very Poor security posture according to Rankiteo's assessment.

How many security incidents has Hyatt experienced?

According to Rankiteo, Hyatt currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Hyatt been affected by any supply chain cyber incidents ?

According to Rankiteo, Hyatt has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Klue Inc. (Incident ID: KLUHUNAPP1781864958) foh&boh (Incident ID: NORKFCFOHTACHYA1769001351) foh&boh (Incident ID: FOHNORHYAOMN1769001286) foh&boh (Incident ID: FOHKFCNORHYAOMN1769001235)

Does Hyatt have SOC 2 Type 1 certification ?

According to Rankiteo, Hyatt is not certified under SOC 2 Type 1.

Does Hyatt have SOC 2 Type 2 certification ?

According to Rankiteo, Hyatt does not hold a SOC 2 Type 2 certification.

Does Hyatt comply with GDPR ?

According to Rankiteo, Hyatt is not listed as GDPR compliant.

Does Hyatt have PCI DSS certification ?

According to Rankiteo, Hyatt does not currently maintain PCI DSS compliance.

Does Hyatt comply with HIPAA ?

According to Rankiteo, Hyatt is not compliant with HIPAA regulations.

Does Hyatt have ISO 27001 certification ?

According to Rankiteo,Hyatt is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Hyatt operate in ?

Hyatt operates primarily in the Hospitality industry.

How many employees does Hyatt have ?

Hyatt employs approximately 89,774 people worldwide.

Does Hyatt own any subsidiaries ?

Hyatt presently has no subsidiaries across any sectors.

How many LinkedIn followers does Hyatt have ?

Hyatt's official LinkedIn profile has approximately 1,560,442 followers.

What is the NAICS classification code for Hyatt ?

Hyatt is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does Hyatt have a Crunchbase profile ?

No, Hyatt does not have a profile on Crunchbase.

Does Hyatt have a LinkedIn profile ?

Yes, Hyatt maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hyatt.

How many cybersecurity incidents has Hyatt experienced ?

As of August 2, 2026, Rankiteo reports that Hyatt has experienced 10 cybersecurity incidents.

How many peer or competitor companies does Hyatt have ?

Hyatt has an estimated 14,326 peer or competitor companies worldwide.

What types of cybersecurity incidents has Hyatt faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Hyatt

Boost Score +25 with badge (5 left)

583

/1000

Very Poor

608

/1000

Poor

Hyatt Vendor Cyber Rating & Cyber Score

hyatt.com

Add Your Compliance Badge

Hyatt is guided by its purpose: to care for people so they can be their best. Hyatt’s portfolio includes 1,000+ hotel and all-inclusive properties in over 75 countries across 6 continents. Hyatt’s offerings include brands in the Timeless Collection, including Park Hyatt®, Grand Hyatt®, Hyatt Regency®, Hyatt®, Hyatt Residence Club®, Hyatt Place®, Hyatt House®, Hyatt Studios, and UrCove; the Boundless Collection, including Miraval®, Alila®, Andaz®, Thompson Hotels®, Dream® Hotels, Hyatt Centric®, and Caption by Hyatt®, the Independent Collection, including The Unbound Collection by Hyatt®, Destination by Hyatt®, and JdV by Hyatt®, and the Inclusive Collection, including Impression by Secrets, Hyatt Ziva®, Hyatt Zilara®, Zoëtry® Wellness &

Hyatt A.I CyberSecurity Scoring

Scoring History

Hyatt

Hyatt CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Apple Leisure Group

Breach

5/2026

Klue Inc.

KLUHUNAPP178186...

Hyatt

Breach

2/2025

foh&boh

NORKFCFOHTACHYA...

Hyatt

Breach

2/2025

foh&boh

FOHNORHYAOMN176...

HYATT Hotels

Breach

2/2025

foh&boh

FOHKFCNORHYAOMN...

Hyatt

Ransomware

100

1/2025

HYA1768842036

Hyatt

Ransomware

100

6/2021

HYAHIL176944683...

