What is the official website of Samsung Electronics UK ?

The official website of Samsung Electronics UK is https://http://www.samsung.com/uk/business/.

What is Samsung Electronics UK's cybersecurity risk score?

Samsung Electronics UK has an AI-generated cybersecurity risk score of 752 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Samsung Electronics UK experienced?

According to Rankiteo, Samsung Electronics UK currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Samsung Electronics UK been affected by any supply chain cyber incidents ?

According to Rankiteo, Samsung Electronics UK has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Fortinet (Incident ID: MERCHESAMCOMFOXATTFORTOY1781713752) Advantest (Incident ID: APPADV1771962047) Dimensional Control Systems (Incident ID: DIM4992449100425) Fortinet (Incident ID: SAMFOXORAFORDHL1781785487)

Does Samsung Electronics UK have SOC 2 Type 1 certification ?

According to Rankiteo, Samsung Electronics UK is not certified under SOC 2 Type 1.

Does Samsung Electronics UK have SOC 2 Type 2 certification ?

According to Rankiteo, Samsung Electronics UK does not hold a SOC 2 Type 2 certification.

Does Samsung Electronics UK comply with GDPR ?

According to Rankiteo, Samsung Electronics UK is not listed as GDPR compliant.

Does Samsung Electronics UK have PCI DSS certification ?

According to Rankiteo, Samsung Electronics UK does not currently maintain PCI DSS compliance.

Does Samsung Electronics UK comply with HIPAA ?

According to Rankiteo, Samsung Electronics UK is not compliant with HIPAA regulations.

Does Samsung Electronics UK have ISO 27001 certification ?

According to Rankiteo,Samsung Electronics UK is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Samsung Electronics UK operate in ?

Samsung Electronics UK operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does Samsung Electronics UK have ?

Samsung Electronics UK employs approximately 725 people worldwide.

Does Samsung Electronics UK own any subsidiaries ?

Samsung Electronics UK presently has no subsidiaries across any sectors.

How many LinkedIn followers does Samsung Electronics UK have ?

Samsung Electronics UK's official LinkedIn profile has approximately 40,101 followers.

What is the NAICS classification code for Samsung Electronics UK ?

Samsung Electronics UK is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does Samsung Electronics UK have a Crunchbase profile ?

No, Samsung Electronics UK does not have a profile on Crunchbase.

Does Samsung Electronics UK have a LinkedIn profile ?

Yes, Samsung Electronics UK maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/samsung-electronics-uk.

How many cybersecurity incidents has Samsung Electronics UK experienced ?

As of August 2, 2026, Rankiteo reports that Samsung Electronics UK has experienced 19 cybersecurity incidents.

How many peer or competitor companies does Samsung Electronics UK have ?

Samsung Electronics UK has an estimated 9,675 peer or competitor companies worldwide.

What types of cybersecurity incidents has Samsung Electronics UK faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Data Leak, Cyber Attack, Ransomware and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SEU

Boost Score +25 with badge (5 left)

752

/1000

Fair

777

/1000

Fair

Samsung Electronics UK Vendor Cyber Rating & Cyber Score

samsung.com

Add Your Compliance Badge

Welcome to Samsung. For over 70 years, Samsung has been dedicated to making a better world through diverse businesses that today span advanced technology, semiconductors, skyscraper and plant construction, petrochemicals, fashion, medicine, finance, hotels and more. Our flagship company, Samsung Electronics, leads the global market in high-tech electronics manufacturing and digital media. Through innovative, reliable products and services; talented people; a responsible approach to business and global citizenship; and collaboration with our partners and customers, Samsung is taking the world in imaginative new directions.

SEU A.I CyberSecurity Scoring

Scoring History

SEU

Samsung Electronics UK CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Samsung Electronics

Vulnerability

100

5/2026

Fortinet

MERCHESAMCOMFOX...

Samsung Semiconduct...

Ransomware

100

2/2026

Advantest

APPADV177196204...

Samsung Knox

Vulnerability

100

1/2026

SAM1782231942

Samsung Electronics...

Vulnerability

11/2025

SAM593295911052...

Samsung Electronics

Ransomware

100

10/2025

Dimensional Con...

DIM499244910042...

Samsung Electronics...

Vulnerability

8/2025

SAM290202909152...

Samsung Electronics...

Breach

7/2025

SAM945080725

Samsung Electronics

Breach

100

5/2025

Fortinet

SAMFOXORAFORDHL...

