What is the official website of JW Marriott Bucharest Grand Hotel ?

The official website of JW Marriott Bucharest Grand Hotel is https://http://www.marriott.com/hotels/travel/buhro-jw-marriott-bucharest-grand-hotel/.

What is JW Marriott Bucharest Grand Hotel's cybersecurity risk score?

JW Marriott Bucharest Grand Hotel has an AI-generated cybersecurity risk score of 773 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has JW Marriott Bucharest Grand Hotel experienced?

According to Rankiteo, JW Marriott Bucharest Grand Hotel currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has JW Marriott Bucharest Grand Hotel been affected by any supply chain cyber incidents ?

According to Rankiteo, JW Marriott Bucharest Grand Hotel has been affected by a supply chain cyber incident involving gastrodat GmbH, with the incident ID CHEGAS1776335039.

Does JW Marriott Bucharest Grand Hotel have SOC 2 Type 1 certification ?

According to Rankiteo, JW Marriott Bucharest Grand Hotel is not certified under SOC 2 Type 1.

Does JW Marriott Bucharest Grand Hotel have SOC 2 Type 2 certification ?

According to Rankiteo, JW Marriott Bucharest Grand Hotel does not hold a SOC 2 Type 2 certification.

Does JW Marriott Bucharest Grand Hotel comply with GDPR ?

According to Rankiteo, JW Marriott Bucharest Grand Hotel is not listed as GDPR compliant.

Does JW Marriott Bucharest Grand Hotel have PCI DSS certification ?

According to Rankiteo, JW Marriott Bucharest Grand Hotel does not currently maintain PCI DSS compliance.

Does JW Marriott Bucharest Grand Hotel comply with HIPAA ?

According to Rankiteo, JW Marriott Bucharest Grand Hotel is not compliant with HIPAA regulations.

Does JW Marriott Bucharest Grand Hotel have ISO 27001 certification ?

According to Rankiteo,JW Marriott Bucharest Grand Hotel is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does JW Marriott Bucharest Grand Hotel operate in ?

JW Marriott Bucharest Grand Hotel operates primarily in the Hospitality industry.

How many employees does JW Marriott Bucharest Grand Hotel have ?

JW Marriott Bucharest Grand Hotel employs approximately 143 people worldwide.

Does JW Marriott Bucharest Grand Hotel own any subsidiaries ?

JW Marriott Bucharest Grand Hotel presently has no subsidiaries across any sectors.

How many LinkedIn followers does JW Marriott Bucharest Grand Hotel have ?

JW Marriott Bucharest Grand Hotel's official LinkedIn profile has approximately 9,890 followers.

What is the NAICS classification code for JW Marriott Bucharest Grand Hotel ?

JW Marriott Bucharest Grand Hotel is classified under the NAICS code 7211, which corresponds to Traveler Accommodation.

Does JW Marriott Bucharest Grand Hotel have a Crunchbase profile ?

No, JW Marriott Bucharest Grand Hotel does not have a profile on Crunchbase.

Does JW Marriott Bucharest Grand Hotel have a LinkedIn profile ?

Yes, JW Marriott Bucharest Grand Hotel maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/jwmarriottbucharest.

How many cybersecurity incidents has JW Marriott Bucharest Grand Hotel experienced ?

As of August 2, 2026, Rankiteo reports that JW Marriott Bucharest Grand Hotel has experienced 6 cybersecurity incidents.

How many peer or competitor companies does JW Marriott Bucharest Grand Hotel have ?

JW Marriott Bucharest Grand Hotel has an estimated 14,326 peer or competitor companies worldwide.

What types of cybersecurity incidents has JW Marriott Bucharest Grand Hotel faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

JMBGH

Boost Score +25 with badge (5 left)

773

/1000

Fair

798

/1000

Fair

JW Marriott Bucharest Grand Hotel Vendor Cyber Rating & Cyber Score

marriott.com

Add Your Compliance Badge

Located in an area of historic and national interest, JW Marriott Bucharest Grand Hotel in Romania is the only five-star, hotel in the district and is in close proximity to the stately Palace of Parliament and People’s Salvation Cathedral. Culturally rich and with a status that befits its quality offering, our luxury hotel provides a restorative setting in Bucharest where its legacy for intuitive service, culinary distinction, and notable grandeur remains unsurpassed. Its seamless blend of modern luxury and authentic appeal enhances each stay in Bucharest, Romania with a holistic offering, that is both distinctive and deeply enriching. The JW Marriott Bucharest Grand Hotel in Romania is a premier luxury destination for business and

JMBGH A.I CyberSecurity Scoring

Scoring History

JMBGH

JW Marriott Bucharest Grand Hotel CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Marriott Internatio...

