What is the official website of PwC México ?

The official website of PwC México is http://www.pwc.com/mx/.

What is PwC México's cybersecurity risk score?

PwC México has an AI-generated cybersecurity risk score of 761 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has PwC México experienced?

According to Rankiteo, PwC México currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has PwC México been affected by any supply chain cyber incidents ?

According to Rankiteo, PwC México has been affected by a supply chain cyber incident involving NA, with the incident ID OFCK&LAONPROKIRSHEPWCMOV1781843490.

Does PwC México have SOC 2 Type 1 certification ?

According to Rankiteo, PwC México is not certified under SOC 2 Type 1.

Does PwC México have SOC 2 Type 2 certification ?

According to Rankiteo, PwC México does not hold a SOC 2 Type 2 certification.

Does PwC México comply with GDPR ?

According to Rankiteo, PwC México is not listed as GDPR compliant.

Does PwC México have PCI DSS certification ?

According to Rankiteo, PwC México does not currently maintain PCI DSS compliance.

Does PwC México comply with HIPAA ?

According to Rankiteo, PwC México is not compliant with HIPAA regulations.

Does PwC México have ISO 27001 certification ?

According to Rankiteo,PwC México is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does PwC México operate in ?

PwC México operates primarily in the Business Consulting and Services industry.

How many employees does PwC México have ?

PwC México employs approximately 1,885 people worldwide.

Does PwC México own any subsidiaries ?

PwC México presently has no subsidiaries across any sectors.

How many LinkedIn followers does PwC México have ?

PwC México's official LinkedIn profile has approximately 97,928 followers.

What is the NAICS classification code for PwC México ?

PwC México is classified under the NAICS code 5416, which corresponds to Management, Scientific, and Technical Consulting Services.

Does PwC México have a Crunchbase profile ?

No, PwC México does not have a profile on Crunchbase.

Does PwC México have a LinkedIn profile ?

Yes, PwC México maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/pwc-mexico.

How many cybersecurity incidents has PwC México experienced ?

As of August 2, 2026, Rankiteo reports that PwC México has experienced 1 cybersecurity incidents.

How many peer or competitor companies does PwC México have ?

PwC México has an estimated 19,638 peer or competitor companies worldwide.

What types of cybersecurity incidents has PwC México faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

PwC México

Boost Score +25 with badge (5 left)

761

/1000

Fair

786

/1000

Fair

PwC México Vendor Cyber Rating & Cyber Score

pwc.com

Add Your Compliance Badge

Generamos confianza en la sociedad y resolvemos problemas importantes. Contamos con un equipo de más de 4,000 profesionales en México y oficinas en diversos estados del país.

PwC México A.I CyberSecurity Scoring

Scoring History

PwC México

PwC México CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

PwC

Ransomware

100

7/2023

OFCK&LAONPROKIR...

Loading…

A.I.

PwC México Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for PwC México

Incidents vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for PwC México in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for PwC México in 2026.

Incident Types PwC México vs Business Consulting and Services Industry Avg (This Year)

No incidents recorded for PwC México in 2026.

Incident History - PwC México (X = Date, Y = Severity)

