What is the official website of Pinewood Springs Mental Health & Wellness ?

The official website of Pinewood Springs Mental Health & Wellness is https://pinewoodsprings.com/.

What is Pinewood Springs Mental Health & Wellness's cybersecurity risk score?

Pinewood Springs Mental Health & Wellness has an AI-generated cybersecurity risk score of 761 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Pinewood Springs Mental Health & Wellness experienced?

According to Rankiteo, Pinewood Springs Mental Health & Wellness currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Pinewood Springs Mental Health & Wellness been affected by any supply chain cyber incidents ?

According to Rankiteo, Pinewood Springs Mental Health & Wellness has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Pinewood Springs Mental Health & Wellness have SOC 2 Type 1 certification ?

According to Rankiteo, Pinewood Springs Mental Health & Wellness is not certified under SOC 2 Type 1.

Does Pinewood Springs Mental Health & Wellness have SOC 2 Type 2 certification ?

According to Rankiteo, Pinewood Springs Mental Health & Wellness does not hold a SOC 2 Type 2 certification.

Does Pinewood Springs Mental Health & Wellness comply with GDPR ?

According to Rankiteo, Pinewood Springs Mental Health & Wellness is not listed as GDPR compliant.

Does Pinewood Springs Mental Health & Wellness have PCI DSS certification ?

According to Rankiteo, Pinewood Springs Mental Health & Wellness does not currently maintain PCI DSS compliance.

Does Pinewood Springs Mental Health & Wellness comply with HIPAA ?

According to Rankiteo, Pinewood Springs Mental Health & Wellness is not compliant with HIPAA regulations.

Does Pinewood Springs Mental Health & Wellness have ISO 27001 certification ?

According to Rankiteo,Pinewood Springs Mental Health & Wellness is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Pinewood Springs Mental Health & Wellness operate in ?

Pinewood Springs Mental Health & Wellness operates primarily in the Hospitals and Health Care industry.

How many employees does Pinewood Springs Mental Health & Wellness have ?

Pinewood Springs Mental Health & Wellness employs approximately 42 people worldwide.

Does Pinewood Springs Mental Health & Wellness own any subsidiaries ?

Pinewood Springs Mental Health & Wellness presently has no subsidiaries across any sectors.

How many LinkedIn followers does Pinewood Springs Mental Health & Wellness have ?

Pinewood Springs Mental Health & Wellness's official LinkedIn profile has approximately 498 followers.

What is the NAICS classification code for Pinewood Springs Mental Health & Wellness ?

Pinewood Springs Mental Health & Wellness is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does Pinewood Springs Mental Health & Wellness have a Crunchbase profile ?

No, Pinewood Springs Mental Health & Wellness does not have a profile on Crunchbase.

Does Pinewood Springs Mental Health & Wellness have a LinkedIn profile ?

Yes, Pinewood Springs Mental Health & Wellness maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/pinewood-springs.

How many cybersecurity incidents has Pinewood Springs Mental Health & Wellness experienced ?

As of August 3, 2026, Rankiteo reports that Pinewood Springs Mental Health & Wellness has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Pinewood Springs Mental Health & Wellness have ?

Pinewood Springs Mental Health & Wellness has an estimated 33,475 peer or competitor companies worldwide.

What types of cybersecurity incidents has Pinewood Springs Mental Health & Wellness faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

PSMHW

Boost Score +25 with badge (5 left)

761

/1000

Fair

786

/1000

Fair

Pinewood Springs Mental Health & Wellness Vendor Cyber Rating & Cyber Score

pinewoodsprings.com

Add Your Compliance Badge

TriStar Health and Maury Regional are proud to partner in the development of a new mental health hospital in Columbia, TN. Pinewood Springs Mental Health and Wellness is dedicated to the mental health needs of adolescent patients beginning at age 12 and adult patients up to age 65 across Middle Tennessee. We offer a broad range of inpatient services to treat patients with mood, thought and co-occuring disorders within a supportive and therapeutic environment. HCA Healthcare has been continually named a World's Most Ethical Company by Ethisphere since 2010. In 2019, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.

