What is the official website of Robert Bosch Tool Corporation NA ?

The official website of Robert Bosch Tool Corporation NA is http://www.boschtools.com.

What is Robert Bosch Tool Corporation NA's cybersecurity risk score?

Robert Bosch Tool Corporation NA has an AI-generated cybersecurity risk score of 770 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Robert Bosch Tool Corporation NA experienced?

According to Rankiteo, Robert Bosch Tool Corporation NA currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Robert Bosch Tool Corporation NA been affected by any supply chain cyber incidents ?

According to Rankiteo, Robert Bosch Tool Corporation NA has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Robert Bosch Tool Corporation NA have SOC 2 Type 1 certification ?

According to Rankiteo, Robert Bosch Tool Corporation NA is not certified under SOC 2 Type 1.

Does Robert Bosch Tool Corporation NA have SOC 2 Type 2 certification ?

According to Rankiteo, Robert Bosch Tool Corporation NA does not hold a SOC 2 Type 2 certification.

Does Robert Bosch Tool Corporation NA comply with GDPR ?

According to Rankiteo, Robert Bosch Tool Corporation NA is not listed as GDPR compliant.

Does Robert Bosch Tool Corporation NA have PCI DSS certification ?

According to Rankiteo, Robert Bosch Tool Corporation NA does not currently maintain PCI DSS compliance.

Does Robert Bosch Tool Corporation NA comply with HIPAA ?

According to Rankiteo, Robert Bosch Tool Corporation NA is not compliant with HIPAA regulations.

Does Robert Bosch Tool Corporation NA have ISO 27001 certification ?

According to Rankiteo,Robert Bosch Tool Corporation NA is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Robert Bosch Tool Corporation NA operate in ?

Robert Bosch Tool Corporation NA operates primarily in the Manufacturing industry.

How many employees does Robert Bosch Tool Corporation NA have ?

Robert Bosch Tool Corporation NA employs approximately 2,515 people worldwide.

Does Robert Bosch Tool Corporation NA own any subsidiaries ?

Robert Bosch Tool Corporation NA presently has no subsidiaries across any sectors.

How many LinkedIn followers does Robert Bosch Tool Corporation NA have ?

Robert Bosch Tool Corporation NA's official LinkedIn profile has approximately 49,651 followers.

What is the NAICS classification code for Robert Bosch Tool Corporation NA ?

Robert Bosch Tool Corporation NA is classified under the NAICS code 30, which corresponds to Manufacturing.

Does Robert Bosch Tool Corporation NA have a Crunchbase profile ?

No, Robert Bosch Tool Corporation NA does not have a profile on Crunchbase.

Does Robert Bosch Tool Corporation NA have a LinkedIn profile ?

Yes, Robert Bosch Tool Corporation NA maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/robert-bosch-tool-corporation.

How many cybersecurity incidents has Robert Bosch Tool Corporation NA experienced ?

As of August 2, 2026, Rankiteo reports that Robert Bosch Tool Corporation NA has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Robert Bosch Tool Corporation NA have ?

Robert Bosch Tool Corporation NA has an estimated 8,195 peer or competitor companies worldwide.

What types of cybersecurity incidents has Robert Bosch Tool Corporation NA faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

RBTCN

Boost Score +25 with badge (5 left)

770

/1000

Fair

795

/1000

Fair

Robert Bosch Tool Corporation NA Vendor Cyber Rating & Cyber Score

boschtools.com

Add Your Compliance Badge

The Robert Bosch Tool Corporation is composed of industry-leading brands, including Bosch, Dremel, CST Berger, Rotozip, and Vermont American. Bosch designs, manufactures, and sells power tools, rotary tools, and accessories. Renowned for innovation, versatility, ease of use, durability, and performance, Bosch tools are sold through tool specialists, hardware stores, mass merchants, and home improvement centers. The Mount Prospect office is the North American headquarters for Robert Bosch Tool Corporation. This office houses shared engineering services, finance and controlling, human resources, purchasing, quality and logistics, as well as marketing brands including Bosch, Dremel and RotoZip. So, why work at Bosch? While the rest

RBTCN A.I CyberSecurity Scoring

Scoring History

RBTCN

Robert Bosch Tool Corporation NA CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Robert Bosch Tool C...

Breach

12/2025

BOS1764973211

Bosch

Breach

12/2025

BOS1780504416

Robert Bosch Tool C...

Vulnerability

100

1/2024

BOS334333310272...

