What is the official website of Samsung Display ?

The official website of Samsung Display is https://http://www.samsung.com/us/business/by-industry/education/.

What is Samsung Display's cybersecurity risk score?

Samsung Display has an AI-generated cybersecurity risk score of 755 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Samsung Display experienced?

According to Rankiteo, Samsung Display currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Samsung Display been affected by any supply chain cyber incidents ?

According to Rankiteo, Samsung Display has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Fortinet (Incident ID: MERCHESAMCOMFOXATTFORTOY1781713752) Advantest (Incident ID: APPADV1771962047) Dimensional Control Systems (Incident ID: DIM4992449100425) Fortinet (Incident ID: SAMFOXORAFORDHL1781785487)

Does Samsung Display have SOC 2 Type 1 certification ?

According to Rankiteo, Samsung Display is not certified under SOC 2 Type 1.

Does Samsung Display have SOC 2 Type 2 certification ?

According to Rankiteo, Samsung Display does not hold a SOC 2 Type 2 certification.

Does Samsung Display comply with GDPR ?

According to Rankiteo, Samsung Display is not listed as GDPR compliant.

Does Samsung Display have PCI DSS certification ?

According to Rankiteo, Samsung Display does not currently maintain PCI DSS compliance.

Does Samsung Display comply with HIPAA ?

According to Rankiteo, Samsung Display is not compliant with HIPAA regulations.

Does Samsung Display have ISO 27001 certification ?

According to Rankiteo,Samsung Display is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Samsung Display operate in ?

Samsung Display operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does Samsung Display have ?

Samsung Display employs approximately None employees people worldwide.

Does Samsung Display own any subsidiaries ?

Samsung Display presently has no subsidiaries across any sectors.

How many LinkedIn followers does Samsung Display have ?

Samsung Display's official LinkedIn profile has approximately 28,333 followers.

What is the NAICS classification code for Samsung Display ?

Samsung Display is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does Samsung Display have a Crunchbase profile ?

No, Samsung Display does not have a profile on Crunchbase.

Does Samsung Display have a LinkedIn profile ?

Yes, Samsung Display maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/samsungdisplay.

How many cybersecurity incidents has Samsung Display experienced ?

As of August 2, 2026, Rankiteo reports that Samsung Display has experienced 19 cybersecurity incidents.

How many peer or competitor companies does Samsung Display have ?

Samsung Display has an estimated 9,676 peer or competitor companies worldwide.

What types of cybersecurity incidents has Samsung Display faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Data Leak, Cyber Attack, Ransomware and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Samsung Display

Boost Score +25 with badge (5 left)

755

/1000

Fair

780

/1000

Fair

Samsung Display Vendor Cyber Rating & Cyber Score

samsung.com

Add Your Compliance Badge

Samsung Display leads the way in transforming industries with superior visual and interactive technology. Get in touch TODAY and discover how our displays can redefine your business for a brighter, smarter future in industries including, but not limited to: Education, Retail, Healthcare, Government (Public and Private Sector), Hospitality, Sports and Entertainment..

Samsung Display A.I CyberSecurity Scoring

Scoring History

Samsung Display

Samsung Display CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Samsung Electronics

Vulnerability

100

5/2026

Fortinet

MERCHESAMCOMFOX...

Samsung Semiconduct...

Ransomware

100

2/2026

Advantest

APPADV177196204...

Samsung Knox

Vulnerability

100

1/2026

SAM1782231942

Samsung Display

Vulnerability

11/2025

SAM593295911052...

Samsung Electronics

Ransomware

100

10/2025

Dimensional Con...

DIM499244910042...

Samsung Display

Vulnerability

8/2025

SAM290202909152...

Samsung Display

Breach

7/2025

SAM945080725

Samsung Electronics

Breach

100

5/2025

Fortinet

SAMFOXORAFORDHL...

Samsung Display

Vulnerability

4/2025

SAM406234011172...