PSMHW A.I CyberSecurity Scoring

Scoring History

PSMHW

Pinewood Springs Mental Health & Wellness CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Pinewood Springs Me...

Ransomware

100

10/2023

ALA6595124

Pinewood Springs Me...

Cyber Attack

7/2023

HCA433404309252...

Pinewood Springs Me...

Breach

6/2023

HCA529295210302...

Loading…

A.I.

PSMHW Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for PSMHW

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Pinewood Springs Mental Health & Wellness in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Pinewood Springs Mental Health & Wellness in 2026.

Incident Types PSMHW vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Pinewood Springs Mental Health & Wellness in 2026.

Incident History - PSMHW (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Pinewood Springs Mental Health & Wellness Subsidiaries

PSMHW

Hospitals and Health Care

Website: https://pinewoodsprings.com/

Company Size: 42

HCA HealthcareHospitals and Health Care

HCA Healthcare Physician ServicesHospitals and Health Care

ParallonHospitals and Health Care

Medical City HealthcareHospitals and Health Care

Medical City ArlingtonHospitals and Health Care

Medical City DentonHospitals and Health Care

Medical City Las ColinasHospitals and Health Care

Medical City McKinneyHospitals and Health Care

HealthTrust Performance GroupHospitals and Health Care

HealthTrust Physician AdvisorsHospitals and Health Care

HCA Houston HealthcareHospitals and Health Care

HCA Houston Healthcare KingwoodHospitals and Health Care

Texas Orthopedic HospitalHospitals and Health Care

Mission HealthHospitals and Health Care

HCA Healthcare | TriStar DivisionHospitals and Health Care

Memorial HealthHospitals and Health Care

Research Medical CenterHospitals and Health Care

Research Medical Center - ServicesHealth, Wellness & Fitness

Trident Medical CenterHospitals and Health Care

Sarah Cannon Cancer NetworkHospitals and Health Care

MountainView HospitalHospitals and Health Care

HCA Florida Capital HospitalHospitals and Health Care

Methodist Healthcare SystemHospitals and Health Care

Overland Park Regional Medical CenterHospitals and Health Care

Grand Strand Medical Center – HCAHospitals and Health Care

HCA Far West DivisionHospitals and Health Care

West Hills Hospital & Medical CenterMedical Practices

Sunrise Children’s HospitalHospitals and Health Care

Good Samaritan Hospital - San Jose, CAHospitals and Health Care

HCA Florida Osceola HospitalHospitals and Health Care

HCA Florida West HospitalHospitals and Health Care

HCA Central/West TexasHospitals and Health Care

Reston HospitalHospitals and Health Care

HCA Florida Memorial HospitalHospitals and Health Care

HCA Florida Fawcett HospitalHospitals and Health Care

Eastern Idaho Regional Medical CenterHospitals and Health Care

HCA Healthcare Physician RecruitmentHospitals and Health Care

HCA Florida Fort Walton-Destin HospitalHospitals and Health Care

TriStar Summit Medical CenterHospitals and Health Care

CJW Medical CenterHospitals and Health Care

HCA Florida JFK HospitalHospitals and Health Care

Alaska Regional HospitalHospitals and Health Care

HCA Florida Aventura HospitalHospitals and Health Care

HCA Healthcare | South Atlantic DivisionHospitals and Health Care

HCA Florida Oak Hill HospitalHospitals and Health Care

HCA Florida Lake Monroe HospitalHospitals and Health Care

HCA Florida Trinity HospitalHospitals and Health Care

HCA Florida Gulf Coast HospitalHospitals and Health Care

HCA Florida Sarasota Doctors HospitalHospitals and Health Care

Tulane Medical CenterHospitals and Health Care

West Valley Medical CenterHospitals and Health Care

Ogden Regional Medical CenterHospitals and Health Care

HCA Florida Westside HospitalHospitals and Health Care

Las Palmas Medical CenterHospitals and Health Care

Lakeview HospitalHospitals and Health Care

HCA Florida Bayonet Point HospitalHospitals and Health Care

Integrated Regional LaboratoriesHospitals and Health Care

HCA Florida Palms West HospitalHospitals and Health Care