Breach

4/2026

gastrodat GmbH

CHEGAS177633503...

JW Marriott Buchare...

Breach

10/2025

MAR080220810112...

JW Marriott Buchare...

Breach

100

07/2022

MAR1318722

JW Marriott Buchare...

Breach

06/2022

MAR13023722

JW Marriott Buchare...

Data Leak

09/2019

MAR81730423

JW Marriott Buchare...

Breach

6/2016

MAR019090625

Loading…

A.I.

JMBGH Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for JMBGH

Incidents vs Hospitality Industry Avg (This Year)

No incidents recorded for JW Marriott Bucharest Grand Hotel in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for JW Marriott Bucharest Grand Hotel in 2026.

Incident Types JMBGH vs Hospitality Industry Avg (This Year)

No incidents recorded for JW Marriott Bucharest Grand Hotel in 2026.

Incident History - JMBGH (X = Date, Y = Severity)

Loading…

SUBSIDIARY

JW Marriott Bucharest Grand Hotel Subsidiaries

JMBGH

Hospitality

Website: https://http://www.marriott.com/hotels/travel/buhro-jw-marriott-bucharest-grand-hotel/

Company Size: 143

JW MarriottHospitality

Marriott InternationalHospitality

Marriott BonvoyHospitality

The Ritz-Carlton Hotel Company, L.L.C.Hospitality

Marriott HotelsHospitality

Westin Hotels & ResortsHospitality

Courtyard by MarriottHospitality

W HotelsHospitality

Sheraton Hotels & ResortsHospitality

Fairfield by MarriottHospitality

EDITIONHospitality

Design HotelsHospitality

Renaissance HotelsHospitality

Residence InnHospitality

Marriott Executive ApartmentsHospitality

SpringHill Suites by MarriottHospitality

Gaylord HotelsHospitality

Aloft HotelsHospitality

Delta Hotels and Resorts®Hospitality

Four Points by SheratonHospitality

Autograph CollectionHospitality

Residence Inn by MarriottHospitality

TownePlace Suites by MarriottHospitality

Marriott U.S. Sales OrganizationHospitality

Revenue Management Advisory Services (RMAS)Hospitality

Le Méridien Hotels & ResortsHospitality

JW Marriott Marquis Hotel DubaiHospitality

Marriott DevelopmentHospitality

Overheard@MarriottLeisure, Travel & Tourism

Starwood Preferred Guest (SPG)Hospitality

Marriott Bonvoy EventsEvents Services

Loading…

JW Marriott Bucharest Grand Hotel Similar Companies

Hampton

hampton.com

The Hampton brand, including Hampton Inn, Hampton Inn & Suites and Hampton by Hilton, is an award-winning leader in the upper-midscale hotel segment. With more than 2,700 properties in 32 countries globally, Hampton is part of Hilton Worldwide, the leading global hospitality company. All Hampton Hotels offer warm surroundings and a friendly service culture and personality, defined as “Hamptonality,” supported by its 100% Satisfaction Guarantee. High-quality accommodations, in-room conveniences and the latest technology, combined with numerous locations and consistent offerings, have made Hampton a leader in its segment and one of the fastest growing hotel brands. For more information please visit: www.hampton.com www.hamptonfranchise.com news.hampton.com www.hiltonworldwide.com/careers/ To connect with us on social please visit: www.facebook.com/hampton www.twitter.com/hampton www.youtube.com/hampton

Meliá Hotels International

ow.ly

Welcome to Meliá Hotels International! From Mallorca to the world, our story is an exciting journey that began more than six decades ago and has led us to become one of the largest hotel chains on the planet and the most sustainable in Europe (S&P Global). With more than 400 hotels across the world, our passion for hospitality drives us to deliver unique and memorable experiences through our nine brands: Gran Meliá Hotels & Resorts, ME by Meliá, The Meliá Collection, Paradisus by Meliá, Meliá Hotels & Resorts, ZEL, INNSiDE by Meliá, Sol by Meliá and Affiliated by Meliá. If you are looking for a place where your talent can shine and contribute to a more sustainable future, Meliá Hotels International is your destination. We are a family of more than 45,000 people, where every one of us is a VIP (Very Inspiring People) and we are proud to be a Top Employer in multiple countries. Being part of Meliá is to undertake a journey without borders, because the possibilities for development and learning are endless. Here, we enjoy a passionate and familiar environment, full of opportunities where inspiration will always be with you. Join us and feel like a true VIP!

