What is the official website of Mobile and Web Apps ?

The official website of Mobile and Web Apps is https://recyclecoach.com/tfm/reach-more.html.

What is Mobile and Web Apps's cybersecurity risk score?

Mobile and Web Apps has an AI-generated cybersecurity risk score of 755 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Mobile and Web Apps experienced?

According to Rankiteo, Mobile and Web Apps currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Mobile and Web Apps been affected by any supply chain cyber incidents ?

According to Rankiteo, Mobile and Web Apps has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Mobile and Web Apps have SOC 2 Type 1 certification ?

According to Rankiteo, Mobile and Web Apps is not certified under SOC 2 Type 1.

Does Mobile and Web Apps have SOC 2 Type 2 certification ?

According to Rankiteo, Mobile and Web Apps does not hold a SOC 2 Type 2 certification.

Does Mobile and Web Apps comply with GDPR ?

According to Rankiteo, Mobile and Web Apps is not listed as GDPR compliant.

Does Mobile and Web Apps have PCI DSS certification ?

According to Rankiteo, Mobile and Web Apps does not currently maintain PCI DSS compliance.

Does Mobile and Web Apps comply with HIPAA ?

According to Rankiteo, Mobile and Web Apps is not compliant with HIPAA regulations.

Does Mobile and Web Apps have ISO 27001 certification ?

According to Rankiteo,Mobile and Web Apps is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Mobile and Web Apps operate in ?

Mobile and Web Apps operates primarily in the Environmental Services industry.

How many employees does Mobile and Web Apps have ?

Mobile and Web Apps employs approximately 0 people worldwide.

Does Mobile and Web Apps own any subsidiaries ?

Mobile and Web Apps presently has no subsidiaries across any sectors.

How many LinkedIn followers does Mobile and Web Apps have ?

Mobile and Web Apps's official LinkedIn profile has approximately 11 followers.

What is the NAICS classification code for Mobile and Web Apps ?

Mobile and Web Apps is classified under the NAICS code 54162, which corresponds to Environmental Consulting Services.

Does Mobile and Web Apps have a Crunchbase profile ?

No, Mobile and Web Apps does not have a profile on Crunchbase.

Does Mobile and Web Apps have a LinkedIn profile ?

Yes, Mobile and Web Apps maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mobile-&-web-apps.

How many cybersecurity incidents has Mobile and Web Apps experienced ?

As of August 2, 2026, Rankiteo reports that Mobile and Web Apps has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Mobile and Web Apps have ?

Mobile and Web Apps has an estimated 8,538 peer or competitor companies worldwide.

What types of cybersecurity incidents has Mobile and Web Apps faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

MWA

Boost Score +25 with badge (5 left)

755

/1000

Fair

780

/1000

Fair

Mobile and Web Apps Vendor Cyber Rating & Cyber Score

recyclecoach.com

Add Your Compliance Badge

Make recycling and waste information for your residents easy to find! Recycle Coach’s fully responsive web app is designed for resident usability and fits seamlessly onto your current website. The corresponding smartphone app allows residents to find information about their program, on-the-go, 24/7. We’ll make sure both the web app and mobile app are both customized to your municipality’s branding.

MWA A.I CyberSecurity Scoring

Scoring History

MWA

Mobile and Web Apps CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Mobile and Web Apps

Breach

04/2018

REC154326622

Loading…

A.I.

MWA Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for MWA

Incidents vs Environmental Services Industry Avg (This Year)

No incidents recorded for Mobile and Web Apps in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Mobile and Web Apps in 2026.

Incident Types MWA vs Environmental Services Industry Avg (This Year)

No incidents recorded for Mobile and Web Apps in 2026.

