What is the official website of Samsung SSD ?

The official website of Samsung SSD is https://www.samsung.com/us/business/computing/memory-storage/explore/.

What is Samsung SSD's cybersecurity risk score?

Samsung SSD has an AI-generated cybersecurity risk score of 748 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Samsung SSD experienced?

According to Rankiteo, Samsung SSD currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Samsung SSD been affected by any supply chain cyber incidents ?

According to Rankiteo, Samsung SSD has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Fortinet (Incident ID: MERCHESAMCOMFOXATTFORTOY1781713752) Advantest (Incident ID: APPADV1771962047) Dimensional Control Systems (Incident ID: DIM4992449100425) Fortinet (Incident ID: SAMFOXORAFORDHL1781785487)

Does Samsung SSD have SOC 2 Type 1 certification ?

According to Rankiteo, Samsung SSD is not certified under SOC 2 Type 1.

Does Samsung SSD have SOC 2 Type 2 certification ?

According to Rankiteo, Samsung SSD does not hold a SOC 2 Type 2 certification.

Does Samsung SSD comply with GDPR ?

According to Rankiteo, Samsung SSD is not listed as GDPR compliant.

Does Samsung SSD have PCI DSS certification ?

According to Rankiteo, Samsung SSD does not currently maintain PCI DSS compliance.

Does Samsung SSD comply with HIPAA ?

According to Rankiteo, Samsung SSD is not compliant with HIPAA regulations.

Does Samsung SSD have ISO 27001 certification ?

According to Rankiteo,Samsung SSD is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Samsung SSD operate in ?

Samsung SSD operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does Samsung SSD have ?

Samsung SSD employs approximately None employees people worldwide.

Does Samsung SSD own any subsidiaries ?

Samsung SSD presently has no subsidiaries across any sectors.

How many LinkedIn followers does Samsung SSD have ?

Samsung SSD's official LinkedIn profile has approximately 419 followers.

What is the NAICS classification code for Samsung SSD ?

Samsung SSD is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does Samsung SSD have a Crunchbase profile ?

No, Samsung SSD does not have a profile on Crunchbase.

Does Samsung SSD have a LinkedIn profile ?

Yes, Samsung SSD maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/samsung-ssd.

How many cybersecurity incidents has Samsung SSD experienced ?

As of August 2, 2026, Rankiteo reports that Samsung SSD has experienced 19 cybersecurity incidents.

How many peer or competitor companies does Samsung SSD have ?

Samsung SSD has an estimated 9,676 peer or competitor companies worldwide.

What types of cybersecurity incidents has Samsung SSD faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Data Leak, Cyber Attack, Ransomware and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Samsung SSD

Boost Score +25 with badge (5 left)

748

/1000

Moderate

773

/1000

Fair

Samsung SSD Vendor Cyber Rating & Cyber Score

samsung.com

Add Your Compliance Badge

Connect with Samsung Business SSD for the latest information, resources and insights across industries.

Samsung SSD A.I CyberSecurity Scoring

Scoring History

Samsung SSD

Samsung SSD CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Samsung Electronics

Vulnerability

100

5/2026

Fortinet

MERCHESAMCOMFOX...

Samsung Semiconduct...

Ransomware

100

2/2026

Advantest

APPADV177196204...

Samsung Knox

Vulnerability

100

1/2026

SAM1782231942

Samsung SSD

Vulnerability

11/2025

SAM593295911052...

Samsung Electronics

Ransomware

100

10/2025

Dimensional Con...

DIM499244910042...

Samsung SSD

Vulnerability

8/2025

SAM290202909152...

Samsung SSD

Breach

7/2025

SAM945080725

Samsung Electronics

Breach

100

5/2025

Fortinet

SAMFOXORAFORDHL...

Samsung SSD

Vulnerability

4/2025

SAM406234011172...

Samsung SSD

Vulnerability

3/2025

SAM333031125

Samsung SSD

Vulnerability

8/2024

SAM732051525

Samsung SSD

Vulnerability

6/2024

SAM313223109122...