TriStar Southern Hills Medical CenterHospitals and Health Care

Del Sol Medical CenterHospitals and Health Care

HCA Florida Woodmont HospitalHospitals and Health Care

HCA Florida University HospitalHospitals and Health Care

Timpanogos Regional HospitalHospitals and Health Care

HCA Florida St. Petersburg HospitalHospitals and Health Care

TriStar Hendersonville Medical CenterHospitals and Health Care

HCA Florida Lawnwood HospitalHospitals and Health Care

HCA Florida South Shore HospitalHospitals and Health Care

Oviedo Medical CenterHospitals and Health Care

Dominion HospitalHospitals and Health Care

HCA Florida Englewood HospitalHospitals and Health Care

HCA Florida Pasadena HospitalHospitals and Health Care

HCA Florida St. Lucie HospitalHospitals and Health Care

Fairview Park HospitalHospitals and Health Care

TriStar Horizon Medical CenterHospitals and Health Care

HCA Florida Raulerson HospitalHospitals and Health Care

Colleton Medical CenterHospitals and Health Care

HCA Florida Poinciana HospitalHospitals and Health Care

Lee's Summit Medical CenterHospitals and Health Care

Parkridge East HospitalHospitals and Health Care

Parkridge Medical CenterHospitals and Health Care

HCA Florida Highlands HospitalHospitals and Health Care

Brigham City Community HospitalHospitals and Health Care

HCA Florida West Tampa HospitalHospitals and Health Care

Parkridge ValleyHospitals and Health Care

HCA Florida Putnam HospitalHospitals and Health Care

Lafayette Regional Health CenterHospitals and Health Care

Loading…

Pinewood Springs Mental Health & Wellness Similar Companies

UCSF Health

ucsfhealth.org

UCSF Health is an integrated health care network encompassing several entities, including UCSF Medical Center, one of the nation’s top 10 hospitals according to U.S. News & World Report, and UCSF Benioff Children’s Hospitals, with campuses in Oakland and San Francisco. We are recognized throughout the world for our innovative patient care, advanced technology and pioneering research. For more than a century, we have offered the highest quality medical treatment. Today, our expertise covers virtually all specialties, from cancer to women's health. In addition, the compassionate care provided by our doctors, nurses and other staff is a key to our success. Our services generate about 1.1 million patient visits to our clinics a year and $3.2 billion in annual revenue. We have 12,000 employees and dozens of locations throughout San Francisco as well as outreach clinics throughout Northern California and beyond.

Trinity Health

trinity-health.org

Trinity Health is one of the largest not-for-profit, Catholic health care systems in the nation. It is a family of 123,000 colleagues and nearly 27,000 physicians and clinicians caring for diverse communities across 26 states. Nationally recognized for care and experience, the Trinity Health system includes 88 hospitals, 135 continuing care locations, the second largest PACE program in the country, 136 urgent care locations and many other health and well-being services. Based in Livonia, Michigan, its annual operating revenue is $21.5 billion with $1.4 billion returned to its communities in the form of charity care and other community benefit programs.

Boston Children's Hospital

childrenshospital.org

Boston Children's Hospital is a 404-bed comprehensive center for pediatric health care. As one of the largest pediatric medical centers in the United States, Boston Children's offers a complete range of health care services for children from birth through 21 years of age. (Our services can begin interventions at 15 weeks gestation and in some situations we also treat adults.) We have approximately 25,000 inpatient admissions each year and our 200+ specialized clinical programs schedule 557,000 visits annually. Last year, the hospital performed more than 26,500 surgical procedures and 214,000 radiological examinations. Our team of physicians and nurses has been recognized by a number of independent organizations for overall excellence, and we're proud to share some notable examples with you here.