Hyatt

Breach

3/2017

HYA456072525

Hyatt

Ransomware

1/2016

HYA1348522

Hyatt

Breach

8/2015

HYA550072525

Hyatt

Ransomware

100

6/2015

HYA1768948645

Loading…

A.I.

Hyatt Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Hyatt

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for Hyatt in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Hyatt in 2026.

Incident Types Hyatt vs Hospitality Industry Avg (This Year)

No incidents recorded for Hyatt in 2026.

Incident History - Hyatt (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Hyatt Subsidiaries

Hyatt

Hospitality

Website: http://www.hyatt.com

Company Size: 10,000+ employees

Hyatt Regency CalgaryHospitality

Grand HyattHospitality

Grand Hyatt IstanbulOtelcilik

Hyatt RegencyHospitality

Hyatt Regency London – The ChurchillHospitality

Hyatt Regency KathmanduHospitality

Hyatt Regency BelgradeHospitality

Hyatt Regency Istanbul AtaköyHospitality

Hyatt Regency St. Louis at The ArchHospitality

Hyatt Regency San AntonioHospitality

Hyatt Regency New BrunswickHospitality

Hyatt Regency EkaterinburgГостиничное дело

Hyatt PlaceHospitality

ANdAZHospitality

Apple Leisure GroupHospitality

Hyatt HouseHospitality

Amstar DMCTravel Arrangements

Park HyattHospitality

Hyatt Vacation OwnershipHospitality

Thompson HotelsHospitality

AMResortsTravel Arrangements

HYATT HotelsHospitality

UrCove by HyattHospitality

JdV by HyattHospitality

Alila HotelsHospitality

Miraval Resorts & SpasHospitality

Miraval Berkshires CareersHospitality

Miraval Austin Resort & SpaHospitality

Miraval The Red SeaHospitality

Miraval Arizona CareersHospitality

Hyatt CentricHospitality

Secrets ResortsHospitality

Trisept SolutionsIT Services and IT Consulting

VAX VacationAccess by Trisept SolutionsIT Services and IT Consulting

The Unbound Collection by HyattHospitality

Hyatt ZivaHospitality

Unlimited Vacation ClubTravel Arrangements

Caption by HyattHospitality

Hyatt ZilaraHospitality

tommie HotelsHospitality

Destination by HyattHospitality

ALG Vacations®Hospitality

Hyatt Hotels Development EAMEImmobilien

Loading…

Hyatt Similar Companies

Kerzner International

kerzner.com

Kerzner International has built a diverse collection of iconic brands and luxury properties, earning international acclaim for pioneering destination-defining hospitality, delivering unrivalled service, and curating transformative guest experiences. We are renowned for creating hospitality brands that are distinct and disruptive. Through Atlantis, One&Only, SIRO, and Rare Finds, our portfolio provides unforgettable and immersive experiences for guests in search of extraordinary moments. From authentic cultural exploration to innovative luxury concepts, every brand we build challenges convention to create unique journeys of discovery. We are a company that never settles. Because of this, we attract colleagues who share our desire to push until the next level is achieved, and then to keep going. We invest in our colleagues and our communities by working proactively to create jobs, training, education and opportunities that enrich lives. Our colleagues are at the heart of who we are and what we do. International resorts go hand in hand with an international team. In fact, we have more than 16,000 colleagues representing over 120 nationalities. And although we come from all over the world, we are united by the drive to create amazing experiences and everlasting memories for all.

Holiday Inn Express

holidayinnexpress.com

An IHG hotel. IHG Hotels & Resorts [LON:IHG, NYSE:IHG (ADRs)] is a global hospitality company, with a purpose to provide True Hospitality for Good. At Holiday Inn Express, we strive to make every interaction you have with us simple, smart and refreshingly engaging. With over 3,000 hotels in 75 different countries, Holiday Inn Express is IHG’s largest brand and one of the fastest growing hotel brands in the industry. Holiday Inn Express offers affordable hotels, high speed internet access, free breakfast and a comfortable room that will leave you relaxed and recharged. InterContinental Hotels Group PLC is the Group’s holding company and is incorporated in Great Britain and registered in England and Wales. Approximately 350,000 people work across IHG's hotels and corporate offices globally. Visit https://www.ihg.com/holidayinnexpress/hotels/us/en/reservation for hotel information and reservations and www.ihgrewards.com for more on IHG One Rewards. For our latest news, follow us on LinkedIn, Facebook, Instagram, TikTok and Twitter.