Landry's

landrysinc.com

Landry's is a multinational, diversified restaurant, hospitality, gaming, and entertainment leader based in Houston, Texas. The company operates more than 600 establishments around the world, including well-known concepts, such as Landry’s Seafood House, Bubba Gump Shrimp Co., Rainforest Cafe, Morton’s The Steakhouse, The Oceanaire Seafood Room, McCormick & Schmick’s, Chart House, Saltgrass Steak House, Del Frisco’s Double Eagle Steakhouse, Palm Restaurants, and Mastro’s Restaurants. The company also operates a group of signature restaurants, including Vic & Anthony’s Steakhouse, Grotto, Willie G’s, and others. The gaming division includes the renowned Golden Nugget Hotel and Casino concept, with locations in Las Vegas and Laughlin, NV, Atlantic City, NJ, Biloxi, MS, and Lake Charles, LA. The entertainment and hospitality divisions encompass popular destinations, including the Galveston Island Historic Pleasure Pier, Kemah Boardwalk, Aquarium Restaurants, and other exciting attractions, coupled with deluxe accommodations throughout the Houston and Galveston area, including The Post Oak Hotel at Uptown Houston, Westin Houston Downtown, Kemah Boardwalk Inn and The San Luis Resort, including the Hilton Galveston Island Resort and Holiday Inn Galveston on the Beach located on Galveston Island.

Radisson Hotel Group

radissonhotels.com

Radisson Hotel Group is an international hotel group, operating in EMEA and APAC with over 1,320 hotels in operation and under development in +95 countries. The international hotel group is rapidly expanding with a plan to significantly grow the portfolio. The Group’s overarching brand promise is Every Moment Matters with a signature Yes I Can! service ethos. The Radisson family of brands portfolio includes Radisson Collection, art’otel, Radisson Blu, Radisson, Radisson RED, Radisson Individuals, Park Plaza, Park Inn by Radisson, Country Inn & Suites by Radisson, and prizeotel brought together under one commercial umbrella brand Radisson Hotels. Radisson Rewards is Radisson Hotel Group’s loyalty program, which delivers an elevated experience that makes Every Moment Matter. As the most streamlined program in the sector, members enjoy exceptional advantages and can access their benefits from day one across a wide range of hotels in Europe, Middle East, Africa, and Asia Pacific. Radisson Meetings provides tailored solutions for any event or meeting, including hybrid solutions placing guests and their needs at the heart of its offer. Radisson Meetings is built around three strong service commitments: Personal, Professional and Memorable, while delivering on the brilliant basics and being uniquely 100% Carbon Neutral. At Radisson Hotel Group we care for people, communities and planet and aim to be Net Zero by 2050 based on the approved near-term Science Based Targets. With unique solutions such as 100% carbon neutral Radisson Meetings, we make sustainable hotel stays easy. To facilitate sustainable travel choices, all our hotels are becoming verified on Hotel Sustainability Basics.

Aramark

cb aramark.com

Aramark (NYSE: ARMK) proudly serves the world’s leading educational institutions, Fortune 500 companies, world champion sports teams, prominent healthcare providers, iconic destinations and cultural attractions, and numerous municipalities in 16 countries around the world with food and facilities management. Because of our hospitality culture, our employees strive to do great things for each other, our partners, our communities, and the planet.