Samsung Display

Vulnerability

3/2025

SAM333031125

Samsung Display

Vulnerability

8/2024

SAM732051525

Samsung Display

Vulnerability

6/2024

SAM313223109122...

Samsung Display

Breach

100

11/2023

SAM1016261123

Samsung Display

Data Leak

4/2023

SAM33929523

Samsung Electronics

Cyber Attack

100

10/2022

SAMNVI177578132...

Samsung Display

Breach

7/2022

SAM709072725

Samsung Display

Breach

7/2022

SAM203923922

Samsung Display

Breach

100

3/2022

SAM211923922

Samsung Display

Breach

6/2021

SAM010040325

Loading…

A.I.

Samsung Display Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Samsung Display

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Samsung Display in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Samsung Display in 2026.

Incident Types Samsung Display vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Samsung Display in 2026.

Incident History - Samsung Display (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Samsung Display Subsidiaries

Samsung Display

Appliances, Electrical, and Electronics Manufacturing

Website: https://http://www.samsung.com/us/business/by-industry/education/

Company Size: None employees

Samsung ElectronicsComputers and Electronics Manufacturing

Samsung SemiconductorSemiconductor Manufacturing

Samsung IndiaComputers and Electronics Manufacturing

Samsung Electronics ItaliaComputers and Electronics Manufacturing

Samsung Electronics MexicoComputers and Electronics Manufacturing

Samsung Healthcare의료장비 제조

Samsung Electronics Southeast Asia & OceaniaComputers and Electronics Manufacturing

Samsung Electronics ChileComputers and Electronics Manufacturing

Samsung Electronics FranceIT Services and IT Consulting

Samsung KnoxInformation Technology & Services

Samsung EspañaComputers and Electronics Manufacturing

Samsung Electronics NordicComputers and Electronics Manufacturing

Samsung GulfAppliances, Electrical, and Electronics Manufacturing

Samsung Saudi Arabia for BusinessAppliances, Electrical, and Electronics Manufacturing

Samsung Electronics PolskaAppliances, Electrical, and Electronics Manufacturing

Samsung Electronics SingaporeComputers and Electronics Manufacturing

Samsung AustraliaComputers and Electronics Manufacturing

Samsung PortugalComputers and Electronics Manufacturing

Samsung LED반도체 제조

Samsung Research America (SRA)Software Development

Samsung Electronics Czech Republic & SlovakiaComputers and Electronics Manufacturing

Samsung SwitzerlandComputers and Electronics Manufacturing

Samsung GreeceComputers and Electronics Manufacturing

Samsung Electronics AdriaticComputers and Electronics Manufacturing

Samsung Research연구 서비스

Samsung Electronics RomaniaAppliances, Electrical, and Electronics Manufacturing

Samsung New ZealandComputers and Electronics Manufacturing

Samsung Electronics UKAppliances, Electrical, and Electronics Manufacturing

Samsung Digital Appliances UK Training TeamComputers and Electronics Manufacturing

Samsung Electronics BalticsComputers and Electronics Manufacturing

Samsung Electronics UkraineComputers and Electronics Manufacturing

Samsung GermanyAppliances, Electrical, and Electronics Manufacturing

Samsung AustriaComputers and Electronics Manufacturing

Samsung Electronics BeneluxComputers and Electronics Manufacturing

Samsung South AfricaComputers and Electronics Manufacturing

Samsung Business SAComputers and Electronics Manufacturing

Samsung BrasilComputers and Electronics Manufacturing

Galaxy for BusinessAppliances, Electrical, and Electronics Manufacturing

Samsung SSDAppliances, Electrical, and Electronics Manufacturing

Samsung Networks텔레콤

Samsung Electronics AmericaComputers and Electronics Manufacturing

Loading…

Samsung Display Similar Companies

Havells India Ltd

havells.com

Havells India Limited is a leading FMEG company with a strong global presence, manufacturing a wide range of electrical products for residential, commercial, and industrial use. Key brands include Havells, Havells Studio, Lloyd, Havells Crabtree, Standard Electricals and REO. With a focus on innovation and customer satisfaction, Havells boasts a robust distribution network, exclusive brand showrooms, and a strong emphasis on service. The company prioritizes sustainability, with a focus on renewable energy, waste reduction, and environmental conservation. Havells is committed to social responsibility, with initiatives in education, sanitation, and community development. Recognized for its sustainability efforts, Havells has been ranked in the Dow Jones Sustainability Index and maintains an 'A' rating in the MSCI ESG Rating. Learn more about Havells on the following channels: Facebook I Youtube I Twitter I Instagram I