Boston Medical Center (BMC)

bmc.org

Boston Medical Center (BMC) is a 511-bed, equity-led academic medical center and a proud member of the Boston Medical Center Health System. BMC delivers a model of healthcare where innovative and equitable care empowers all patients to thrive. As a premier academic medical center in Boston, a national leader in clinical care, and the largest essential hospital in New England, BMC’s world-class clinicians provide comprehensive care in more than 70 specialties and subspecialties. BMC understands that health equity is foundational to community wellbeing, and it requires transformative thinking, rewriting policies that have historically underserved communities, creating access to cutting-edge care for all, and co-creating programs with community partners that serve as national models for improving patient outcomes and experiences. We are invested in going above and beyond what is traditionally considered medicine to meet the needs of our communities and address disparities in clinical care and beyond. By pioneering cutting-edge research and advancing scientific discovery, we are fostering a culture of innovation where novel treatments and therapies are not only effective but also accessible. Boston Medical Center Health System is an integrated academic healthcare system that models a new kind of excellence in healthcare where clinical and operational innovation meets health equity and access. With more than 15,000 dedicated employees, BMC Health System is committed to advancing scientific discovery and access to care, partnering with our communities, and developing scalable approaches to restore and maintain health. Visit jobs.bmc.org for career opportunities.

Rush University Medical Center

rush.edu

Rush University Medical Center is an academic medical center that includes a 671-bed hospital serving adults and children, the 61-bed Johnston R. Bowman Health Center and Rush University. Rush University is home to one of the first medical colleges in the Midwest and one of the nation's top-ranked nursing colleges, as well as graduate programs in allied health, health systems management and biomedical research. The medical center also offers more than 70 highly selective residency and fellowship programs in medical and surgical specialties and subspecialties. For more than 170 years, Rush has been leading the way in developing innovative and often life-saving treatments. Today, Rush is a thriving center for basic and clinical research, with physicians and scientists involved in hundreds of research projects developing and testing the effectiveness and safety of new therapies and medical devices. In addition to its mission in patient care, education and research, Rush maintains a strong commitment to the community. Rush reaches out to the Chicago community through such offerings as the Rush Community Services Initiatives Program, an umbrella for several student-led outreach programs designed to address the social and health care needs of residents in neighboring communities.

Hartford HealthCare

cb hartfordhealthcare.org

With 44,000 dedicated colleagues and a bold vision for the future, Hartford HealthCare is transforming healthcare across Connecticut and beyond—enhancing access, affordability, health equity, and excellence. Spanning 500 locations across 185 towns and cities, our comprehensive care-delivery system is built to serve every community, every day. From world-class hospitals—including two tertiary-level teaching hospitals, an acute-care community teaching hospital, an acute-care hospital and trauma center, and three community hospitals—to an expansive network of behavioral health services, multispecialty physician groups, urgent and virtual care, surgery centers, home care, senior care, rehabilitation, and mobile neighborhood health programs, Hartford HealthCare is there when and where it matters most. We touch the lives of nearly 28,000 people every single day, delivering unparalleled care through our unique Institute Model—bringing together leading experts in neuroscience, cancer, digestive health, heart and vascular care, orthopedics, and urology & kidney health to provide a unified, high standard of care at the most affordable cost. Recognized nationally for patient safety and clinical excellence, Hartford HealthCare boasts Leapfrog A-ratings across all our hospitals—making us one of the safest healthcare systems in the country.

International SOS

cb internationalsos.com

The International SOS Group of Companies has been in the business of saving lives for over 40 years. Protecting global workforces from health and security threats, we deliver customised health, security risk management and wellbeing solutions to fuel our clients’ growth and productivity. In the event of extreme weather, an epidemic or a security incident, we provide an immediate response providing peace of mind. Our innovative technology and medical expertise with a focus on prevention, offers real-time, actionable insights and unparalleled on-the-ground delivery. We help clients meet compliance reporting needs for good governance. By partnering with us organisations can fulfil their Duty of Care responsibilities, while empowering business resilience, continuity and sustainability. Founded in 1985, the International SOS Group, headquartered in London & Singapore, is trusted by 9,000 organisations, including the majority of the Fortune Global 500 as well as mid-size enterprises, governments, educational institutions, and NGOs. 12,000 multi-cultural medical, security and logistics experts stand with you to provide support & assistance from over 1,200 locations in 90 countries, 24/7, 365 days. To protect your workforce, we are at your fingertips: www.internationalsos.com For news and events updates follow us on Twitter - https://twitter.com/IntlSOS

