What is the official website of KX Technologies ?

The official website of KX Technologies is http://www.kxtech.com.

What is KX Technologies's cybersecurity risk score?

KX Technologies has an AI-generated cybersecurity risk score of 762 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has KX Technologies experienced?

According to Rankiteo, KX Technologies currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has KX Technologies been affected by any supply chain cyber incidents ?

According to Rankiteo, KX Technologies has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does KX Technologies have SOC 2 Type 1 certification ?

According to Rankiteo, KX Technologies is not certified under SOC 2 Type 1.

Does KX Technologies have SOC 2 Type 2 certification ?

According to Rankiteo, KX Technologies does not hold a SOC 2 Type 2 certification.

Does KX Technologies comply with GDPR ?

According to Rankiteo, KX Technologies is not listed as GDPR compliant.

Does KX Technologies have PCI DSS certification ?

According to Rankiteo, KX Technologies does not currently maintain PCI DSS compliance.

Does KX Technologies comply with HIPAA ?

According to Rankiteo, KX Technologies is not compliant with HIPAA regulations.

Does KX Technologies have ISO 27001 certification ?

According to Rankiteo,KX Technologies is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does KX Technologies operate in ?

KX Technologies operates primarily in the Food and Beverage Services industry.

How many employees does KX Technologies have ?

KX Technologies employs approximately 162 people worldwide.

Does KX Technologies own any subsidiaries ?

KX Technologies presently has no subsidiaries across any sectors.

How many LinkedIn followers does KX Technologies have ?

KX Technologies's official LinkedIn profile has approximately 4,493 followers.

What is the NAICS classification code for KX Technologies ?

KX Technologies is classified under the NAICS code 722, which corresponds to Food Services and Drinking Places.

Does KX Technologies have a Crunchbase profile ?

No, KX Technologies does not have a profile on Crunchbase.

Does KX Technologies have a LinkedIn profile ?

Yes, KX Technologies maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/kx-technologies.

How many cybersecurity incidents has KX Technologies experienced ?

As of August 2, 2026, Rankiteo reports that KX Technologies has not experienced any cybersecurity incidents.

How many peer or competitor companies does KX Technologies have ?

KX Technologies has an estimated 8,767 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

KX Technologies

Boost Score +25 with badge (5 left)

762

/1000

Fair

787

/1000

Fair

KX Technologies Vendor Cyber Rating & Cyber Score

kxtech.com

Add Your Compliance Badge

KX Technologies is your Global Filtration Partner. It is our passion to provide innovative technologies and custom-designed filtration systems to the collaborative relationships we form with our customers. We continue to operate one of the world's largest solid-state extrusion facilities for the production of activated carbon filters. And though our reputation is built on the international success of KXT MATRIKX® Extruded Carbon, it is the collaboration with our customers that define our greatest innovations in new technologies and filtration systems. The company was originally formed in 1989 as a Limited Partnership between Exxon Chemical Corporation and KT Corporation. In 2007 Marmon Water LLC acquired the assets of KX Industries, LP,

KX Technologies A.I CyberSecurity Scoring

Scoring History

KX Technologies

KX Technologies CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

KX Technologies Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for KX Technologies

Incidents vs Food and Beverage Services Industry Avg (This Year)

No incidents recorded for KX Technologies in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for KX Technologies in 2026.

Incident Types KX Technologies vs Food and Beverage Services Industry Avg (This Year)

No incidents recorded for KX Technologies in 2026.