Loading…

SUBSIDIARY

PwC México Subsidiaries

PwC México

Business Consulting and Services

Website: http://www.pwc.com/mx/

Company Size: 1,001-5,000 employees

PwCProfessional Services

PwC IndiaBusiness Consulting and Services

PwC UKAccounting

PwC UK AlumniAccounting

Olivehorse ConsultingIT Services and IT Consulting

PwC BrasilBusiness Consulting and Services

PwC South AfricaBusiness Consulting and Services

PwC AustraliaBusiness Consulting and Services

Skills for AustraliaEducation Management

PwC ItalyProfessional Services

PwC CanadaBusiness Consulting and Services

PwC ArgentinaBusiness Consulting and Services

PwC EspañaBusiness Consulting and Services

PwC FranceBusiness Consulting and Services

PwC MalaysiaAccounting

PwC DeutschlandBusiness Consulting and Services

PwC KarriereUnternehmensberatung

PwC Alumni DeutschlandUnternehmensberatung

PwC SingaporeAccounting

PwC IrelandProfessional Services

PwC Ireland CareersProfessional Services

PwC LuxembourgFinancial Services

PwC SwitzerlandProfessional Services

PwC AngolaBusiness Consulting and Services

PwC South East Asia ConsultingBusiness Consulting and Services

PwC VietnamAccounting

PwC MaltaFinancial Services

PwC NorwayBusiness Consulting and Services

PwC Norway - Teknologi & MediaForretningsrådgivning og -tjenester

PwC InteraméricasIT Services and IT Consulting

PwC BelgiumAccounting

PwC SwedenBusiness Consulting and Services

PwC US TaxAccounting

PwC DanmarkAccounting

PwC US Cyber, Risk and RegulatoryBusiness Consulting and Services

PwC AustriaFinancial Services

PwC CyprusAccounting

PwC ClimateProfessional Services

PwC BermudaProfessional Services

PwC Central and Eastern EuropeAccounting

PwC PolskaBusiness Consulting and Services

PwC Legal PolskaUsługi prawne

PwC PodatkiKonsulting biznesowy i usługi

Akademia PwCSzkolenia zawodowe i coaching

Startup ColliderKonsulting biznesowy i usługi

PwC RomaniaAccounting

PwC HungaryAccounting

PwC Czech RepublicBusiness Consulting and Services

PwC Albania and KosovoAccounting

PwC AzerbaijanFinancial Services

PwC CroatiaAccounting

PwC BulgariaBusiness Consulting and Services

PwC UkraineBusiness Consulting and Services

PwC SerbiaAccounting

PwC Serbia - PwC's AcademyEducation Administration Programs

PwC People & Organisation - SerbiaHuman Resources Services

PwC Serbia - Tax ServicesAccounting

PwC KazakhstanBusiness Consulting and Services

PwC Kazakhstan Tax and LegalBusiness Consulting and Services

PwC LatvijaAccounting

PwC's Academy LatvijaEducation

PwC GeorgiaBusiness Consulting and Services

PwC LithuaniaFinancial Services

PwC UzbekistanFinancial Services

PwC Bosnia and HerzegovinaAccounting

PwC EstoniaBusiness Consulting and Services

PwC ArmeniaAccounting

PwC MongoliaAccounting

PwC US Cloud and DigitalBusiness Consulting and Services

PwC SlovakiaBusiness Consulting and Services

Life at PwC SlovakiaProfessional Services

資誠 (PwC Taiwan)Business Consulting and Services

PwC US DealsBusiness Consulting and Services

PwC RussiaFinancial Services

PwC North MacedoniaAccounting

PwC SloveniaAccounting

PwC US ConsultingProfessional Services

PwC US AssuranceProfessional Services

PwC JapanBusiness Consulting and Services

Loading…

PwC México Similar Companies

Bain & Company

bain.com

Bain & Company is a global consultancy that helps the world’s most ambitious change makers define the future. Across 65 cities in 40 countries, we work alongside our clients as one team with a shared ambition to achieve extraordinary results, outperform the competition, and redefine industries. We complement our tailored, integrated expertise with a vibrant ecosystem of digital innovators to deliver better, faster, and more enduring outcomes. Our 10-year commitment to invest more than $1 billion in pro bono services brings our talent, expertise, and insight to organizations tackling today’s urgent challenges in education, racial equity, social justice, economic development, and the environment. We earned a platinum rating from EcoVadis, the leading platform for environmental, social, and ethical performance ratings for global supply chains, putting us in the top 1% of all companies. Since our founding in 1973, we have measured our success by the success of our clients, and we proudly maintain the highest level of client

Deloitte

deloitte.com

Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more. The content on this page contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively the “Deloitte Network”) is, by means of this publication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No entity in the Deloitte Network shall be responsible for any loss whatsoever sustained by any person who relies on content from this page.