Fairview Health Services

fairview.org

Fairview Health Services is Minnesota’s choice for healthcare. We’re an industry-leading, award-winning, nonprofit offering a full network of healthcare services. Our broad network is designed to be ready for our patients’ every need, while delivering quality care with compassion. Our care portfolio includes community hospitals, academic hospitals, primary and specialty care clinics, senior facilities, facilitated living centers, rehabilitation centers, home health care services, counseling, pharmacies and benefit management services. We’re built on a tradition of compassionate care. This is our home, and our patients are our neighbors. We’re here to heal, we’re here for you. We are part of M Health Fairview, an expanded academic health system that represents a collaboration among the University of Minnesota, University of Minnesota Physicians, and Fairview Health Services. The partnership combines the university’s deep history of clinical innovation and training with Fairview’s extensive roots in community medicine. Together, we’re expanding access to world-class, patient-centered care through our 10 hospitals, 60 primary care clinics, specialty clinics, pharmacies, home care, hospice, and medical transportation service. Fairview also operates the Ebenezer senior living communities and offers Employer Solutions such as EAP and pharmacy benefit management. Search for jobs and apply at https://www.fairview.org/careers.

Lifespan

brownhealth.org

Formed in 1994, Brown University Health (Formerly Lifespan) is a not-for-profit health system based in Providence, RI comprising three teaching hospitals of The Warren Alpert Medical School of Brown University: Rhode Island Hospital and its Hasbro Children's; The Miriam Hospital; and Bradley Hospital, the nation’s first psychiatric hospital for children; Newport Hospital, Saint Anne's Hospital and Morton Hospital, community hospitals offering a broad range of health services; Gateway Healthcare, the state’s largest provider of community behavioral health care; and Brown Health Medical Group, the largest multi-specialty practice in Rhode Island. Brown University Health teaching hospitals are among the country’s top recipients of research funding from the US National Institutes of Health. The hospitals received $145 million in external research funding in fiscal 2023. All Brown University Health hospitals are charitable organizations that depend on support from the community to provide programs and services.

Loading…

NEWS

Pinewood Springs Mental Health & Wellness CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 12, 2025 07:00 AM

Pinewood Springs Deaths Ruled Murder-Suicide

LCSO confirms Pinewood Springs deaths as murder-suicide; investigators say there is no threat to the community.

Read Article

September 12, 2025 07:00 AM

Recovery Effort Underway for Missing Kayaker at Carter Lake

Recovery underway at Carter Lake; south end closed as crews search for missing kayaker after Sept. 11 distress call.

Read Article

September 05, 2025 07:00 AM

Recovery Fest Hickman event plans support, inspiration, fun at Hideaway Farm Sept. 27

With more communities experiencing the devastating impact of addiction, there are those who have found hope and freedom in a new way of life...

Read Article

July 29, 2025 07:00 AM

U.S. News ranks top Nashville-area hospitals. See which made the list

Which Nashville hospitals rank among the best in U.S. News & World Report rankings released July 29?

Read Article

December 16, 2024 08:00 AM

Helicopters Rescued Patients in ‘Apocalyptic’ Flood. Other Hospitals Are at Risk, Too.

The helicopter evacuation of 70 people from a Tennessee hospital during Hurricane Helene is considered a success story.

Read Article

December 20, 2022 08:00 AM

Bennet Secures Over $116 Million to Support 81 Colorado Projects Across Colorado

Washington, D.C. — Today, Colorado U.S. Senator Michael Bennet announced that he secured over $116 million for 81 Colorado projects in the...

Read Article

December 15, 2022 08:00 AM

Structure fire in the Town of Lyons

A structure fire in the 400 block of Main Street in the Town of Lyons. The building houses several businesses and offices. Smoke and flames were visible upon...

Read Article

May 16, 2022 07:00 AM

Maury juvenile petitions almost double, leading to need for new staff position

A spike in juvenile petitions in Maury County Juvenile Court has led to the need for a new full-time employee.

Read Article

February 25, 2022 08:00 AM

New CEO joins Maury Regional Health

Davin Turner is now leading Maury Regional Health as the organization's next chief executive officer. He began his role Thursday.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…