J D Wetherspoon

jdwetherspooncareers.com

J D Wetherspoon is a leading pub operator in the UK and Ireland. Back in 1979, founder chairman Tim Martin opened the very first Wetherspoon – in Muswell Hill, north London. Today, Tim and the company run over 850 pubs and hotels, spread right across the UK and, more recently, Ireland. During its history of over 40 years, Wetherspoon has repeatedly led the way with ground-breaking initiatives, picked up hundreds of awards (covering all aspects of pub life) and grown from a handful of staff to over 40,000 employees. The company seeks to develop its staff through effective and award-winning training and development, through a positive working environment and, of course, by means of a competitive pay packet. Every year, thousands of staff complete one or more of our award-winning training courses, not only preparing them to work safely and to the best of their ability, but also inspiring them to pursue positive career development. The company prides itself in offering, at all levels, excellent training and support.

Rotana Hotels

rotana.com

Since inception, Rotana has grown to be the region’s largest hospitality management company, and a brand that is widely recognized and admired. Rotana currently manages a portfolio of over 100 properties throughout the Middle East, Africa, Eastern Europe and Türkiye offering a wide range of services and products through its 6 sub brands; Rotana Hotels & Resorts for the 4 and 5 star properties, Arjaan Hotel Apartments for the long term stays, Rayhaan Hotels & Resorts, Rotana’s alcohol free 4 and 5 star properties, Centro Hotels, a 3 star plus affordable lifestyle brand, Edge by Rotana our collection of independent hotels and The Residences by Rotana, a brand developed for guests that are looking for a permanent home. If you are interested to join Rotana, kindly log on to www.rotanacareers.com and proceed with the online application and our Human Resources Team will look into your respective application.

Kempinski Hotels

kempinski.com

Founded in Germany in 1897, Kempinski Hotels has long reflected the finest traditions of European hospitality. Today, as ever, Kempinski is synonymous with distinctive luxury. Located in many of the world's most well-known cities and resorts, the Kempinski collection includes hotels in a grand manner, pace-setting modern establishments and older hotels of individual charm. All blend gracefully into their surroundings and offer luxurious accommodations, superb cuisine and unrivalled facilities - complemented by impeccable service. For leisure and business guests alike, the name Kempinski has long been synonymous with style, mobility and efficiency. Put simply, they are the first choice for the discerning individual. In addition to operating many of the finest city hotels in the world, Kempinski is a name that can now be found in many exciting resort locations, each combining local flair and ambience with the international standards of service and luxury that Kempinski guests have come to expect. To see all the different Kempinski jobs and apply, please go to https://careers.kempinski.com

Holiday Inn

holidayinn.com

More than an iconic place to stay, Holiday Inn Hotels are a place to be in the moment–gathered to celebrate with family, laughing with friends, sharing a meal with the team, or just for some well-deserved me-time. No matter the reason you travel, when you’re here, you’re right where you’re meant to be. Book with us and become an IHG One Rewards member.

Hilton Grand Vacations

cb hgv.com

Hilton Grand Vacations is a global leader in vacation ownership, developing, marketing and operating a portfolio of high-quality, shared-ownership properties in highly desired vacation destinations. Our company also manages and operates innovative club membership programs providing exclusive exchange, leisure travel, and reservation services for our Members. At Hilton Grand Vacations, our culture of hospitality extends to our more than 10,000 Team Members who collectively play an important role in delivering exceptional service, quality accommodations, and memorable travel experiences. That’s why we’ve created a workplace that supports growth, opportunity, work-life balance, and respect throughout our Club affiliated properties, sales centers, and corporate offices around the globe.