Incident History - KX Technologies (X = Date, Y = Severity)

Loading…

SUBSIDIARY

KX Technologies Subsidiaries

KX Technologies

Food and Beverage Services

Website: http://www.kxtech.com

Company Size: 162

Marmon Holdings, Inc.Industrial Machinery Manufacturing

Filtrex Technologies Pvt LtdBusiness Supplies & Equipment

DCI MarketingAdvertising Services

Future Metals - A Marmon | Berkshire Hathaway CompanyAirlines and Aviation

MicroAire Surgical InstrumentsMedical Device

Railserve, Inc.Rail Transportation

EcoWater Systems LLCManufacturing

Marmon/Keystone LLCWholesale Metals and Minerals

AcumedMedical Equipment Manufacturing

Union Tank Car Company - UTLXRailroad Equipment Manufacturing

EXSIFTransportation, Logistics, Supply Chain and Storage

Cerro Flow Products LLCWholesale Building Materials

Graver Technologies, LLCManufacturing

Fontaine TrailerTruck Transportation

FTS ToolsRailroad Equipment Manufacturing

Webb Wheel Products - A Marmon/Berkshire Hathaway CompanyTransportation/Trucking/Railroad

Transco - A Marmon Rail CompanyTransportation/Trucking/Railroad

TMI Climate SolutionsMechanical Or Industrial Engineering

EnersulOil and Gas

M&M Manufacturing CompanyWholesale Building Materials

Fontaine Fifth Wheel – A Marmon | Berkshire Hathaway CompanyTransportation/Trucking/Railroad

Nylok LLC - A Marmon / Berkshire Hathaway CompanyMotor Vehicle Manufacturing

Fontaine Modification CompanyTransportation/Trucking/Railroad

SonnaxAutomotive

Procor LimitedTransportation Equipment Manufacturing

L.A. DarlingRetail

Zephir S.p.A.Railroad Equipment Manufacturing

Trackmobile® LLCRailroad Equipment Manufacturing

Marmon Water, IncExecutive Offices

Marmon Retail SolutionsRetail

Marmon Industrial WaterUtilities

PRISM Plastics, Inc.Plastics Manufacturing

Precision Edge Surgical Products Company LLCMedical Equipment Manufacturing

Ecowater Systems EuropeConstruction

Cannon EquipmentAutomation Machinery Manufacturing

TSE Brakes - A Marmon/Berkshire Hathaway CompanyTruck Transportation

Retail Space SolutionsRetail Office Equipment

Coilmaster CorporationIndustrial Machinery Manufacturing

Store Opening SolutionsRetail

Sisu Axles Inc. - A Marmon Holdings CompanyMotor Vehicle Manufacturing

McKenzie Valve & MachiningRailroad Equipment Manufacturing

EcoWater Systems FranceManufacturing

Rostra Powertrain ControlsAutomotive

Prolium Industries Ltd, a Berkshire Hathaway CompanyOil and Gas

Eden Europe, s.r.o.Retail

Trade FixturesRetail Groceries

HPTIndustrial Machinery Manufacturing

Precision Brand Products Inc.Manufacturing

Uni-Form Components Co.Oil and Gas

EXSIF OFFSHOREOil and Gas

Aero-Hose, Corp.- A Marmon | Berkshire Hathaway CompanyAviation and Aerospace Component Manufacturing

Robertson Inc.Manufacturing

Marmon-HerringtonAutomotive

Cerro Fabricated Products LLCMachinery Manufacturing

Triangle Suspension Systems, Inc. - A Marmon/Berkshire Hathaway CompanyMotor Vehicle Manufacturing

EcoWater Systems ItaliaConstruction

Penn Aluminum International LLCIndustrial Machinery Manufacturing

Anderson FittingsMachinery Manufacturing

Ellis & Watts Global Industries, Inc.Oil and Gas

Pan American ScrewBuilding Materials

Orkal Aerospace-A Marmon | Berkshire Hathaway CompanyAirlines and Aviation

Unarco IndustriesRetail Office Equipment

Penn Machine CompanyRailroad Equipment Manufacturing

EcoWater EMEAWholesale

Marmon GloveExecutive Offices

UET - Ecodyne UET Schweiz AGUtilities

Fontaine Spray SuppressionMotor Vehicle Manufacturing

Perfection Automotive Aftermarket GroupMotor Vehicle Parts Manufacturing

Ecodyne UETIndustrial Machinery Manufacturing

Koehler Bright StarAppliances, Electrical, and Electronics Manufacturing

Cerro EMSMachinery Manufacturing

Centinel Metering - Unique solutions for Smart MeteringRenewable Energy Semiconductor Manufacturing

