What is the official website of Molson Coors Beverage Company ?

The official website of Molson Coors Beverage Company is http://www.molsoncoors.com.

What is Molson Coors Beverage Company's cybersecurity risk score?

Molson Coors Beverage Company has an AI-generated cybersecurity risk score of 752 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Molson Coors Beverage Company experienced?

According to Rankiteo, Molson Coors Beverage Company currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Molson Coors Beverage Company been affected by any supply chain cyber incidents ?

According to Rankiteo, Molson Coors Beverage Company has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Molson Coors Beverage Company have SOC 2 Type 1 certification ?

According to Rankiteo, Molson Coors Beverage Company is not certified under SOC 2 Type 1.

Does Molson Coors Beverage Company have SOC 2 Type 2 certification ?

According to Rankiteo, Molson Coors Beverage Company does not hold a SOC 2 Type 2 certification.

Does Molson Coors Beverage Company comply with GDPR ?

According to Rankiteo, Molson Coors Beverage Company is not listed as GDPR compliant.

Does Molson Coors Beverage Company have PCI DSS certification ?

According to Rankiteo, Molson Coors Beverage Company does not currently maintain PCI DSS compliance.

Does Molson Coors Beverage Company comply with HIPAA ?

According to Rankiteo, Molson Coors Beverage Company is not compliant with HIPAA regulations.

Does Molson Coors Beverage Company have ISO 27001 certification ?

According to Rankiteo,Molson Coors Beverage Company is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Molson Coors Beverage Company operate in ?

Molson Coors Beverage Company operates primarily in the Food and Beverage Services industry.

How many employees does Molson Coors Beverage Company have ?

Molson Coors Beverage Company employs approximately 12,071 people worldwide.

Does Molson Coors Beverage Company own any subsidiaries ?

Molson Coors Beverage Company presently has no subsidiaries across any sectors.

How many LinkedIn followers does Molson Coors Beverage Company have ?

Molson Coors Beverage Company's official LinkedIn profile has approximately 242,429 followers.

What is the NAICS classification code for Molson Coors Beverage Company ?

Molson Coors Beverage Company is classified under the NAICS code 722, which corresponds to Food Services and Drinking Places.

Does Molson Coors Beverage Company have a Crunchbase profile ?

No, Molson Coors Beverage Company does not have a profile on Crunchbase.

Does Molson Coors Beverage Company have a LinkedIn profile ?

Yes, Molson Coors Beverage Company maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/molson-coors.

How many cybersecurity incidents has Molson Coors Beverage Company experienced ?

As of August 2, 2026, Rankiteo reports that Molson Coors Beverage Company has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Molson Coors Beverage Company have ?

Molson Coors Beverage Company has an estimated 8,767 peer or competitor companies worldwide.

What types of cybersecurity incidents has Molson Coors Beverage Company faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

MCBC

Boost Score +25 with badge (5 left)

752

/1000

Fair

777

/1000

Fair

Molson Coors Beverage Company Vendor Cyber Rating & Cyber Score

molsoncoors.com

Add Your Compliance Badge

From Coors Light, Miller Lite, Molson Canadian, Carling and Staropramen to Coors Banquet, Blue Moon Belgian White, Leinenkugel’s Summer Shandy, Vizzy, Creemore Springs and more, our 16,000+ employees across the globe make and market many of the most beloved beverage brands in the world. While our history is rooted in beer, we offer a modern portfolio that expands beyond the beer aisle with energy drinks, non-alc beer and canned cocktails, ready-to-drink coffee and more. Molson Coors Beverage Company is a publicly traded company that operates through Molson Coors North America and Molson Coors Europe, and is traded on the New York and Canadian Stock Exchange (TAP). Our commitment to raising industry standards, promoting the responsible

MCBC A.I CyberSecurity Scoring

Scoring History

MCBC

Molson Coors Beverage Company CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Molson Coors Bevera...

Ransomware

3/2021

MOL15545322

Loading…

A.I.

MCBC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for MCBC

Incidents vs Food and Beverage Services Industry Avg (This Year)

No incidents recorded for Molson Coors Beverage Company in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Molson Coors Beverage Company in 2026.

Incident Types MCBC vs Food and Beverage Services Industry Avg (This Year)

No incidents recorded for Molson Coors Beverage Company in 2026.