Accor

accor.com

We are Accor We are more than 290,000 hospitality experts placing people at the heart of what we do, creating emotion for our guests, and nurturing passion for service and achievement beyond limits. Building on the strength of our teams and of our fully integrated ecosystem of leading brands, personalized services & expert solutions, we break new ground to reimagine hospitality and inspire new ways to experience the world. We are dedicated to suit all desires and needs, and reinvent the guest experience every day with our 45 hotel brands across all segments- 5,600 properties around the world from luxury five-star palaces to smart economy hotels, exquisite residences to full-service resorts. Because we take care of millions of guests and each of our hotels is a world in itself, where every action counts. We strive to make positive impact both locally and globally, to ensure hospitality benefits not only the few, but all.

Hampton

hampton.com

The Hampton brand, including Hampton Inn, Hampton Inn & Suites and Hampton by Hilton, is an award-winning leader in the upper-midscale hotel segment. With more than 2,700 properties in 32 countries globally, Hampton is part of Hilton Worldwide, the leading global hospitality company. All Hampton Hotels offer warm surroundings and a friendly service culture and personality, defined as “Hamptonality,” supported by its 100% Satisfaction Guarantee. High-quality accommodations, in-room conveniences and the latest technology, combined with numerous locations and consistent offerings, have made Hampton a leader in its segment and one of the fastest growing hotel brands. For more information please visit: www.hampton.com www.hamptonfranchise.com news.hampton.com www.hiltonworldwide.com/careers/ To connect with us on social please visit: www.facebook.com/hampton www.twitter.com/hampton www.youtube.com/hampton

Loading…

NEWS

Hyatt CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

June 25, 2026 09:07 AM

UAE’s first cybersecurity startup accelerator concludes

The UAE Cybersecurity Council (CSC), in cooperation with Amazon Web Services (AWS), CrowdStrike, and e&, celebrated the successful.

Read Article

June 25, 2026 08:52 AM

Dubai SME partners with Hyatt to create new opportunities for local businesses

Hyatt hotels in Dubai will provide eligible SME members with access to available retail and activation spaces within participating...

Read Article

June 23, 2026 07:00 AM

Cybersecurity Council, AWS, CrowdStrike, e& celebrate completion of first government-backed cybersecurity startup accelerator cohort

The UAE Cybersecurity Council (CSC), in cooperation with Amazon Web Services (AWS), CrowdStrike, and e&, today celebrated the successful...

Read Article

June 15, 2026 07:00 AM

Hyatt’s former global CIO moves to Goosehead Insurance as CTO

Eben Hewitt, ex-global CIO at Hyatt, will steer Goosehead's tech strategy, expanding AI capabilities, data platforms and its Digital Agent...

Read Article

June 03, 2026 07:00 AM

Hyatt Hotels (H): Company Profile, Stock Price, News, Rankings

Get insights into Hyatt Hotels including business profile, stock information, news, and rankings from Fortune.

Read Article

June 01, 2026 07:00 AM

3 Profitable Stocks We Approach with Caution

While profitability is essential, it doesn't guarantee long-term success. Some companies that rest on their margins will lose ground as...

Read Article

May 18, 2026 07:00 AM

Exito Media Concepts Announces the 32nd Edition of the Cyber Security Summit Thailand 2026

Securing Thailand's Digital Evolution for a Safer Future. 29th May 2026 | Hyatt Regency Bangkok Sukhumvit.

Read Article

May 12, 2026 07:00 AM

Cybersecurity firm warns of AI-driven threats outpacing PH readiness

MANILA – Cybersecurity firm Fortinet highlighted the use of artificial intelligence (AI)-driven tools by malicious actors,...

Read Article

April 27, 2026 07:00 AM

Asking around: the easiest ransomware attack signals to miss

Ransomware victims may feel like they missed the early warning signs: a malware download here, a social-engineering call there.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…