Apex Tools & Orthopedics Co.Medical Equipment Manufacturing

Marmon Ride ControlMotor Vehicle Manufacturing

Loading…

KX Technologies Similar Companies

Ambev

ambev.com.br

Hey there! Welcome. Here at Ambev, there are lots of people and amazing projects beyond our labels! Let’s talk about that. We believe that having a big dream requires just the same effort as having a small one. That is why our big dream began back in the 1880s, with a team determined to make things happen and, mainly, be present in the most important and remarkable moments for each one of you: from the barley fields to your glass, at the best concerts, soccer games, social gatherings, or even that relaxing moment after a long day of work. Throughout our journey, we succeeded but also made mistakes, found opportunities in a continuous learning process, took up issues, unlearned, relearned and evolved to be where we stand today. We are thousands of people in love with what we do, moved by the goal of bringing people together for a better world. Beer is our great passion, as well as the people involved in our ecosystem. But our brands are not all about us. We also have incredible projects which help the world become a better place for everyone. Some examples are Ambev VOA, our bottled water AMA, our goal to end our plastic pollution by 2025, shared economy and water saving projects, and moreover. We believe that, along with society, we can make the world a better place to live in. Therefore, we encourage new attitudes: responsible consumption and environmental preservation, two causes we support and are much more than a project. It’s our way to think and act. Everything we do pursues respect and collaboration to reach sustainable attitude. Our commitment is with you! Nice meeting you, we are Ambev and we go #BeyondLabels. Want to be part of our team? Find our opportunities at ambev.com.br/carreiras/trabalhe-conosco 😊 Our terms of use: http://www.ambev.com.br/termos-de-uso

Coca-Cola Consolidated

CokeConsolidated.com

Coca-Cola Consolidated is the largest Coca-Cola bottler in the United States. Our Purpose is to honor God in all we do, serve others, pursue excellence, and grow profitably. For over 120 years, we have been deeply committed to the consumers, customers, and communities we serve and are passionate about the broad portfolio of beverages and services we offer. We make, sell, and distribute beverages of The Coca-Cola Company and other partner companies in more than 300 brands and flavors across 14 states and the District of Columbia to approximately 60 million consumers. Headquartered in Charlotte, N.C., Coca-Cola Consolidated is traded on the NASDAQ Global Select Market under the symbol “COKE.” More information about the Company is available at www.cokeconsolidated.com. Follow Coca-Cola Consolidated on Facebook, Twitter, Instagram and LinkedIn.

UNFI

unfi.com

UNFI is North America’s Premier Food Wholesaler. We transform the world of food for our associates, customers, suppliers and the families we serve every day. With deeper full store selection and compelling brands for every aisle, built on an unmatched heritage in great food and fresh thinking. And smarter food solutions, from fulfillment to insights and beyond, that help entrepreneurs and major brands alike unlock their full potential and transform their businesses – for the better. Better Food. Better Future.

