What is the official website of INFINITI North Calgary ?

The official website of INFINITI North Calgary is https://infinitigallery.ca/.

What is INFINITI North Calgary's cybersecurity risk score?

INFINITI North Calgary has an AI-generated cybersecurity risk score of 746 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has INFINITI North Calgary experienced?

According to Rankiteo, INFINITI North Calgary currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has INFINITI North Calgary been affected by any supply chain cyber incidents ?

According to Rankiteo, INFINITI North Calgary has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does INFINITI North Calgary have SOC 2 Type 1 certification ?

According to Rankiteo, INFINITI North Calgary is not certified under SOC 2 Type 1.

Does INFINITI North Calgary have SOC 2 Type 2 certification ?

According to Rankiteo, INFINITI North Calgary does not hold a SOC 2 Type 2 certification.

Does INFINITI North Calgary comply with GDPR ?

According to Rankiteo, INFINITI North Calgary is not listed as GDPR compliant.

Does INFINITI North Calgary have PCI DSS certification ?

According to Rankiteo, INFINITI North Calgary does not currently maintain PCI DSS compliance.

Does INFINITI North Calgary comply with HIPAA ?

According to Rankiteo, INFINITI North Calgary is not compliant with HIPAA regulations.

Does INFINITI North Calgary have ISO 27001 certification ?

According to Rankiteo,INFINITI North Calgary is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does INFINITI North Calgary operate in ?

INFINITI North Calgary operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does INFINITI North Calgary have ?

INFINITI North Calgary employs approximately 11 people worldwide.

Does INFINITI North Calgary own any subsidiaries ?

INFINITI North Calgary presently has no subsidiaries across any sectors.

How many LinkedIn followers does INFINITI North Calgary have ?

INFINITI North Calgary's official LinkedIn profile has approximately 166 followers.

What is the NAICS classification code for INFINITI North Calgary ?

INFINITI North Calgary is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does INFINITI North Calgary have a Crunchbase profile ?

No, INFINITI North Calgary does not have a profile on Crunchbase.

Does INFINITI North Calgary have a LinkedIn profile ?

Yes, INFINITI North Calgary maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/infiniti-gallery.

How many cybersecurity incidents has INFINITI North Calgary experienced ?

As of August 3, 2026, Rankiteo reports that INFINITI North Calgary has not experienced any cybersecurity incidents.

How many peer or competitor companies does INFINITI North Calgary have ?

INFINITI North Calgary has an estimated 13,023 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

INC

Boost Score +25 with badge (5 left)

746

/1000

Moderate

771

/1000

Fair

INFINITI North Calgary Vendor Cyber Rating & Cyber Score

infinitigallery.ca

Add Your Compliance Badge

Infiniti Gallery has been proudly serving the Calgary, Alberta community since 2015 as a premier Infiniti Dealership specialising in New & Used Infiniti Vehicle Sales, Service and Parts. Dedicated to helping you find the perfect vehicle for you; whether it is new, pre-owned model, our team is ready to help you find the perfect vehicle to meet all of your needs. Infiniti Gallery’s Service department professionals and knowledgeable OEM factory trained technicians treat your car with care just as if it were our own. They keep your Infiniti reliable and dependable so you will love and enjoy it for many years to come. Infiniti Gallery is a division of Dilawri Group of Companies, Canada's largest automotive group with 67 franchised dealerships

INC A.I CyberSecurity Scoring

Scoring History

INC

INFINITI North Calgary CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

INC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for INC

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for INFINITI North Calgary in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for INFINITI North Calgary in 2026.

Incident Types INC vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for INFINITI North Calgary in 2026.