Samsung SSD

Breach

100

11/2023

SAM1016261123

Samsung SSD

Data Leak

4/2023

SAM33929523

Samsung Electronics

Cyber Attack

100

10/2022

SAMNVI177578132...

Samsung SSD

Breach

7/2022

SAM709072725

Samsung SSD

Breach

7/2022

SAM203923922

Samsung SSD

Breach

100

3/2022

SAM211923922

Samsung SSD

Breach

6/2021

SAM010040325

Loading…

A.I.

Samsung SSD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Samsung SSD

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Samsung SSD in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Samsung SSD in 2026.

Incident Types Samsung SSD vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Samsung SSD in 2026.

Incident History - Samsung SSD (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Samsung SSD Subsidiaries

Samsung SSD

Appliances, Electrical, and Electronics Manufacturing

Website: https://www.samsung.com/us/business/computing/memory-storage/explore/

Company Size: 10,001+ employees

Samsung ElectronicsComputers and Electronics Manufacturing

Samsung Electronics ItaliaComputers and Electronics Manufacturing

Samsung IndiaComputers and Electronics Manufacturing

Samsung SemiconductorSemiconductor Manufacturing

Samsung BrasilComputers and Electronics Manufacturing

Samsung Healthcare의료장비 제조

Samsung Electronics MexicoComputers and Electronics Manufacturing

Samsung South AfricaComputers and Electronics Manufacturing

Samsung Business SAComputers and Electronics Manufacturing

Samsung Electronics Southeast Asia & OceaniaComputers and Electronics Manufacturing

Samsung Electronics FranceIT Services and IT Consulting

Samsung KnoxInformation Technology & Services

Samsung Electronics UKAppliances, Electrical, and Electronics Manufacturing

Samsung Digital Appliances UK Training TeamComputers and Electronics Manufacturing

Samsung AustraliaComputers and Electronics Manufacturing

Samsung Electronics BeneluxComputers and Electronics Manufacturing

Samsung GulfAppliances, Electrical, and Electronics Manufacturing

Samsung Electronics PolskaAppliances, Electrical, and Electronics Manufacturing

Samsung EspañaComputers and Electronics Manufacturing

Samsung Electronics ChileComputers and Electronics Manufacturing

Samsung Electronics RomaniaAppliances, Electrical, and Electronics Manufacturing

Samsung Research America (SRA)Software Development

Samsung GermanyAppliances, Electrical, and Electronics Manufacturing

Samsung SwitzerlandComputers and Electronics Manufacturing

Samsung Saudi Arabia for BusinessAppliances, Electrical, and Electronics Manufacturing

Samsung GreeceComputers and Electronics Manufacturing

Samsung Electronics NordicComputers and Electronics Manufacturing

Samsung LED반도체 제조

Samsung Electronics AdriaticComputers and Electronics Manufacturing

Samsung Research연구 서비스

Samsung PortugalComputers and Electronics Manufacturing

Samsung Electronics BalticsComputers and Electronics Manufacturing

Samsung New ZealandComputers and Electronics Manufacturing

Samsung Electronics Czech Republic & SlovakiaComputers and Electronics Manufacturing

Samsung Electronics UkraineComputers and Electronics Manufacturing

Samsung AustriaComputers and Electronics Manufacturing

Samsung Electronics SingaporeComputers and Electronics Manufacturing

Samsung Electronics AmericaComputers and Electronics Manufacturing

Samsung Networks텔레콤

Samsung DisplayAppliances, Electrical, and Electronics Manufacturing

Galaxy for BusinessAppliances, Electrical, and Electronics Manufacturing

Loading…

Samsung SSD Similar Companies

Panasonic

cb holdings.panasonic

Founded in 1918, and today a global leader in developing innovative technologies and solutions for wide-ranging applications in the consumer electronics, housing, devices, B2B solutions and energy sectors worldwide, the Panasonic Group switched to an operating company system on April 1, 2022 with Panasonic Holdings Corporation serving as a holding company. The Group reported consolidated net sales of 8,458.2 billion yen for the year ended March 31, 2025.