Applus+

cb applus.com

Applus+ is a worldwide leader in the testing, inspection, and certification sector. We are a trusted partner, enhancing the quality and safety of our clients’ assets and infrastructures while safeguarding their operations and improving their environmental performance. Our innovative approach, technical capabilities and highly-skilled and motivated workforce of over 25,000 employees assure operational excellence across multiple sectors in more than 65 countries. We offer a complete portfolio of solutions that address a range of needs, from asset integrity management to statutory compliance-based inspections. We place a strong emphasis on technological development, digitalisation and innovation, as well as having the latest knowledge of regulatory requirements.

Advantage Solutions

yourADV.com

At Advantage Solutions, we're the unseen architects behind your everyday purchases. From pantry staples to your online shopping carts, we ensure your favorite goods are always in stock and within reach by connecting manufacturers to the right retailers and teaming up with retailers to figure out the best ways to get those products into your hands. We specialize in elevating brand presence, enhancing retail strategies, and creating memorable brand experiences. Our purpose is to connect people with products and experiences that enrich their lives. How do we do that? Through our mission: to generate demand for consumer brands and retailers, converting shoppers into buyers in every way they shop, and our values: Put People First, Serve with Heart, Lead with Insights, Execute Relentlessly and Win Together. Check us out at advantagesolutions.net.

KPMG UK

kpmg.com

Make growth happen. Make it trusted. Make bold moves. Make the future. KPMG makes the difference for our clients, people and communities. Make growth happen. Make it trusted. Make bold moves. Make the future. At KPMG, we’ve been making the difference for our clients, people and communities for over 150 years. We’re a leading UK provider of advisory, audit and tax services. Our clients have trusted us to make the difference for over 150 years. We work with them to overcome their biggest challenges and find new opportunities with our unique insights, fresh thinking and cutting-edge tech. KPMG. Make the Difference

Publicis Sapient

publicissapient.com

Publicis Sapient is a technology company that provides enterprise AI platforms and services. With over 30 years of digital business transformation experience, we enable enterprise clients to transform how they operate and serve their customers, unlocking new value and enabling them to thrive in an AI-driven world. Our platforms use AI  built off this deep enterprise context to help them modernize, build agentic solutions, and sustain their competitive advantage. The combination of our AI platforms and the expertise of our people enables us to deliver faster and more effective outcomes through solutions that are specific to the unique needs of our clients’ businesses, their industries and their customers.   Publicis Sapient is the technology hub of Publicis Groupe, uniting 20,000 people worldwide across 28 countries. For more information, visit publicissapient.com.

Acosta Group

acosta.group

Acosta Group fuses storied expertise, unmatched connectivity and advanced insight to accelerate brand growth – everywhere you sell. Our collective of the most trusted retail, marketing and foodservice agencies is reimagining how people connect with brands at every point in the consumer journey. Comprised of Acosta, ActionLink, CORE Foodservice, CROSSMARK, Mosaic, Premium Retail Services and Product Connections, Acosta Group understands and anticipates evolving consumer needs, fueling accelerated performance to connect tomorrow's commerce today. The collective delivers end-to-end solutions, including headquarter sales services, omnichannel retail solutions, assisted sales and training, integrated marketing, foodservice sales enablement and culinary solutions, and the most advanced data and insights. ------ Le groupe Acosta Group rassemble une expertise reconnue, une connectivité inégalée et des connaissances fines pour accélérer la croissance des marques - partout où vous êtes commercialisé. Notre collectif des agences de vente au détail, de marketing et de restauration les plus fiables réinvente la façon dont les gens se connectent aux marques à chaque étape du parcours du consommateur. Composé d'Acosta, d'ActionLink, de CORE Foodservice, de CROSSMARK, de Mosaic, de Premium Retail Services et de Product Connections, le groupe Acosta Group comprend et anticipe les besoins en constante évolution des consommateurs, stimulant ainsi les performances accélérées pour connecter le commerce de demain dès aujourd'hui. Le collectif offre des solutions holistiques, y compris des services de vente externalisée, des solutions omnicanales de vente au détail, des ventes assistées et de la formation, du marketing intégré, des solutions de vente pour la restauration et la cuisine, ainsi que les données et les connaissances les plus avancées, et l’expertise nécessaire pour extraire la valeur de tous ces outils.