Samsung Electronics...

Vulnerability

4/2025

SAM406234011172...

Samsung Electronics...

Vulnerability

3/2025

SAM333031125

Samsung Electronics...

Vulnerability

8/2024

SAM732051525

Samsung Electronics...

Vulnerability

6/2024

SAM313223109122...

Samsung Electronics...

Breach

100

11/2023

SAM1016261123

Samsung Electronics...

Data Leak

4/2023

SAM33929523

Samsung Electronics

Cyber Attack

100

10/2022

SAMNVI177578132...

Samsung Electronics...

Breach

7/2022

SAM709072725

Samsung Electronics...

Breach

7/2022

SAM203923922

Samsung Electronics...

Breach

100

3/2022

SAM211923922

Samsung Electronics...

Breach

6/2021

SAM010040325

Loading…

A.I.

SEU Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SEU

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Samsung Electronics UK in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Samsung Electronics UK in 2026.

Incident Types SEU vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Samsung Electronics UK in 2026.

Incident History - SEU (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Samsung Electronics UK Subsidiaries

SEU

Appliances, Electrical, and Electronics Manufacturing

Website: https://http://www.samsung.com/uk/business/

Company Size: 725

Samsung ElectronicsComputers and Electronics Manufacturing

Samsung Electronics AmericaComputers and Electronics Manufacturing

Samsung Networks텔레콤

Samsung DisplayAppliances, Electrical, and Electronics Manufacturing

Galaxy for BusinessAppliances, Electrical, and Electronics Manufacturing

Samsung SSDAppliances, Electrical, and Electronics Manufacturing

Samsung IndiaComputers and Electronics Manufacturing

Samsung BrasilComputers and Electronics Manufacturing

Samsung South AfricaComputers and Electronics Manufacturing

Samsung Business SAComputers and Electronics Manufacturing

Samsung Electronics ItaliaComputers and Electronics Manufacturing

Samsung SemiconductorSemiconductor Manufacturing

Samsung Electronics MexicoComputers and Electronics Manufacturing

Samsung Electronics FranceIT Services and IT Consulting

Samsung KnoxInformation Technology & Services

Samsung Healthcare의료장비 제조

Samsung Electronics BeneluxComputers and Electronics Manufacturing

Samsung GulfAppliances, Electrical, and Electronics Manufacturing

Samsung Electronics PolskaAppliances, Electrical, and Electronics Manufacturing

Samsung AustraliaComputers and Electronics Manufacturing

Samsung Electronics Southeast Asia & OceaniaComputers and Electronics Manufacturing

Samsung Electronics NordicComputers and Electronics Manufacturing

Samsung Electronics RomaniaAppliances, Electrical, and Electronics Manufacturing

Samsung Electronics AdriaticComputers and Electronics Manufacturing

Samsung Research America (SRA)Software Development

Samsung Electronics ChileComputers and Electronics Manufacturing

Samsung GermanyAppliances, Electrical, and Electronics Manufacturing

Samsung Saudi Arabia for BusinessAppliances, Electrical, and Electronics Manufacturing

Samsung EspañaComputers and Electronics Manufacturing

Samsung SwitzerlandComputers and Electronics Manufacturing

Samsung Research연구 서비스

Samsung Electronics SingaporeComputers and Electronics Manufacturing

Samsung LED반도체 제조

Samsung Electronics BalticsComputers and Electronics Manufacturing

Samsung PortugalComputers and Electronics Manufacturing

Samsung Electronics UkraineComputers and Electronics Manufacturing

Samsung GreeceComputers and Electronics Manufacturing

Samsung New ZealandComputers and Electronics Manufacturing

Samsung Electronics Czech Republic & SlovakiaComputers and Electronics Manufacturing

Samsung AustriaComputers and Electronics Manufacturing

Samsung Digital Appliances UK Training TeamComputers and Electronics Manufacturing

Loading…

Samsung Electronics UK Similar Companies

Panasonic

cb holdings.panasonic

Founded in 1918, and today a global leader in developing innovative technologies and solutions for wide-ranging applications in the consumer electronics, housing, devices, B2B solutions and energy sectors worldwide, the Panasonic Group switched to an operating company system on April 1, 2022 with Panasonic Holdings Corporation serving as a holding company. The Group reported consolidated net sales of 8,458.2 billion yen for the year ended March 31, 2025.