US Foods

usfoods.com

US Foods is one of America’s great food companies and a leading foodservice distributor, partnering with approximately 300,000 restaurants and foodservice operators to help their businesses succeed. With 28,000 associates and more than 70 locations, US Foods provides its customers with a broad and innovative food offering and a comprehensive suite of e-commerce, technology and business solutions. US Foods is headquartered in Rosemont, IL, and generates more than $28 billion in annual revenue. Visit usfoods.com to learn more. ------------ Rules of Engagement Statement: We are proud to support community engagement on the US Foods LinkedIn page, and we're excited to see your comments, photos and videos. Please note that the views expressed by the community do not necessarily reflect those of US Foods. Before posting, please take a moment to read our rules for community content. We reserve the right to remove content that violates these rules. 1. Don't break the law. Content that appears to break the law or that advocates for breaking the law also is not permitted. 2. Be polite and courteous to everyone, even those you disagree with. This also means you may not post anything that is threatening, harassing, abusive, bullying, discriminatory, profane, sexually explicit, obscene, violent, gruesome, or similarly objectionable. 3. Stay on topic for this community and dialogue. Off-topic content may include but is not limited to irrelevant or out of context material, spam, promotional content, and links to third-party sites. 4. Follow LinkedIn's Terms and Conditions. 5. All posts must be by a real person and from a real profile. Content from fake or anonymous profiles is not permitted. 6. Our employees must also follow all of our applicable policies and guidelines, including but not limited to our Code of Conduct and Electronic Social Networking Policy.

Nestlé Nespresso SA

nespresso.com

Coffee is at the heart of everything we do, and consumer satisfaction is why we do it. Our story started with one simple idea: everyone should be able to make the perfect cup of coffee at home. Something we still believe today, which is why we think delivering the highest quality coffee, sip after sip, is so important. To achieve this, we continuously strive for innovation. Our coffee experts look for the world’s most exclusive coffees, and create new and exciting blends through a very strict coffee selection process. We create exceptional coffee experiences by continuously reinventing our coffee system, and the way coffee lovers can enjoy our coffee, transforming coffee culture on a global scale. We are committed to making a positive impact. We source our coffee from unique regions, working in partnership with over 110 000 farmers through our Nespresso AAA Sustainable Quality™ program around the world. We help them achieve high certification standards – for example in water management, biodiversity and fair worker treatment – through our long-term partners Rainforest Alliance and Fairtrade international. At Nespresso, we offer personalized services to our Club Members: from delivery and repair to customer care and recycling systems. We are in direct contact with coffee lovers through our e-commerce platform, boutiques and social media, allowing us to anticipate and cater to their every need. We also provide a full range of machines and coffees to meet the specific needs of the world’s most foremost hotels, restaurants and business customers. Our business Solutions enable your company to offer the perfect cup of coffee to your employees, clients and customers, every time. Nespresso is not just coffee. It’s a genuine experience that combines perfection and pleasure, simplicity and aesthetics. Learn more, visit http://www.nestle-nespresso.com/

Gordon Food Service

cb gfs.com

We’ve grown to become the largest family-operated broadline food service distributor in North America by upholding the same business approach since 1897—being passionately committed to the people we serve. We believe in the power of good food—to bring people together and make moments special. Every product, every order, and every decision we make is inspired by the people on the other side of the plate. We distribute to foodservice operators throughout the Midwest, Northeast, Southeast and Southwest regions of the U.S. and coast to coast in Canada. Our company also operates more than 170 Gordon Food Service Stores, which are open to the public and provide the benefits of restaurant-quality products and friendly, knowledgeable service. Gordon Food Service Stores do not charge a membership fee. Gordon Food Service Stores are the primary supplier for many small foodservice operators, including: restaurants, churches, daycare providers, caterers, event planners, and other small businesses. We offer a broad range of employment opportunities throughout our corporate offices, distribution centers, and retail stores. We have a strong commitment to our employees and foster an environment that promotes internal growth, training, and career development opportunities. Gordon Food Service is an Equal Opportunity Employer and does not discriminate against any person on the basis of age, sex, race, religion, national origin, disability, or veteran status.

MBRF

mbrf-global-foods-company

We are one of the leading global producers and exporters of quality food, as we believe it is fundamental to a better life for all people. Not only what we do, but the way we do it, is guided by the purpose of a better life for everyone, from farm to fork. That is why we conduct a sustainable management of our chain, which is vivid, long and complex. In our chain, it is vital to know how to manage interdependence, appreciate knowledge and the development of people and their diversity, ensure efficiency and always innovate. That is how we guarantee our results. We never relinquish Safety, Quality and Integrity to reach our goals and, guided by these fundamental commitments, we maintain operations in more than 127 countries, we are responsible for iconic and beloved brands such as Sadia, Perdigão and Qualy, and own over 35 production plants, 40 distribution plants, in addition to more than 4,000 products and 4.5 million tons of food sold around the globe. Producing food in a way that improves the lives of so many people worldwide is a fascinating challenge. This is our greatest passion.