Eaton

eaton.com

Eaton is an intelligent power management company dedicated to improving the quality of life and protecting the environment for people everywhere. We are guided by our commitment to do business right, to operate sustainably and to help our customers manage power ─ today and well into the future. By capitalizing on the global growth trends of electrification and digitalization, we’re accelerating the planet’s transition to renewable energy and helping to solve the world’s most urgent power management challenges. Eaton is an Equal Opportunity Employer. Eaton is committed to ensuring equal employment opportunities for all job applicants and employees. Employment decisions are based upon job-related reasons regardless of an applicant's race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, marital status, genetic information, protected veteran status, or any other status protected by law.

WEG

weg.net

Founded in 1961, WEG is a global electro-electronic equipment company, operating in the capital goods sector a with focus on electric motors, gearboxes and drives and controls, energy generation and transformers, electrification products and systems, automation and digitalization. WEG stands out in innovation by constantly developing solutions to meet the major trends in energy efficiency, renewable energy and electric mobility. With manufacturing units in 15 countries and present in more than 135 countries, the company has more than 47,000 employees worldwide. WEG’s net revenue reached R$ 38.0 billion in 2024, 57.0% from external markets.

TE Connectivity

te.com

TE Connectivity plc (NYSE: TEL) is a global industrial technology leader creating a safer, sustainable, productive and connected future. As a trusted innovation partner, our broad range of connectivity and sensor solutions enable the distribution of power, signal and data to advance next-generation transportation, energy networks, automated factories, data centers enabling artificial intelligence and more. Our more than 90,000 employees, including 10,000 engineers, work alongside customers in approximately 130 countries. In a world that is racing ahead, TE ensures that EVERY CONNECTION COUNTS.

Delta Electronics

deltaww.com

Delta is a global innovative provider of switching power supplies and DC brushless fans, as well as a major source for power management solutions, components, visual displays, industrial automation, networking products, and renewable energy solutions. Delta Group has sales offices worldwide and manufacturing plants in Taiwan, China, Thailand, Mexico, India and Europe. As a global innovator in power electronics, Delta's mission is, "To provide innovative, clean and efficient energy solutions for a better tomorrow." Delta is committed to environmental protection and has implemented green, lead-free production and waste management programs for many years.

Vertiv

Vertiv.com

Vertiv is a global leader in critical digital infrastructure for applications in data centers, communication networks, and commercial and industrial environments. As businesses, industries, and communities become more connected, we pioneer and deliver end-to-end power and cooling technologies to help our customers stay resilient, optimized, and future-ready. With our industry-leading innovative technologies and global services network, we are fueling the revolution of the digital world - keeping technology ecosystems running efficiently and without interruption. Vertiv is supercharging data’s potential; accelerating the pace of technology, raising the bar for accelerated compute and redefining the limits of densification. The world depends on data we power and cool™

Jabil

jabil.com

At Jabil (NYSE: JBL), we are proud to be a trusted partner for the world's top brands, offering comprehensive engineering, supply chain, and manufacturing solutions. With over 50 years of experience across industries and a vast network of over 100 sites worldwide, Jabil combines global reach with local expertise to deliver both scalable and customized solutions. Our commitment extends beyond business success as we strive to build sustainable processes that minimize environmental impact and foster vibrant and diverse communities around the globe.

Legrand

legrandgroup.com

Legrand is a global specialist in electrical and digital building infrastructures, dedicated to supporting technological, societal and environmental change around the globe. Our purpose is to improve lives by transforming the spaces where people live, work and meet by delivering electrical and digital infrastructures and connected solutions that are simple, innovative and sustainable. With nearly 38,000 employees around the world, we work hard every day to make the buildings of tomorrow more sustainable for everyone. Legrand reported sales of €8.3 billion in 2022. The company is listed on Euronext Paris and is notably a component stock of the CAC 40, CAC 40 ESG and CAC SBT 1.5 indexes. (code ISIN FR0010307819).