Incident History - INC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

INFINITI North Calgary Subsidiaries

INC

Motor Vehicle Manufacturing

Website: https://infinitigallery.ca/

Company Size: 11-50 employees

Dilawri Group of CompaniesMotor Vehicle Manufacturing

Calgary HondaMotor Vehicle Manufacturing

Audi Downtown VancouverMotor Vehicle Manufacturing

Calgary BMWMotor Vehicle Manufacturing

Porsche Centre VancouverMotor Vehicle Manufacturing

Audi QueenswayMotor Vehicle Manufacturing

BMW Royal OakMotor Vehicle Manufacturing

Pacific HondaMotor Vehicle Manufacturing

Markham HondaMotor Vehicle Manufacturing

Vancouver HondaMotor Vehicle Manufacturing

Meadowvale HondaMotor Vehicle Manufacturing

Markham AcuraMotor Vehicle Manufacturing

Bentley VancouverMotor Vehicle Manufacturing

Mercedes-Benz LangleyMotor Vehicle Manufacturing

Bolton ToyotaMotor Vehicle Manufacturing

Oakville HondaMotor Vehicle Manufacturing

South Pointe HondaMotor Vehicle Manufacturing

Volkswagen Des SourcesMotor Vehicle Manufacturing

Southside NissanMotor Vehicle Manufacturing

Canyon Meadows HyundaiMotor Vehicle Manufacturing

BMW AuroraMotor Vehicle Manufacturing

Subaru Des SourcesMotor Vehicle Manufacturing

Burrard AcuraMotor Vehicle Manufacturing

Aston Martin VancouverMotor Vehicle Manufacturing

Mazda Des SourcesMotor Vehicle Manufacturing

Audi BarrieMotor Vehicle Manufacturing

401 Dixie NissanMotor Vehicle Manufacturing

401 Dixie VolkswagenMotor Vehicle Manufacturing

Agincourt MazdaMotor Vehicle Manufacturing

Acura of North TorontoMotor Vehicle Manufacturing

Barrie VolkswagenMotor Vehicle Manufacturing

Country Hills VolkswagenMotor Vehicle Manufacturing

Frost Chevrolet Buick GMC CadillacMotor Vehicle Manufacturing

401 Dixie MazdaMotor Vehicle Manufacturing

Acura of LangleyMotor Vehicle Manufacturing

Land Rover VancouverMotor Vehicle Manufacturing

BMW ReginaMotor Vehicle Manufacturing

North Vancouver NissanMotor Vehicle Manufacturing

Audi St-BrunoMotor Vehicle Manufacturing

Woodland ToyotaMotor Vehicle Manufacturing

Volvo Cars RichmondMotor Vehicle Manufacturing

Automobiles Niquet VolkswagenMotor Vehicle Manufacturing

Regina HondaMotor Vehicle Manufacturing

Triple Seven ChryslerMotor Vehicle Manufacturing

401 Dixie INFINITIMotor Vehicle Manufacturing

North Shore AcuraMotor Vehicle Manufacturing

Docksteader SubaruMotor Vehicle Manufacturing

MINI CalgaryMotor Vehicle Manufacturing

Distinctive CollectionMotor Vehicle Manufacturing

Hamel Chevrolet Buick GMCMotor Vehicle Manufacturing

Hyundai of ReginaMotor Vehicle Manufacturing

Infiniti Downtown VancouverAutomotive

Chevrolet Buick GMC West IslandMotor Vehicle Manufacturing

Jaguar VancouverMotor Vehicle Manufacturing

Dilawri MitsubishiMotor Vehicle Manufacturing

Markham MitsubishiMotor Vehicle Manufacturing

Regina AcuraMotor Vehicle Manufacturing

INFINITI North VancouverMotor Vehicle Manufacturing

Cadillac West IslandMotor Vehicle Manufacturing

Vancouver NissanMotor Vehicle Manufacturing

Infiniti ReginaMotor Vehicle Manufacturing

MINI ReginaMotor Vehicle Manufacturing

Loading…

INFINITI North Calgary Similar Companies

Mahindra and Mahindra Limited [Automotive and Farm Equipment Business]

mahindracareers.com

A USD 19.4 billion multinational group based in Mumbai, India, Mahindra provides employment opportunities to over 256,000 people across 100 countries. Mahindra operates in the key industries that drive economic growth, enjoying a leadership position in tractors, utility vehicles, information technology, financial services and vacation ownership. In addition, Mahindra enjoys a strong presence in the agribusiness, aerospace, components, consulting services, defence, energy, industrial equipment, logistics, real estate, retail, steel, commercial vehicles and two wheeler industries. The Automotive and Farm Equipment Business is the largest contributor of the Mahindra Group’s revenue. With 30,000+ full time employees spread across 20 locations, Mahindra has a strong presence in India. Further it propels an entire manufacturing ecosystem of 1,200 suppliers and 3,500 dealers, thereby creating direct and indirect employment for over 200,000 individuals. Our Farm Equipment business is the number 1 tractor company in the world by volume. In addition to our focus on maintaining a leading position in the core tractor mechanization business, we strive to deliver on our aspiration of “Farm Tech Prosperity” thus enabling our customers and our communities to RISE. Our Automotive business is a full-range mobility player with a presence in almost every segment of the automobile industry. Our product portfolio ranges from world class SUVs, premium luxury UVs, sedans, pick-ups, light, medium and heavy commercial vehicles to three-wheelers. All these cater to a diverse customer base spanning across rural and semi-urban customers. Leveraging our growing dominance, domestic & international market penetration and recent strategic acquisitions, we aim to provide world class exeperience to our customers and team members.