Incident History - MWA (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Mobile and Web Apps Subsidiaries

MWA

Environmental Services

Website: https://recyclecoach.com/tfm/reach-more.html

Company Size: 0

MaRS Discovery DistrictIT Services and IT Consulting

DialogueHealth and Human Services

BorrowellFinancial Services

Deep GenomicsBiotechnology Research

Kepler Communications Inc.Telecommunications

CCRMBiotechnology Research

Ample OrganicsInformation Technology & Services

Nest Wealth (Objectway Group)Financial Services

Smart NoraWellness and Fitness Services

MMB NetworksInformation Technology & Services

Newtopia Inc.Health, Wellness & Fitness

Peekapak | K12 Well-being EducationE-Learning Providers

Nudge, an Axonify companyInternet Publishing

ThinkData WorksData Infrastructure and Analytics

Lending LoopFinancial Services

Moka Financial TechnologiesFinancial Services

PowerHub: Software for RenewablesSoftware Development

TaplyticsSoftware Development

PUSH (acquired by WHOOP)Spectator Sports

BioConnectIT Services and IT Consulting

TrendMDIT Services and IT Consulting

PostBeyond by InfluitiveSoftware Development

ANVILPublic Safety

WealthscopeSoftware Development

CalendarHeroSoftware Development

MavennetIT Services and IT Consulting

Sensibill, a Q2 CompanyFinancial Services

TulipIT Services and IT Consulting

Tulip LatamServicios y consultoría de TI

OMXTechnology, Information and Internet

Nano Magnetics LtdManufacturing

AquaMobile Inc.Wellness and Fitness Services

QD Solar Inc.Nanotechnology Research

Sparq Systems Inc.Renewables & Environment

CybernetIQComputer Networking Products

GeneYouIn Inc.Biotechnology

PillcheckBiotechnology

Lucova Inc.IT Services and IT Consulting

Hot Pop FactoryDesign Services

OtoSim IncMedical Equipment Manufacturing

RithmTechnology, Information and Internet

Energent IncorporatedIT Services and IT Consulting

EnerMotion Inc.Environmental Services

Raise Your FlagIT Services and IT Consulting

Peak Power Energy IncProfessional Training and Coaching

RockMass TechnologiesMining

Ulula - An EcoVadis CompanySoftware Development

7D SurgicalMedical Equipment Manufacturing

SkyPrep LMSE-Learning Providers

AskuitySoftware Development

Swift MedicalSoftware Development

North OneFinancial Services

NanoleafComputers and Electronics Manufacturing

BlueDotData Infrastructure and Analytics

WorkTango Inc.Human Resources Services

SamplerTechnology, Information and Internet

Payment SourceFinancial Services

DirectPayFinancial Services

LoadhubFinancial Services

PaySimplyFinancial Services

Now Prepay by Payment SourceFinancial Services

e-ZincRenewables & Environment

Calendars, Magnets, Stickers and MoreEnvironmental Services

Recycle CoachEnvironmental Services

Recycling at WorkEnvironmental Services

Loading…

Mobile and Web Apps Similar Companies

Eiffage Énergie Systèmes

eiffageenergiesystemes.com

Rejoindre Eiffage, c’est rejoindre une entreprise animée d’un esprit de famille unique. Nous recherchons des talents qui valorisent l’esprit d’équipe et l’entraide et qui souhaitent découvrir, progresser, innover dans un collectif engagé pour construire un avenir à taille humaine. Nous avons besoin de vos différences et de vos singularités car elles sont la richesse d’un Groupe qui donne sa chance à chacun. Rejoindre Eiffage, c’est rejoindre une grande entreprise qui a tous les atouts d’une petite ! _ Eiffage Énergie Systèmes est la marque des métiers de l’énergie du groupe Eiffage. Eiffage Énergie Systèmes conçoit, réalise, exploite et maintient des systèmes d'énergie. Experte en génies électrique, industriel, climatique et énergétique, Eiffage Énergie Systèmes propose des solutions innovantes portées par de nouvelles marques expertises: 👉 Clemessy, la marque dédiée à l’industrie 👉 Dorsalys, la marque dédiée aux infrastructures et réseaux 👉 Expercité, la marque dédiée aux villes et collectivités 👉 Terceo, la marque dédiée aux bâtiments tertiaires. ➡️ Eiffage Énergie Systèmes, c’est : 38 250 collaborateurs 7.2 Mds€ de chiffre d’affaires total 2.8 Mds€ de chiffre d’affaires en Europe 170 M€ de chiffre d’affaires Grand international (hors Europe) ➡️ Eiffage : 21.8 Mds € de chiffre d’affaires 78 200 salariés CA : 21,8 milliards d’euros 78 200 salariés 🌍 Présente dans plus de 50 pays, Eiffage Énergie Systèmes tisse une relation de proximité avec ses clients et offre ses expertises pointues afin de répondre au plus juste aux besoins énergétiques. Rejoindre Eiffage Énergie Systèmes c’est prendre part à des projets d’envergure et concevoir des solutions énergétiques respectueuses des Hommes et de l’environnement. C’est aussi évoluer dans un milieu professionnel d’avenir et participer à créer un avenir à taille humaine.