Incident History - MCBC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Molson Coors Beverage Company Subsidiaries

MCBC

Food and Beverage Services

Website: http://www.molsoncoors.com

Company Size: 10,000+ employees

Apatinska pivaraFood & Beverages

Pivara TrebjesaFood and Beverage Services

Molson Coors BHFood and Beverage Services

Loading…

Molson Coors Beverage Company Similar Companies

Krispy Kreme

krispykreme.com

Headquartered in Charlotte, N.C., Krispy Kreme is one of the most beloved and well-known sweet treat brands in the world. Our iconic Original Glazed® doughnut is universally recognized for its hot-off-the-line, melt-in-your-mouth experience. Krispy Kreme operates in more than 40 countries through its unique network of fresh doughnut shops, partnerships with leading retailers, and a rapidly growing digital business. Our purpose of touching and enhancing lives through the joy that is Krispy Kreme guides how we operate every day and is reflected in the love we have for our people, our communities, and the planet.

PepsiCo

cb pepsico.com

PepsiCo is a playground for curious people. We invite thinkers, doers, and changemakers to champion innovation, take calculated risks, and challenge the status quo. From executives to team members on the front lines, we’re excited about the future. We take chances. Together, we dare to make the world a better place. Our associates are the magic ingredient. Each of them plays an integral role in helping create deep connections between people and our products. Think about your last group celebration: Chances are, one of our iconic brands was by your side. At PepsiCo, you’re invited to be a part of a global team of innovators who make, move, and sell these products—which are enjoyed by more than 1 billion people a day. A career at PepsiCo means working in a culture where everyone’s welcome. Here, you can dare to be yourself. No matter who you are or where you’re from, you can influence the people around you and the world at large. By showing up, you’ll have the opportunity to learn, develop and grow your skills for the future. Our supportive teams can fuel your professional goals to make a global impact on people and the planet. Join us. Dare for Better.

Dairy Queen

cb dairyqueen.com

Here at the DQ® system, we believe that HAPPY TASTES GOOD®. Our first location opened in Joliet, Illinois, 80 years ago. Since then we’ve grown to more than 7,000 DQ® locations in the U.S., Canada and 22 other countries. Our restaurants offer a variety of sweet treats and crave-worthy eats that hold a special place in the hearts and minds of fans of all ages, including our signature BLIZZARD® Treat. Guided by our vision to become the world’s favorite quick-service restaurant, we’re proud of the multinational company culture we’ve built while maintaining a small community feel. Our hardworking employees believe in our mission of creating positive memories for all who touch DQ. Headquartered in Minneapolis, Minnesota, with offices in Canada and Singapore, our corporate employees support our independent franchisees from our corporate offices and field locations around the world. Giving back Since 1984, the DQ system has raised more than $154 million to support Children’s Miracle Network Hospitals® in the U.S., and the Children’s Miracle Network Member Hospitals® in Canada. Every time fans and franchisees donate to these causes, every dollar stays in the community to support the local children’s hospital. Through our corporate giving initiative, DQ Cares, we provide employees time paid time off to volunteer in their communities. Careers If you believe in creating happy smiles, lasting memories and unforgettable moments, we want to hear from you. To learn more about DAIRY QUEEN® careers, visit dairyqueen.com/us-en/Company/Careers/. Franchise opportunities To become part of our sweet success and explore franchising opportunities, visit us at dairyqueenfranchising.com. Ownership The DQ brand, along with the ORANGE JULIUS® brand, is privately owned by Berkshire Hathaway Inc., a company owned by the legendary investor, Warren Buffet. Read our Social Media Community Guidelines: http://bit.ly/DQSocialCommunityGuidelines

Greene King

greeneking.co.uk

Greene King is the country’s leading pub company and brewer with c.2,600 pubs, restaurants and hotels across England, Wales and Scotland. At Greene King we are passionate about delivering our purpose to ‘pour happiness into lives’. That’s for our customers, our team, our pub partners, our suppliers and the communities in which we live, operate and serve. Founded in 1799 with offices in Bury St. Edmunds, Suffolk and Burton on Trent in Staffordshire we employ around 40,000 people across the group with three divisions: Greene King pubs, Destination Brands & Ventures, and Brewing & Brands. • Greene King pubs: Greene King pubs is our mainstream pub brand located where people and communities come together; pubs enjoyed in cities, towns and villages throughout the country with clear ambition to be “The Nation’s Most Loved Pub Brand”. Pub Partners runs our tenanted and leased pubs business and Hive Franchise pubs. • Destination Brands & Ventures: Destination Brands is a portfolio of distinct brands which includes Hungry Horse, Chef & Brewer, Farmhouse Inns and Flaming Grill that bring friends and family together, delivering great service, quality and value for money for a range of eating out and drinking occasions. Venture includes Hickory’s, Premium (Crafted Pubs & Metropolitan Pub Company) and Hotels which operate autonomously of Greene King’s managed pub brands. • Brewing & Brands covers the brewing sides of the business. Quality ales are brewed at the Westgate brewery in Bury St Edmunds and the Belhaven Brewery in Dunbar. Our industry-leading portfolio includes Greene King IPA, Old Speckled Hen, Abbot Ale, Ice Breaker and Belhaven Best and our premium beers, Level Head and Flint Eye, brewed for the modern-day drinker.