Loading…

A.I.

RBTCN Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for RBTCN

Incidents vs Manufacturing Industry Avg (This Year)

No incidents recorded for Robert Bosch Tool Corporation NA in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Robert Bosch Tool Corporation NA in 2026.

Incident Types RBTCN vs Manufacturing Industry Avg (This Year)

No incidents recorded for Robert Bosch Tool Corporation NA in 2026.

Incident History - RBTCN (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Robert Bosch Tool Corporation NA Subsidiaries

RBTCN

Manufacturing

Website: http://www.boschtools.com

Company Size: 2,515

Bosch USASoftware Development

BoschSoftware Development

Bosch Global Software TechnologiesSoftware Development

Bosch IndiaMotor Vehicle Manufacturing

Bosch BrasilSoftware Development

Bosch Rexroth BrasilAutomation Machinery Manufacturing

Bosch Projects do BrasilIndustrial Machinery Manufacturing

Bosch TürkiyeIndustrial Machinery Manufacturing

Bosch Turkey Automotive TechnologyMotor Vehicle Manufacturing

Bosch Turkey Industrial TechnologyIT Services and IT Consulting

Bosch MobilityAutomobil

Bosch Security and Safety SystemsAppliances, Electrical, and Electronics Manufacturing

Conference solutions by BoschProductie huishoudelijke apparaten en consumentenelektronica

Bosch ChinaIT Services and IT Consulting

Bosch RomaniaMotor Vehicle Manufacturing

Bosch RexrothAutomation Machinery Manufacturing

ctrlX OS EcosystemAutomation Machinery Manufacturing

Bosch PortugalSoftware Development

Bosch Industry Consulting PortugalMechanical Or Industrial Engineering

INNOVATIVE CAR HMIFabricação de veículos automotores, reboques e carrocerias

Projeto Safe CitiesSecurity and Investigations

Bosch Australia & New ZealandIndustrial Machinery Manufacturing

Bosch Australia Manufacturing Solutions (BAMS)Manufacturing

Bosch Middle EastIT Services and IT Consulting

Bosch MagyarországSoftware Development

Bosch FranceIndustrial Machinery Manufacturing

Bosch Home Comfort FranceIngénierie mécanique ou industrielle

Bosch Mobility Aftermarket FranceIndustrie automobile

Bosch Rodez Manufacturing and ServicesFabrication de machines industrielles

Bosch Home Comfort GroupRenewable Energy Semiconductor Manufacturing

Bosch Thermotechnik GmbHRenewable Energy Semiconductor Manufacturing

Bosch Hydrogen EnergyErneuerbare Energien und Halbleiterproduktion

Bosch NordicIT Services and IT Consulting

Bosch Energy and Building SolutionsElectrical Equipment Manufacturing

Bosch SwitzerlandSoftware Development

Bosch the NetherlandsTechnology, Information and Internet

Bosch Software InnovationsSoftware Development

Bosch Connected IndustryInformation Technology & Services

Bosch JapanMotor Vehicle Manufacturing

Bosch Automotive NAMotor Vehicle Manufacturing

Bosch UK & IrelandSoftware Development

Bosch Automotive Service Solutions UKIT Services and IT Consulting

Bosch Business InnovationsVenture Capital and Private Equity Principals

Bosch VenturesVenture Capital and Private Equity Principals

Bosch Manufacturing Solutions | BMGAutomation Machinery Manufacturing

Bosch Rexroth CanadaIndustrial Automation

Bosch ConnectedWorldIT Services and IT Consulting

Bosch Engineering and Production ServicesBusiness Consulting and Services

Junkers BoschHVAC and Refrigeration Equipment Manufacturing

Bosch Industrial PortugalIndustrial Machinery Manufacturing

CyberCompareIT Services and IT Consulting

CyberCompare Security DaysEvents Services

Bosch BelgiumTechnology, Information and Internet

Bosch Comercial e Industrial EspañaIndustrial Machinery Manufacturing

Bosch CanadaSoftware Development

Bosch DigitalIT Services and IT Consulting

Bosch Digital BulgariaIT Services and IT Consulting

Bosch Life Safety SystemsFire Protection

Bosch Digital Twin IndustriesSoftware Development

Bosch Software FlowSoftware Development

Bosch Sensortec GmbHSemiconductor Manufacturing

Bosch PolskaIndustrial Machinery Manufacturing

Bosch Service SolutionsBusiness Consulting and Services

Bosch Secure Truck ParkingTransport, Logistik, Lieferkette und Lagerhaltung

Bosch ResearchResearch Services

Bosch Power ToolsAppliances, Electrical, and Electronics Manufacturing

Bosch Professional Power Tools and AccessoriesHerstellung von Haushalts-, Elektro- und Elektronikgeräten