Environment Agency

www.gov.uk

We are the Environment Agency. We are the biggest and most wide-ranging environmental regulator in Europe. We work with businesses and communities to protect and improve the environment, for people and wildlife. And the need for our work is becoming ever more important. We protect and improve the environment across England to: • reduce the risks to people and properties from flooding • help businesses and communities adapt to climate change • reduce pressures on biodiversity • help businesses to make sure they don’t harm the environment through pollution or taking too much water • issue licences and permits, and take action against people who don’t take their environmental responsibilities seriously. None of this is possible without a multi-talented team of professional and dedicated people. And just like the environment we help to care for, we’re home to an incredible diversity of skills and knowledge. Today, we employ more than 12,000 people throughout England in a wide range of roles. You’ll find leading scientists and prominent geologists alongside public relations professionals, planners and policy advisors. We employ lawyers, enforcement officers and engineers, conservation scientists and marine biologists. And of course we have a wide team of support staff. We employ people at all stages of their career, from recent graduates to experienced leaders and internationally-renowned experts. Find out how we manage our social media accounts at https://www.gov.uk/government/organisations/environment-agency/about/social-media-use

Bureau Veritas Group

bureauveritas.com

Bureau Veritas is a world leader in Testing, Inspection and Certification. Our mission is at the heart of key challenges: quality, health and safety, environmental protection and social responsibility. Through our wide range of expertise, impartiality and independence, we foster confidence between companies, public authorities and clients. Bureau Veritas is a Business to Business to Society company, contributing to transform the world we live in. Driven by society, we are working ever more closely with our clients, addressing today’s crucial challenges and answering society’s aspirations. Bureau Veritas is listed on the Euronext Paris (Compartment A, code ISIN FR 0006174348, stock symbol: BVI).

Rentokil Initial

cb rentokil-initial.com

Rentokil Initial plc employs c.68,500 people across 89 countries - offering the experience and expertise of a multi-national organisation, whilst delivering services with the agility and characteristics of a local business. As world leaders in Pest Control and Hygiene & Well-being services, we deliver services that protect people and enhance lives, to commercial and private customers worldwide. Rentokil Initial plc is listed on the London Stock Exchange (FTSE 100).

Veolia | Water Tech

veoliawatertechnologies.com

As the world leader in water technologies and services, Veolia relies on its 17,500 water technology experts to deliver innovative solutions that drive both performance and sustainability, without compromise. With over 4,400 technology patents and serving more than 14,000 customers worldwide, Veolia’s water technology activities generated 4.97 billion euros in revenue in 2024. These solutions are central to Veolia’s GreenUp strategic plan, accelerating the ecological transformation of cities and industries while safeguarding resources for the future

Grupo Tragsa

tragsa.es

Tragsa Group is a group of public companies, integrated in the State Industrial Ownership Corporation (SEPI), which has become a full service supplier and a reference company to Public Administrations. It is formed by four enterprises: Tragsa (1977) responsible for works and services' execution and Tragsatec (1989) which performs engineering works and technical assistance for every sections of the Group. By these companies, the Group is able to take part in every stage of any project, from its conception and design to its execution. 40 years of experience working for Public Administrations and at the service of society, have settle this business group at the front line of the various fields where it intervenes, from agricultural, forest, livestock and rural development services to environmental conservation and protection. Tragsa Group is represented in all the national territory, what makes it possible to give a quick and efficient response to any request that may be done from the central, autonomic and local administrations. Moreover, our collaboration in more than 120 projects of Spanish cooperation – in over 35 different countries of Northern Africa, Sub-Saharan Africa, Latin America and the Caribbean, Asia, Europe and the Middle East – has given the company international importance. In every field of activity, the differentiating factor of the Group stands in its proved experience, its capacity to give a fast-response and adapt its work to Administration’s needs, and its high I+D+I profile, what makes the group able to provide leading edge technology and the highest quality services