DoubleTree by Hilton

cb doubletree.com

DoubleTree by Hilton hotels are distinctively designed properties that provide true comfort to today’s business and leisure travelers. From the millions of delighted hotel guests who are welcomed with the brand’s legendary, warm chocolate chip cookies at check-in to the advantages of the award-winning Hilton HHonors® guest reward program, each DoubleTree by Hilton guest receives a satisfying stay wherever their travels take them. With a growing collection of contemporary, upscale accommodations in more than 375+ gateway cities, metropolitan areas and vacation destinations worldwide. DoubleTree by Hilton is part of Hilton Worldwide (NYSE: HLT), a leading global hospitality company spanning the lodging sector from luxury and full-service hotels and resorts to extended-stay suites and focused-service hotels. For 95 years, Hilton Worldwide has been dedicated to continuing its tradition of providing exceptional guest experiences. The company’s portfolio of eleven world-class global brands is comprised of more than 4,100 managed, franchised, owned and leased hotels and timeshare properties, with more than 685,000 rooms in 92 countries and territories, including Hilton Hotels & Resorts, Waldorf Astoria Hotels & Resorts, Conrad Hotels & Resorts, Curio – A Collection by Hilton, DoubleTree by Hilton, Embassy Suites Hotels, Hilton Garden Inn, Hampton Hotels, Homewood Suites by Hilton, Home2 Suites by Hilton and Hilton Grand Vacations. The company also manages an award-winning customer loyalty program, Hilton Honors.

Jumeirah

jumeirah.com

Jumeirah, a global leader in luxury hospitality and a member of Dubai Holding, operates an exceptional portfolio of 31 properties, including 33 signature F&B restaurants, across the Middle East, Europe, Asia and Africa. In 1999, Jumeirah changed the face of luxury hospitality with the opening of the iconic Jumeirah Burj Al Arab and the brand is now renowned worldwide for its distinguished beachfront resorts, esteemed city hotels and luxury residences. From the contemporary Maldivian island paradise at Jumeirah Olhahali Island to the art-inspired Jumeirah Capri Palace in Italy and the modern twist on a British classic at Jumeirah Carlton Tower in London, the brand has become synonymous with warm and generous service and the ability to craft distinctive and purposeful experiences that bring joy to guests from across the world.

Best Western Hotels & Resorts

bestwestern.com

Best Western Hotels & Resorts headquartered in Phoenix, Arizona, is a privately held hotel company within the BWH℠ Hotels global enterprise. With 19 brands and approximately 4,300 hotels in over 100 countries and territories worldwide*, BWH Hotels suits the needs of developers and guests in every market. Brands include Best Western®, Best Western Plus®, Best Western Premier®, @HOME by Best WesternSM, Executive Residency by Best Western®, Vīb®, GLō®, Aiden®, Sadie®, BW Premier Collection® and BW Signature Collection®. Through acquisition, WorldHotelsTM Luxury, Elite, Distinctive and Crafted collections are also offered. Completing the portfolio is SureStay®, SureStay Plus®, SureStay Collection® and SureStay Studio® franchises**. For more information visit www.bestwestern.com, www.bestwesterndevelopers.com, www.worldhotels.com and www.surestay.com. * Numbers are approximate, may fluctuate, and include hotels currently in the development pipeline. **All Best Western, WorldHotels and SureStay branded hotels are independently owned and operated.

Hilton

cb hilton.com

Hilton (NYSE: HLT) is a leading global hospitality company with a portfolio of 24 world-class brands comprising more than 8,400 properties and over 1.25 million rooms, in 140 countries and territories. Dedicated to fulfilling its founding vision to fill the earth with the light and warmth of hospitality, Hilton has welcomed over 3 billion guests in its more than 100-year history, was named the No. 1 World’s Best Workplace by Great Place to Work and Fortune and has been recognized as a global leader on the Dow Jones Sustainability Indices. Hilton has introduced industry-leading technology enhancements to improve the guest experience, including Digital Key Share, automated complimentary room upgrades and the ability to book confirmed connecting rooms. Through the award-winning guest loyalty program Hilton Honors, the more than 210 million Hilton Honors members who book directly with Hilton can earn Points for hotel stays and experiences money can't buy. With the free Hilton Honors app, guests can book their stay, select their room, check in, unlock their door with a Digital Key and check out, all from their smartphone. Visit stories.hilton.com for more information, and connect with Hilton on Facebook, X, LinkedIn, Instagram and YouTube.

Loading…

NEWS

JW Marriott Bucharest Grand Hotel CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 01, 2019 07:00 AM

25 years of Business in Romania

On September 16, we celebrated 25 years of business in Romania with a one-evening anniversary event at the JW Marriott Grand Hotel in Bucharest.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…