蒙牛

mengniu.com.cn

As China’s leading dairy manufacturer, Mengniu focuses on producing nutritional, healthy and tasty dairy products for customers worldwide. 20 years of experiences enabled Mengniu to develop a diversified product matrix, including liquid milk, ice-cream, infant formula, cheese and etc. The company has also successfully launched a series of star brands such as Milk Deluxe, Just Yoghurt, Champion, Real Fruits, Yoyi-C, Future Star, Shiny Meadow, Deluxe Ice-Cream and Bellamy’s. In additional to mainland China, Hong Kong and Macau, Mengniu products have also entered markets in more than ten countries and regions including Singapore, Mongolia, Myanmar, Cambodia, Indonesia, Malaysia, and Canada. In line with market potential and business strategy, Mengniu has established 42 production bases in China, Oceania and Southeast Asia, with an annual production capacity exceeding 10 million tons. Mengniu always attaches great importance to integrating global resources. In recent years, Mengniu has reached strategic cooperation with a number of internationally renowned companies, research institutions and universities. The wining partnerships propelled Mengniu to build a comprehensive end-to-end supply chain, connecting milk source, R&D, production and sales. Nowadays, 100% of Mengniu’s raw milk is collected from large-scale and intensive farms. Mengniu has established three international R&D centers with partners such as UC-Davis from the US, Danone from France and Arla from Denmark, enabling Mengniu to deliver better products to global consumers in the future. Mengniu actively participates in the cooperation and development of the global dairy industry. Mr. Lu Minfang, CEO of Mengniu, is a member of the board of directors of the International Dairy Federation (IDF) and the Global Dairy Platform (GDP), as well as a member of the International Business Council (World Economic Forum). Mengniu adheres to the mission of “Every drop of nutrition makes every life thrive” as we believ

Coca-Cola Beverages Africa

ccbagroup.com

CCBA is the eighth largest Coca-Cola authorised bottler in the world by revenue, and the largest on the continent. It accounts for over 40% of all Coca-Cola ready-to-drink beverages sold in Africa by volume. With over 14,000 employees in Africa, CCBA group services more than 800,000 customers with a host of international and local brands. CCBA group operates in 14 countries: South Africa, Kenya, Ethiopia, Uganda, Mozambique, Namibia, Tanzania, Botswana, Zambia, Eswatini, Lesotho, Malawi and the islands of Comoros and Mayotte. At CCBA, our vision is to refresh Africa and create shared value. We have an inclusive business culture that reflects our African identity.

Grupo Bimbo

grupobimbo.com

Grupo Bimbo es la empresa líder en panificación y un jugador relevante en snacks. Hornea +9,000 productos, distribuyéndolos a través de +3.5 millones de puntos de venta con +54,000 rutas. Grupo Bimbo tiene +153,000 colaboradores, +1,500 centros de ventas estratégicamente localizados en 35 países de América, Europa, Asia y África. 249 panaderías y plantas, distribuye, comercializa y elabora una variedad de productos, entre los que destacan el pan de caja, bollería, pan dulce, pastelitos, galletas, pan tostado, English muffins, bagels, tortillas y flatbread y botanas saladas, entre otros. Grupo Bimbo tiene +100 marcas, algunas de ellas son Bimbo, Marinela, Barcel, Milpa Real, Tía Rosa, Thomas, Takis, Sara Lee, Little Bites, Artesano, Saníssimo, Pullman, Ideal, Harvest Gold, The Rustik Bakery, Dempsters, POM, Supán, entre otros. Sus acciones cotizan en la Bolsa Mexicana de Valores (BMV) bajo la clave de pizarra BIMBO y en el mercado extrabursátil de Estados Unidos a través de un programa de ADR Nivel 1, bajo la clave de pizarra BMBOY.