Cummins Inc.

cb cummins.com

At Cummins, we empower everyone to grow their careers through meaningful work, building inclusive and equitable teams, coaching, development and opportunities to make a difference. Across our entire organization, you'll find engineers, developers, and technicians who are innovating, designing, testing, and building. You'll also find accountants, marketers, as well as manufacturing, quality and supply chain specialists who are working with technology that's just as innovative and advanced. From your first day at Cummins, we’re focused on understanding your talents, current skills and future goals – and creating a plan to get you there. Your journey begins with planning your development and connecting to diverse experiences designed to spur innovation. From our internships to our senior leadership roles, we attract, hire and reward the best and brightest from around the world and look to them for new ideas and fresh perspectives. Learn more about #LifeAtCummins at cummins.com/careers.

Volkswagen Group

volkswagenag.com

The Volkswagen Group with its headquarters in Wolfsburg is one of the world’s leading automobile manufacturers and the largest carmaker in Europe. The Group is made up of ten brands from seven European countries: Volkswagen, Volkswagen Nutzfahrzeuge, ŠKODA, SEAT, CUPRA, Audi, Lamborghini, Bentley, Porsche and Ducati. Our group sells vehicles in 153 countries and operates 114 production plants worldwide. Each working day, around 675,000 employees worldwide produce cars, are involved in vehicle-related services or work in the other fields of business. Our goal is to make mobility sustainable for us and for future generations. Our promise: With electric drive, digital networking and autonomous driving, we make the automobile clean, quiet, intelligent and safe. At the same time, our core product becomes even more emotional and offers a completely new driving experience. It is also becoming part of the solution when it comes to climate and environmental protection. In this way, the car can continue to be a cornerstone of contemporary, individual and affordable mobility in the future. #Shapingmobility Imprint & Legal: http://vw.de/legal-notice DAT: http://vw.de/dat

Volkswagen do Brasil

vw.com.br

A gente sabe que o nome “Volkswagen” com certeza deve fazer parte da sua história. Porque a gente também sabe que não é à toa que estamos na vida, no coração e na garagem dos brasileiros. O segredo? Construímos os carros mais inovadores, tornamos as tecnologias acessíveis e dizemos sempre que estamos em constante desenvolvimento. Nunca paramos. Nunca nos damos por satisfeitos. Estamos construindo uma Nova Volkswagen, uma nova empresa para um novo mundo. Estamos focados em produtos, soluções de mobilidade e novos negócios que definam tendências, sempre discutindo e liderando o futuro da indústria. A ideia é usar as inovações tecnológicas não só a favor dos negócios, mas também das pessoas. Elas são a nossa inspiração para criarmos os carros mais seguros, modernos e eficientes. Sabemos que ao falar em inovação, as pessoas têm sempre que vir em primeiro lugar. Justamente por isso, fomos a única montadora a receber, em 2019, a certificação Top Employer, o mais importante reconhecimento internacional da excelência de uma empresa na gestão de pessoas, além de também sermos eleitos entre as 10 empresas mais desejadas para se trabalhar na pesquisa Valor Carreira – As Melhores na Gestão de Pessoas. Motivo de orgulho para cada um de nós. Fique de olho nas novidades da Volkswagen do Brasil aqui no LinkedIn e também em nossas outras redes sociais. Vai que você não é a pessoa que estamos procurando para fazer parte deste futuro com a gente? ;) Facebook: facebook.com/volkswagendobrasil Instagram: instagram.com/vwbrasil Twitter: twitter.com/vwbrasil YouTube: youtube.com/volkswagendobrasil

Continental

continental-careers.com

Continental develops pioneering technologies and services for sustainable and connected mobility of people and their goods. Founded in 1871, the technology company offers safe, efficient, intelligent and affordable solutions for vehicles, machines, traffic and transportation. In 2023, Continental generated sales of €41.4 billion and currently employs around 200,000 people in 56 countries and markets. - 💛 Our Netiquette 💛 - The purpose of our LinkedIn page is to offer information about products and solutions at Continental, about our company culture and about our actions and initiatives. Moreover, we would like to provide you with quick and easy contact for your questions and comments related to the above mentioned topics. We emphasize the importance of an appropriate and respectful style when communicating on our page and therefore we established the following community rules: - Please post only comments related to the topics covered by this page. - Treat each user in a respectful way, as you expect to be treated as well. Abusive language, aggression and bullying are not allowed on our page. We therefore reserve the right to remove posted comments or any other content from this site: - which is offensive or abusive, - includes a commercial benefit or unwanted advertising messages, - violates the rights of third parties as well as the right to intellectual property, - which is irrelevant or misleading - which is a spam (repeated duplicate posting) - for any other reason deemed necessary to create a helpful and respectful community The comments on our contributions reflect the opinion of individual users. Our LinkedIn page is frequently checked for possible violations as mentioned above. However, ongoing inspection of the content of the posted comments is not reasonable without concrete indication of a (legal) violation as mentioned above. We will immediately remove the relevant links if they are found to violate any aforementioned law or principle.