Nestlé

nestle.com

As the world’s largest food and beverage company we are driven by a simple aim: unlocking the power of food to enhance quality of life for everyone, today and for generations to come. To deliver on this, we serve with passion, with a spirit of excellence, offering products and services for all stages of life, every moment of the day, helping people care for themselves and their families. Our culture is based on our values rooted in respect: respect for ourselves, respect for others, respect for diversity and respect for the future. We can trace our origin back to 1866, when the first European condensed milk factory was opened in Cham, Switzerland, by the Anglo-Swiss Condensed Milk Company. One year later, Henri Nestlé, a trained pharmacist, launched one of the world’s first prepared infant cereals ‘Farine lactée’ in Vevey, Switzerland. Today, we employ around 273,000 people and have factories or operations in almost every country in the world. With our headquarters still based in the Swiss town of Vevey, we had sales of CHF 84.3 billion in 2020. Our portfolio covers almost every food and beverage category – offering products and services for all stages of life, every moment of the day, helping people care for themselves and their families. House rules: https://nes.tl/HouseRules

Kraft Heinz

cb kraftheinz.com

The Kraft Heinz Company is one of the largest food and beverage companies in the world, with eight $1 billion+ brands and global sales of approximately $25 billion. We’re a globally trusted producer of high-quality, great-tasting, and nutritious foods for over 150 years. While Kraft Heinz is co-headquartered in Chicago and Pittsburgh, our brands are truly global, with products produced and marketed in over 40 countries. These beloved products include condiments and sauces, cheese and dairy, meals, meats, refreshment beverages, coffee, infant and nutrition products, and numerous other grocery products in a portfolio of more than 200 legacy and emerging brands. We spark joy around mealtime with our iconic brands, including Kraft, Oscar Mayer, Heinz, Philadelphia, Lunchables, Velveeta, Maxwell House, Capri Sun, Ore-Ida, Kool-Aid, Jell-O, Primal Kitchen, and Classico, among others. No matter the brand, we’re united under one vision: To sustainably grow by delighting more consumers globally. Bringing this vision to life is our team of 37,000+ food lovers, creative thinkers, and high performers worldwide. Together, we help provide meals to those in need through our global partnership with Rise Against Hunger. We also stand committed to responsible, sustainable practices that extend to every facet of our business, our consumers, and our communities. Every day, we’re transforming the food industry with bold thinking and unprecedented results. If you share our passion – and are ready to create the future, build a legacy, and lead as a global citizen – there’s only one thing to do: join our table and let’s make life delicious!

Loading…

NEWS

KX Technologies CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 27, 2026 08:15 PM

NJIT to Launch Expanded AI and Cybersecurity Workforce Training in Partnership with Verizon

Newark, N.J., Feb. 27, 2026 (GLOBE NEWSWIRE) -- New Jersey Institute of Technology (NJIT) today announced applications.

Read Article

February 23, 2026 08:00 AM

Northern Ireland tech supports Singapore's digital growth

With companies already active in Singapore and strong ties between universities, industry and government, the region is well-placed to...

Read Article

July 23, 2024 07:00 AM

LM's Skunk Works and KX Shaping the Future of Open Mission S

Today, at the Farnborough Air Show, Skunk Works®, the renowned Advanced Development Programs division of Lockheed Martin (NYSE: LMT) and KX,...

Read Article

July 14, 2020 07:00 AM

First Derivatives adds Cloudflare CFO Thomas Seifert to its board

Financial data analytics company First Derivatives (LON:FDP) made the second major addition of an outside technology executive to its board...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…