Foxconn

cb foxconn.com

Established in Taiwan in 1974, Hon Hai Technology Group (Foxconn) (2317: Taiwan) is the world’s largest electronics manufacturer. Foxconn is also the leading technological solution provider, and it continuously leverages its expertise in software and hardware to integrate its unique manufacturing systems with emerging technologies. By capitalizing on its expertise in Cloud Computing, Mobile Devices, IoT, Big Data, AI, Smart Networks, and Robotics / Automation, the Group has expanded not only its capabilities into the development of electric vehicles, digital health and robotics, but also three key technologies –AI, semiconductors and new-generation communications technology – which are key to driving its long-term growth strategy and the four core product pillars: Consumer Products, Enterprise Products, Computing Products and Components and Others. In 2021, Hon Hai's annual revenue reached NT$5.99 trillion. The company has established R&D and manufacturing centers in other markets around the world including China, India, Japan, Vietnam, Malaysia, Czech Republic, U.S. and more. With a focus on research and development, the company owns more than 54,253 patents. In addition to maximizing value-creation for customers who include many of the world’s leading technology companies, Foxconn is also dedicated to championing environmental sustainability in the manufacturing process and serving as a best-practices model for global enterprises. The company has received widespread international accolades and recognition since its establishment. The company ranked 22nd on the Fortune Global 500 rankings in 2021 and 25th in the Top 100 Digital Companies in the Forbes ranking of the World’s Best Employers in 2019. Moreover, on Forbes’ World’s Best Employers 2021 rankings, the company ranked 1st in Taiwan. Foxconn is also the only Taiwanese private company awarded for 5 consecutive years of Clarivate Top 100 Global Innovators (2018 - 2022).

Loading…

NEWS

Samsung SSD CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 15, 2026 08:00 AM

The Best Secure SSDs and Hard Drives for 2026

Forget about email hackers—what if someone nabs your external drive and all the data on it? Thwart thieves with the strong encryption and...

Read Article

January 07, 2026 08:00 AM

Samsung Magician SSD software ‘High Severity’ vulnerability patched — upgrade to the newest v9.0.0 to prevent potential DLL hijacking and privilege escalation

Samsung has published a security advisory after a high-severity vulnerability was discovered in its Magician SSD utility software on Windows...

Read Article

December 31, 2025 08:00 AM

A risky Windows registry tweak can make your SSD almost twice as fast

A hidden Windows registry tweak can unlock serious SSD speed gains—but one wrong move could leave your PC unbootable.

Read Article

December 01, 2025 08:00 AM

Storage Savings Alert: Cyber Monday Delivers Big Discounts on SSDs From Crucial, Samsung, and SanDisk

Cyber Monday December 2025 SSD deals are here to save your data and some money. Take over $40 off the SanDisk Extreme Portable SSD and the...

Read Article

November 29, 2025 08:00 AM

Samsung's beastly chart-topping 990 Pro 4TB SSD is down to just 7 cents per GB — now a mere $299 as storage shortages loom

We often highlight deals that offer a great value proposition, usually because their quality, weighed against their discounted price,...

Read Article

November 21, 2025 08:00 AM

Save $250 on Samsung's spacious and speedy 8TB SSD — 9100 Pro drops to all-time low of 9 cents per GB

The Samsung 9100 Pro 8TB is genuinely one of the largest and fastest PCIe 5.0 SSDs on the market, and it's available now for just $749.99.

Read Article

November 17, 2025 08:00 AM

Samsung Automotive Storage: Industry’s First to Achieve CSMS ML3 Certification

Samsung achieves CSMS ML3 certification, strengthening security across automotive UFS and SSD products and leading cybersecurity innovation.

Read Article

November 15, 2025 08:00 AM

Save on Samsung SanDisk SSDs With These Early Black Friday Deals

From sleek SSDs for your PS5 and a rugged one to carry around to upgrading your PC with superior storage, we are seeing massive price drops...

Read Article

November 10, 2025 08:00 AM

Cybersecurity and XR and Spatial Computing: Samsung's Technology Receives Multiple CES 2026 Awards

Innovations in mobile devices, home entertainment, appliances, and semiconductors win multiple CES® 2026 Innovation Awards.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…