Ayesa

ayesa.com

Ayesa is a global provider of technology and engineering services with more than 11500 employees in twenty-three countries across Europe, Latin America, Africa and Asia. The company develops and implements digital solutions for the private and public sector and uses the latest technology to provide cutting-edge infrastructure design and supervision services. To do this, it has certified experts covering more than 70 different disciplines in utilities and energy; the public sector; banking and insurance; water and the environment, transportation; aeronautics and defence; and construction. As a company that is driven by people and innovation, its business approach is underpinned by talent.

Xerox

xerox.com

Xerox has been redefining the workplace experience for over a century. As a services-led, software-enabled company, we power today’s hybrid workplace through advanced print, digital, and AI-driven technologies. In 2025, Xerox acquired Lexmark—expanding our global footprint, strengthening service capabilities, and equipping us to deliver an even broader portfolio of workplace technologies to our clients. Today, we continue our legacy of innovation to deliver client-centric, digitally driven solutions that meet the needs of a global, distributed workforce. Whether in offices, classrooms, or hospitals, we help our clients thrive in a constantly evolving business landscape.

Loading…

NEWS

PwC México CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 14, 2025 08:00 AM

AI emerges as the top cybersecurity investment priority for companies in a shifting risk landscape, as only 6% are ‘very capable’ to withstand cyber-attacks across all vulnerabilities surveyed

AI tops the agenda for cybersecurity and business leaders when it comes to cyber budget allocations, addressing cyber talent shortages,...

Read Article

November 06, 2025 08:00 AM

Cyber Threats Surge as Talent Gaps Deepen in Mexico

A 260% projected surge in attacks against Mexico's federal institutions exposes human error and insider risks as the weakest link.

Read Article

November 05, 2025 08:00 AM

Cyber Gaps Cost Mexico Firms Millions Despite Rising Budgets

Despite higher cybersecurity budgets, Mexican firms face costly breaches and governance gaps, reveals PwC's Digital Trust Insights 2026...

Read Article

November 03, 2025 08:00 AM

2026 Cybersecurity Outlook

In 2025, critical infrastructure organizations around the world have faced a wave of cyber threats driven by espionage- or...

Read Article

October 24, 2025 01:15 AM

The emerging cybersecurity risks facing Canada’s public sector

How government and public-sector leaders can use cybersecurity to increase resilience and create new value for citizens.

Read Article

October 17, 2025 02:01 PM

Five cyber security issues that private businesses should address now

As the owner of a private business, what's your immediate reaction when the subject of cyber security comes up? Recent research indicates you may well feel...

Read Article

October 09, 2025 07:00 AM

PwC rated as a leader in cybersecurity consulting services in Europe by independent research firm

PwC announced that it was cited as a Leader in The Forrester Wave™: Cybersecurity Consulting Services in Europe, Q4 2025.

Read Article

October 08, 2025 07:00 AM

2026 Global Digital Trust Insights | C-suite playbook and findings

Cybersecurity is entering uncharted waters. A rapidly shifting world order and threat environment ― powered by recent, exponential leaps in...

Read Article

October 01, 2025 07:00 AM

New world, new rules: Cybersecurity in an era of uncertainty - The C-suite playbook

Cybersecurity is entering uncharted waters. A rapidly shifting world order and threat environment ― powered by recent, exponential leaps in...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…