Dremel Power ToolsConsumer Goods

Loading…

Robert Bosch Tool Corporation NA Similar Companies

Unilever

unilever.com

Every day, 3.4 billion people around the world enjoy our products - from ground-breaking brands like Hellmann's, Domestos, Dove and Rexona (to name just a few). Our brands lead the way - innovating in their fields, delighting their consumers and powering our business forward. And it is our people who make everything happen. Our bright and curious people who imagine and create the future - diverse, passionate and ambitious people. A role with us means endless opportunities with global brands that make markets and people who play to win. We make markets and create cultures through some of the biggest brands and best-known products in the world. Talented teams in 190 countries redefine the way we do business and set new standards for our brands. Always learning, always innovating. Is this your moment?

Prysmian

prysmian.com

Prysmian is a global cabling solutions provider leading the energy transition and digital transformation. By leveraging its wide geographical footprint and extensive product range, its track record of technological leadership and innovation, and a strong customer base, the company is well-placed to capitalise on its leading positions and win in new, growing markets. Prysmian’s business strategy perfectly matches key market drivers by developing resilient, high-performing, sustainable and innovative cable solutions in the segments of Transmission, Power Grid, Electrification and Digital Solutions. Prysmian is a public company listed on the Italian Stock Exchange, with almost 150 years of experience, over 33,000 employees, 109 plants and 27 R&D centres in over 50 countries, and sales of over €17 billion in 2024.

Alpargatas S.A.

alpargatas.com.br

We are a global company, founded and based in Brazil for over 115 years. We are committed to delight the world with amazing brands, that convey lightness and joy to the everyday lives of our consumers. We own Havaianas brand, world leader in open shoes, known for the iconic flip-flops that represent Brazilianness, comfort and style. We have 49.2% of Rothy’s a north-american sustainable footwear Brand. The Havaianas brand is one of the largest open-toe footwear brands in the world, with a significant presence and operation in dozens of countries. Rothy’s is present in the United States. Our growth is based on sustainability and economy, always valuing the socio-environmental responsibility of our operations. Our supply chain is vertical, with four manufacturing units in Brazil, and we own ioasys, our digital transformation company. We are more than 10 thousand employees, passionate about make it happen, who want to inspire the world to walk a lighter path. #WeAreAlpaLovers – Inspired by consumers and we walk together to make it happen!

ITC Limited

itcportal.com

ITC is one of India's foremost private sector companies with a Gross Revenue of ₹ 73,465 crores and EBITDA of ₹ 24,025 crores (as on 31.03.2025). ITC has a diversified presence in FMCG, Packaging, Paperboards & Specialty Papers and Agri-Business. ITC's aspiration to be an exemplar in sustainability practices is manifest in its status as the only company in the world, of its size and diversity, to be carbon, water and solid waste recycling positive. In addition, ITC's businesses and value chains create sustainable livelihoods for nearly 9 million people, a majority of whom represent the poorest in rural India.

Celestica

cb celestica.com

Celestica is a technology leader dedicated to driving customer success and market advancements. With deep expertise in design, engineering, manufacturing, supply chain and platform solutions, Celestica enables critical data center infrastructure for AI, cloud, and hybrid cloud and advances technologies in high-growth markets. With a talented team and a strategic global network, Celestica helps its customers achieve a competitive advantage.

Arçelik Türkiye

arcelikglobal.com

Arçelik Türkiye olarak, "Dünyaya Saygılı Dünyada Saygın" misyonuyla yola çıkıyoruz ve teknoloji, insan kaynağı ve üretim gücümüzü sürdürülebilir bir gelecek için kullanıyoruz. 1955 yılında başlayan yolculuğumuz bugün, 22 marka, 46 üretim tesisi, 55.000 çalışan ve 58 ülkedeki 125 iştirak ile global bir varlık olarak devam ediyor. Arçelik markaları arasında Arçelik, Beko, Whirlpool*, Grundig, Hotpoint, Arctic, Ariston*, Leisure, Indesit, Blomberg, Defy, Dawlance, Hitachi*, Voltas Beko, Singer, ElektraBregenz, Flavel, Bauknecht, Privileg, Altus, Ignis ve Polar bulunmaktadır. Vizyonumuz, kendimizi sürekli yenileyerek ve sektörümüzde liderliği sürdürerek, dijitalleşen hanelerin ve şirketlerin güvenilir çözüm ortağı olmaktır. 31 Ar-Ge ve Tasarım Merkezi ile inovasyon ve sürdürülebilirlik konularında öncü rol oynamaktayız. *Limitli marka kullanım hakkına sahiptir.