Nestlé Nespresso SA

nespresso.com

Coffee is at the heart of everything we do, and consumer satisfaction is why we do it. Our story started with one simple idea: everyone should be able to make the perfect cup of coffee at home. Something we still believe today, which is why we think delivering the highest quality coffee, sip after sip, is so important. To achieve this, we continuously strive for innovation. Our coffee experts look for the world’s most exclusive coffees, and create new and exciting blends through a very strict coffee selection process. We create exceptional coffee experiences by continuously reinventing our coffee system, and the way coffee lovers can enjoy our coffee, transforming coffee culture on a global scale. We are committed to making a positive impact. We source our coffee from unique regions, working in partnership with over 110 000 farmers through our Nespresso AAA Sustainable Quality™ program around the world. We help them achieve high certification standards – for example in water management, biodiversity and fair worker treatment – through our long-term partners Rainforest Alliance and Fairtrade international. At Nespresso, we offer personalized services to our Club Members: from delivery and repair to customer care and recycling systems. We are in direct contact with coffee lovers through our e-commerce platform, boutiques and social media, allowing us to anticipate and cater to their every need. We also provide a full range of machines and coffees to meet the specific needs of the world’s most foremost hotels, restaurants and business customers. Our business Solutions enable your company to offer the perfect cup of coffee to your employees, clients and customers, every time. Nespresso is not just coffee. It’s a genuine experience that combines perfection and pleasure, simplicity and aesthetics. Learn more, visit http://www.nestle-nespresso.com/

PRAN-RFL Group

pranfoods.net

PRAN RFL Group, one of the most reputed conglomerates in Bangladesh, is in market since 1981. It started mainly with Foundry business and gradually diversified to Light Engineering, PVC Fittings, Plastics, Food and Beverage and Agro-Processing. It has it's marketing and selling network in 145 countries as of date.Group directly employs over 1,25,000 people and another 15,00,000 over people subsists on PRAN-RFL Group.

Loading…

NEWS

Molson Coors Beverage Company CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 08, 2026 08:00 AM

Molson Coors Beverage Company (TAP) Expects a Significant Dip in 2026 Profit

Molson Coors Beverage Company (NYSE:TAP) is among the 12 Best Alcohol Stocks to Buy Right Now. On February 19, 2026, Reuters reported that...

Read Article

February 18, 2026 08:00 AM

Molson Coors Beverage Company Reports 2025 Fourth Quarter and Full Year Results

GOLDEN, Colo. & MONTRÉAL, February 18, 2026--(BUSINESS WIRE)--Molson Coors Beverage Company ("MCBC," "Molson Coors" or "the Company") (NYSE:...

Read Article

February 04, 2026 08:00 AM

Molson Coors Beverage Company (TAP): A Bull Case Theory

We came across a bullish thesis on Molson Coors Beverage Company on Waterboy Stocks's Substack. In this article, we will summarize the...

Read Article

January 09, 2026 08:00 AM

Molson Coors Beverage Company Announces 2025 Fourth Quarter and Full Year Earnings Date and Participation at the 2026 Consumer Analyst Group of New York (CAGNY) Conference

GOLDEN, Colo. & MONTREAL, January 09, 2026--(BUSINESS WIRE)--Molson Coors Beverage Company (NYSE: TAP, TAP.A; TSX: TPX.B, TPX.

Read Article

December 09, 2025 08:00 AM

Wall Street Remains Cautious on Molson Coors Beverage Company (TAP)

Molson Coors Beverage Company (NYSE:TAP) is among the Top 15 Lowest P/E Ratios of the S&P 500 in 2025. On November 21, Piper Sandler lowered...

Read Article

November 20, 2025 08:00 AM

Molson Coors Beverage Company Announces Regular Quarterly Dividend

GOLDEN, Colo. & MONTREAL, November 20, 2025--(BUSINESS WIRE)--The Board of Directors of Molson Coors Beverage Company (NYSE: TAP, TAP.

Read Article

November 04, 2025 08:00 AM

Molson Coors Beverage Company Reports 2025 Third Quarter Results

GOLDEN, Colo. & MONTRÉAL, November 04, 2025--(BUSINESS WIRE)--Molson Coors Beverage Company ("MCBC," "Molson Coors" or "the Company") (NYSE:...

Read Article

October 28, 2025 07:00 AM

Molson Coors Beverage Company (TAP) Announces its Restructuring Plan

Molson Coors Beverage Company (NYSE:TAP) is one of the Best 52-Week Low Mid Cap Stocks to Buy Now. On October 20, Molson Coors Beverage...

Read Article

October 20, 2025 07:00 AM

Molson Coors Beverage Company Announces Corporate Restructuring of Americas Business Unit

CHICAGO, October 20, 2025--Molson Coors Beverage Company ("Molson Coors" or "the company") (NYSE: TAP, TAP.A) today announced a corporate...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…