Scania Group

scania.com

Scania is a world-leading provider of transport solutions committed to a better tomorrow. Our purpose is to drive the shift towards a sustainable transport system. In doing so, we are creating a world of mobility that’s better for business, society and our environment. Employing more than 50,000 people in about 100 countries, Scania’s research and development is concentrated in Sweden, while production takes place in Europe and South America.

FORVIA HELLA

hella.com

FORVIA HELLA is a listed international automotive supplier. As a company of the FORVIA Group, FORVIA HELLA stands for high-performance lighting technology and vehicle electronics and, with the Lifecycle Solutions Business Group, also covers a broad service and product portfolio for the spare parts and workshop business as well as for manufacturers of special vehicles. With currently around 35,000 employees at over 125 locations, the Company is active worldwide and generated adjusted sales of €8.1 billion in fiscal year 2024. www.forvia-hella.com Legal notice: https://www.hella.com/legalnotice Data protection notice: https://www.hella.com/hella-com/en/Data-protection-65.html

Hero MotoCorp

heromotocorp.com

Hero MotoCorp, the world’s largest two-wheeler company, is shaping the future of mobility for over 125 million riders across 48 countries. Our story began in 1984, founded by the visionary Chairman Emeritus, Dr. Brijmohan Lall Munjal, with a bold vision: to make mobility accessible and aspirational for millions. Under the dynamic leadership of Executive Chairman, Dr. Pawan Munjal, we have grown into a global force in innovation, sustainability, and purpose-driven growth. Driven by our vision to ‘Be the Future of Mobility,’ we are innovating for tomorrow with our emerging mobility brand, VIDA, and groundbreaking innovations like the Surge S32, recognized as one of TIME's Best Inventions of 2024. With world-class R&D hubs in India and Germany, and advanced green manufacturing across three countries, we’re building more than machines. We’re building momentum for the planet. From icons like Splendor and Karizma to our premium collaboration with Harley-Davidson, we deliver performance with purpose. Our commitment to sustainability runs deep - we've achieved zero waste-to-landfill and 455% water positivity, and our DJSI (Dow Jones Sustainability Index) recognition reflects our dedication to doing business the right way. Recognized by TIME as the World’s Best Organizations (2024) and Asia Pacific’s Best Companies (2025), we are an organization driven by values and powered by people. Hero MotoCorp is more than a workplace; it’s a launchpad for your boldest ambitions. Join us. Create. Collaborate. Inspire. Come, be the future of mobility.

Marelli

cb marelli.com

Marelli is a global, independent technology partner to the automotive industry, with a strong and established track record in innovation and manufacturing excellence. As mobility is evolving fast and global trends drive unprecedented innovation, we leverage our expertise in integrating software and hardware to position ourselves as key enablers of the Software Defined Vehicle. Our Netiquette: Welcome to the Marelli LinkedIn page! On this LinkedIn Page, Marelli will share the most important news about its technological innovations, Corporate and Motorsport activities, using different kinds of media contents. Each user can participate and share his point of view. The comments are monitored and moderated following specific guidelines that we want to share with you, in order to establish an open and clear relationship with our fanbase. The administrators will participate in the conversations of the community – when the number of interactions allows them to do it – and they’ll respond to the questions of the users, only if these questions are not direct competence of the Marelli Customer Service. We reserve the right to remove comments that: - are not pertinent to the posts of the page; - consist in a violation of user’s privacy (ex. to share a user’s telephone number); - have vulgar, offensive or sexual content; - have the purpose to intimidate or discredit other people, institutions and religions; - violate any user’s rights; - promote illegal activities; - promote products, events or commercial services, even if they’re not direct competitors of Marelli; - have a political, ideological or religious content. In case of disagree among users or between users and administrators of the page, we invite all the members of the community to debate and contribute with respect for all the opinions, following the aim of the page itself. Every user assumes the full responsibility for all the content that he shares on the Marelli LinkedIn page.

Loading…

NEWS

INFINITI North Calgary CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…