Vertiv

Vertiv.com

Vertiv is a global leader in critical digital infrastructure for applications in data centers, communication networks, and commercial and industrial environments. As businesses, industries, and communities become more connected, we pioneer and deliver end-to-end power and cooling technologies to help our customers stay resilient, optimized, and future-ready. With our industry-leading innovative technologies and global services network, we are fueling the revolution of the digital world - keeping technology ecosystems running efficiently and without interruption. Vertiv is supercharging data’s potential; accelerating the pace of technology, raising the bar for accelerated compute and redefining the limits of densification. The world depends on data we power and cool™

Flex

flex.com

Flex (Reg. No. 199002645H) is the global manufacturing partner of choice that helps leading brands design, build, and manage products that improve the world. For more information, visit flex.com. We love to hear your thoughts, comments and ideas so feel free to like, share and comment away. Any question or opinion is good to go as long as it is respectful and falls within the scope of this page. Derogatory comments, spam and unsolicited selling are not welcome here and such posts will be removed.

Bharat Heavy Electricals Limited

bhel.com

Established in 1964, BHEL is one of India's largest engineering and manufacturing enterprises in the energy and infrastructure sectors, and a leading power equipment manufacturer globally. BHEL serves the core sectors of the economy and provides a comprehensive portfolio of products, systems and services to customers in power, transmission, transportation, renewables, water, defence & aerospace, oil & gas, and industry. BHEL has created value for its stakeholders due to the scale and depth of its operations, rich experience, competent manpower, innovative ecosystem, diverse product-mix and focus on sustainable business solutions. BHEL’s greatest asset- its highly skilled and committed workforce of more than 34,000 employees is the cornerstone of its success. BHEL’s commitment to nation building reflects in many ways- in its contribution to the country’s installed power generation capacity; bringing the latest state-of-the-art technology to the country; consistent highest expenditure of more than 2.5% of its turnover on R&D and innovation in the Indian engineering segment; pan-India presence; establishment of world-class assets with presence in over 84 country across the globe, and contribution to the society at large through initiatives in skilling youth, health & hygiene, education, cleanliness and environment protection, to name a few. With a widespread network of 16 manufacturing facilities, 2 repair units, 4 regional offices, 8 service centres, 1 subsidiary, 3 active joint ventures, 15 regional marketing centres, 3 overseas offices and current project execution at more than 150 project sites across India and abroad, BHEL manufactures a wide range of high quality & reliable products adhering to national & international standards. BHEL has installed over 1000 utility sets worldwide with its installed base of supplied power generating equipment exceeding 185 GW. BHEL has also commissioned 200+ electric substations & 5 major HVDC projects in the country.

Delta Electronics

deltaww.com

Delta is a global innovative provider of switching power supplies and DC brushless fans, as well as a major source for power management solutions, components, visual displays, industrial automation, networking products, and renewable energy solutions. Delta Group has sales offices worldwide and manufacturing plants in Taiwan, China, Thailand, Mexico, India and Europe. As a global innovator in power electronics, Delta's mission is, "To provide innovative, clean and efficient energy solutions for a better tomorrow." Delta is committed to environmental protection and has implemented green, lead-free production and waste management programs for many years.

TDK

tdk.com

TDK Corporation is a world leader in electronic solutions for the smart society based in Tokyo, Japan. Built on a foundation of material sciences mastery, TDK welcomes societal transformation by resolutely remaining at the forefront of technological evolution. It was established in 1935 to commercialize ferrite, a key material in electronic and magnetic products. TDK’s comprehensive, innovation-driven portfolio features passive components such as ceramic, aluminum electrolytic and film capacitors, as well as magnetics, high-frequency, and piezo and protection devices. The product spectrum also includes sensors and sensor systems such as temperature and pressure, magnetic, and MEMS sensors. In addition, TDK provides power supplies and energy devices, magnetic heads, software and more. These products are marketed under the product brands TDK, EPCOS, InvenSense, Micronas, Tronics, and TDK-Lambda. TDK focuses on demanding markets in automotive, industrial and consumer electronics, and information and communication technology. The company has a network of design and manufacturing locations and sales offices in Asia, Europe, and in North and South America. In fiscal 2025, TDK posted total sales of USD 14.4 billion and employed about 105,000 people worldwide.