EQUANS

equans.com

Equans, a Bouygues group company, is a world leader in multi-technical services with offices in 20 country hubs. This brand expresses the desire to provide the right answer [ANS] to the equations [EQU] of our customers. We design and provide customised solutions to improve our customers’ buildings, technical equipment, systems and processes and to support them in optimising their use. With nearly 90,000 highly qualified employees and a strong geographic footprint through our historical local brands, we have excellent technical know-how in design, installation, maintenance and performance services, with a unique combination of skills as in HVAC, Cooling & Fire protection, Facility Management, Digital & ICT, Electrical, Mechanical & Robotics... Equans expertise and knowledge of our customers’ businesses now place us to support them in their transitions for modernisation and sustainable development.

Republic Services

republicservices.com

Republic Services provides the most complete set of recycling, waste and environmental solutions from a single-source provider. We partner with customers to help them achieve their sustainability goals, driving both environmental and economic sustainability. We offer advanced recycling; solid waste, special waste and hazardous waste treatment and disposal; field and industrial services; 24/7 emergency response; and equipment rental and cleaning. We use our expertise to find new opportunities to reduce waste and promote circularity. From our network of state-of-the-art recycling centers to converting gas generated by our landfills into renewable energy to helping companies set and meet their sustainability goals – our 42,000 employees provide sustainable solutions that deliver results. #SustainabilityinAction

WM

wm.com

WM is North America's leading provider of integrated environmental solutions. We partner with our customers and communities to manage and reduce waste from collection to disposal while recovering valuable resources and creating clean, renewable energy. We are on a quest for environmental performance, a mission to maximize resource value, while minimizing – and even eliminating – environmental impact so that both our economy and our environment can thrive. WM tailors its services to meet the needs of each customer group and to ensure consistent, superior service at the local level. Headquartered in Houston, the company serves nearly 20 million municipal, commercial, industrial, and residential customers through a network of 367 collection operations, 355 transfer stations, 273 active landfill disposal sites, 16 waste-to-energy plants, 104 recycling plants, and 111 beneficial-use landfill gas projects.

Loading…

NEWS

Mobile and Web Apps CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 09, 2025 02:12 PM

Appdome Named "AI-based CyberSecurity Solution of the Year"

2025 CyberSecurity Breakthrough Awards Recognize Appdome with one of the first six AI Information Security Awards LAS VEGAS, Oct. 9,...

Read Article

September 26, 2025 07:00 AM

Best Antivirus for iPhone in 2025: Top Free and Paid Options

iPhones, like any other internet-connected device that uses apps and stores sensitive data, are vulnerable to viruses.

Read Article

September 22, 2025 07:00 AM

46 Top Cybersecurity Companies to Know 2025

These companies block online threats, assess industry vulnerabilities and increase education and awareness about cybersecurity.

Read Article

September 18, 2025 07:00 AM

China Cybersecurity Companies

Antiy Labs is the first Chinese company awarded AV-TEST and whose AVL SDK for mobile is now protecting more than 1.7 billion smart devices.

Read Article

September 16, 2025 07:09 AM

Secure Enterprise Browser | Prisma Browser

Prisma® Browser secures both managed and unmanaged devices, addressing the evolving security demands of modern organizations and their hybrid workforces.

Read Article

September 07, 2025 07:00 AM

Top 8 Mobile Security Software for 2025

Discover the top 8 mobile security software for 2025, their features, benefits to choose the best solution for your mobile protection.

Read Article

August 04, 2025 07:00 AM

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

Cybersecurity researchers have discovered a nascent Android remote access trojan (RAT) called PlayPraetor that has infected more than 11,000...

Read Article

July 31, 2025 07:00 AM

Top 18 Kali Linux Tools for Ethical Hacking (2025)

Top Kali Linux Tools: 1. Nmap (Network Mapper) 2. Metasploit Framework 3. Wireshark 4. Aircrack-ng 5. Burp Suite 6. John the Ripper 7.

Read Article

July 31, 2025 07:00 AM

50 Must-Have Ethical Hacking Tools for Cybersecurity Experts

Ethical hacking tools are software and scripts that find security weaknesses in systems, networks, and applications. Cybersecurity...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…