Yıldız Holding

yildizholding.com.tr

Yıldız Holding’in 1944 yılında İstanbul’da bisküvi üretimiyle başlayan hikâyesi, bugün 300’den fazla markayla 5 kıtada 4 milyar insana ulaştırdığımız gıda-atıştırmalık ürünlerimizle ve Türkiye’nin her noktasındaki perakende şirketlerimizle devam ediyor. Kökleri Türkiye’den beslenen, dalları ise dünyanın farklı coğrafyalarına uzanan global bir yapı içinde ülkemizi uluslararası arenada temsil ediyor, Türkiye’nin “Yıldız”ı olmanın mutluluğunu yaşıyoruz. Çoğunluğu Türkiye’de bulunan 80 bin çalışanımızla durmaksızın daha iyiye ulaşmayı amaçlıyor, 20’si yurt dışında olmak üzere toplam 45 fabrikamızda bisküviden çikolataya, dondurulmuş gıdadan ambalaja kadar geniş bir yelpazede üretim yapıyoruz. Ekonomik katkıda, istihdamda, ihracatta, sosyal dayanışmada ve sürdürülebilirlikte çıtayı daima yükseltiyoruz. “Mutlu Et Mutlu Ol” ilkesiyle toplumsal katkıya öncelik veriyor, gerek ürünlerimiz gerek hizmetlerimiz gerekse sürdürülebilir sosyal sorumluluk anlayışımızla 80 yılı aşkın süredir mutluluk üretiyoruz. Yıldız Holding’de ülkemiz için durmaksızın çalışıyor, bugüne değer katıyor, geleceğe yatırım yapıyoruz.

Vorwerk Group

vorwerk.com

For more than 140 years, Vorwerk has been an internationally active family-owned company focused on improving life everywhere we call home. Our superior products and services come with a human touch, from the way we develop and sell them, to the way they are used. Vorwerk is the number-one direct sales company in Europe, and a worldwide leader in direct sales of high-quality household devices. Today, over 108.000 people in more than 61 countries work for us and help us generate an overall revenue of 3.17 million euros (excl. turnover tax; 2024). Our products, which we develop, manufacture and successfully distribute include Thermomix® / Bimby® as well as the Kobold / Folletto vacuum cleaners. The akf group is also part of the Vorwerk family.

Asian Paints

asianpaints.com

They say home is where the heart is. Which is why, since 1942, we’ve been helping customers transform empty properties to homes by dressing them up in warm hues, pastel shades and cool colours, to create spaces that truly represent you. Asian Paints has a lot of identities. We have been India’s largest paint company for almost 50 years and are part of the top 10 decorative paint companies worldwide. We have operations in 14 countries, and manufacturing facilities in 27 global locations. Having subsidiaries in India and abroad, Asian Paints encompasses the best of Indian and global traits, homegrown and international qualities. Our subsidiaries are Berger International, Scib, Taubman, Apco, Ess Ess. We have joint ventures with PPG in automotive and industrial paints and Sleek International Modular Kitchens. With different strokes for all types of folks, we have paints ranging from luxury enamels to economic quality distemper in all shades imaginable. Despite our phenomenal growth in the paint segment, we didn’t just stop there. We expanded with our wallpaper range - Nilaya, wall stencils, wood finishes, adhesives and waterproofing solutions. We listened to our customers when they asked for hassle-free painting services and now provide end-to-end servicing in multiple cities. We constantly innovate with service offerings – from colour consultancy at home, online consultancy services, to providing inspiration centres through Colour stores. Our reputation often precedes us but we have never let that be our resting laurel. We constantly strive to push boundaries – not only by creating more sustainable ways of carrying out extensive community initiatives that touch the lives of people, but also through our operations. Our people are passionate, innovative and work with integrity. Our actions reflect these values and our businesses across the globe ensure they maintain the quality of work and standards of excellence we are known for.

Loading…

NEWS

Robert Bosch Tool Corporation NA CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…