Eaton

eaton.com

Eaton is an intelligent power management company dedicated to improving the quality of life and protecting the environment for people everywhere. We are guided by our commitment to do business right, to operate sustainably and to help our customers manage power ─ today and well into the future. By capitalizing on the global growth trends of electrification and digitalization, we’re accelerating the planet’s transition to renewable energy and helping to solve the world’s most urgent power management challenges. Eaton is an Equal Opportunity Employer. Eaton is committed to ensuring equal employment opportunities for all job applicants and employees. Employment decisions are based upon job-related reasons regardless of an applicant's race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, marital status, genetic information, protected veteran status, or any other status protected by law.

Molex

molex.com

Molex makes a connected world possible by enabling technologies that transform the future and improve lives. With a presence in more than 40 countries, Molex offers a complete range of connectivity products, services and solutions for the data communications, medical, industrial, automotive and consumer electronics industries. We’re doing more than developing solutions for our customers, we’re Creating Connections for Life.

Haier

cb haier.com

Established in 1984, Haier Group is a world-leading provider of solutions to better life. Focusing on user experience, Haier has been included on the list of BrandZ™ Top 100 Most Valuable Global Brands for two consecutive years as the world’s first and only IoT ecosystem brand. Haier has topped Global Major Appliances Brand Rankings by Euromonitor International for 12 consecutive years. Its subsidiary Haier Smart Home is among the list of Global 500 of Fortune. To date, Haier Group owns three listed companies, has seven global brands such as Haier, Casarte, Leader, GE Appliances, Fisher & Paykel, AQUA and Candy. It has successfully incubated 5 unicorn companies and 41 gazelle companies. Moreover, Haier has established 10+N innovation ecosystems, 28 industrial parks, 122 manufacturing centers and nearly 240,000 sales networks around the globe, it has gone deep into 160 countries and regions globally, serving more than 1 billion users’ families. (Data as of January 2021) Haier Group is committed to working with its world-class ecosystem partners to continuously build premium brand, scenario brand and ecosystem brand, and to set up IoT ecosystems in clothing, food, accommodation, travel, health, elderly care, biomedicine and education, and to tailor personalized smart life for users around the globe.

Loading…

NEWS

Samsung Electronics UK CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 17, 2026 07:15 AM

Cybersecurity takes center stage as British Chamber pushes deeper digital ties

The British Chamber of Commerce Philippines (BCCP) has underscored the urgent need to strengthen cybersecurity cooperation between the...

Read Article

March 04, 2026 04:30 PM

Coalition of Western Countries Launches 6G Cybersecurity Guidelines

A coalition of seven governments has launched a set of voluntary cybersecurity and cyber resilience principles for 6G, the next generation...

Read Article

February 27, 2026 08:00 AM

Samsung Galaxy S26 Pre-Order Offers Diverge Between U.S. and U.K.

Samsung's launch of the Galaxy S26 has revealed a notable discrepancy in pre-order incentives between the U.S. and U.K. markets.

Read Article

January 27, 2026 08:00 AM

[Editorial] Leading the Way in Enterprise Mobile Security: Samsung’s Zero Trust Strategy

By Dr. Jerry Park, EVP & Head of Global Mobile B2B Team, Mobile eXperience Business at Samsung Electronics.

Read Article

January 13, 2026 12:39 PM

Samsung Expands Certified Re-Newed Program to the UK, France and Germany

Following launches in the U.S. and South Korea, Samsung's manufacturer-certified refurbished devices are now more widely available at an...

Read Article

January 07, 2026 08:00 AM

Samsung Magician SSD software ‘High Severity’ vulnerability patched — upgrade to the newest v9.0.0 to prevent potential DLL hijacking and privilege escalation

The CVE‑2025‑57836 vulnerability only affects the Windows version of the app.

Read Article

January 07, 2026 08:00 AM

Thales Powers CES*-Winning Post-Quantum Chip From Samsung Electronics – Company Announcement

*Consumer Electronics Show, January 6-9 , Las Vegas, NV, USA. Thales' secure operating system (OS) supports Samsung's security chip,...

Read Article

January 06, 2026 08:00 AM

[CES 2026] A Look at Samsung Appliances’ Built-In Security

As we unveiled the new Bespoke AI Jet Bot Steam Ultra at CES 2026, we highlighted its advanced recognition technologies that are designed to...

Read Article

December 02, 2025 08:00 AM

India orders phone makers to preload devices with state-owned cyber safety app

Critics voice concern as government says its Sanchar Saathi app combats cybersecurity threats for 1.2bn telecom users.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…