Bharat Heavy Electricals Limited

bhel.com

Established in 1964, BHEL is one of India's largest engineering and manufacturing enterprises in the energy and infrastructure sectors, and a leading power equipment manufacturer globally. BHEL serves the core sectors of the economy and provides a comprehensive portfolio of products, systems and services to customers in power, transmission, transportation, renewables, water, defence & aerospace, oil & gas, and industry. BHEL has created value for its stakeholders due to the scale and depth of its operations, rich experience, competent manpower, innovative ecosystem, diverse product-mix and focus on sustainable business solutions. BHEL’s greatest asset- its highly skilled and committed workforce of more than 34,000 employees is the cornerstone of its success. BHEL’s commitment to nation building reflects in many ways- in its contribution to the country’s installed power generation capacity; bringing the latest state-of-the-art technology to the country; consistent highest expenditure of more than 2.5% of its turnover on R&D and innovation in the Indian engineering segment; pan-India presence; establishment of world-class assets with presence in over 84 country across the globe, and contribution to the society at large through initiatives in skilling youth, health & hygiene, education, cleanliness and environment protection, to name a few. With a widespread network of 16 manufacturing facilities, 2 repair units, 4 regional offices, 8 service centres, 1 subsidiary, 3 active joint ventures, 15 regional marketing centres, 3 overseas offices and current project execution at more than 150 project sites across India and abroad, BHEL manufactures a wide range of high quality & reliable products adhering to national & international standards. BHEL has installed over 1000 utility sets worldwide with its installed base of supplied power generating equipment exceeding 185 GW. BHEL has also commissioned 200+ electric substations & 5 major HVDC projects in the country.

Flex

flex.com

Flex (Reg. No. 199002645H) is the global manufacturing partner of choice that helps leading brands design, build, and manage products that improve the world. For more information, visit flex.com. We love to hear your thoughts, comments and ideas so feel free to like, share and comment away. Any question or opinion is good to go as long as it is respectful and falls within the scope of this page. Derogatory comments, spam and unsolicited selling are not welcome here and such posts will be removed.

Eaton

eaton.com

Eaton is an intelligent power management company dedicated to improving the quality of life and protecting the environment for people everywhere. We are guided by our commitment to do business right, to operate sustainably and to help our customers manage power ─ today and well into the future. By capitalizing on the global growth trends of electrification and digitalization, we’re accelerating the planet’s transition to renewable energy and helping to solve the world’s most urgent power management challenges. Eaton is an Equal Opportunity Employer. Eaton is committed to ensuring equal employment opportunities for all job applicants and employees. Employment decisions are based upon job-related reasons regardless of an applicant's race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, marital status, genetic information, protected veteran status, or any other status protected by law.

Vertiv

Vertiv.com

Vertiv is a global leader in critical digital infrastructure for applications in data centers, communication networks, and commercial and industrial environments. As businesses, industries, and communities become more connected, we pioneer and deliver end-to-end power and cooling technologies to help our customers stay resilient, optimized, and future-ready. With our industry-leading innovative technologies and global services network, we are fueling the revolution of the digital world - keeping technology ecosystems running efficiently and without interruption. Vertiv is supercharging data’s potential; accelerating the pace of technology, raising the bar for accelerated compute and redefining the limits of densification. The world depends on data we power and cool™

TDK

tdk.com

TDK Corporation is a world leader in electronic solutions for the smart society based in Tokyo, Japan. Built on a foundation of material sciences mastery, TDK welcomes societal transformation by resolutely remaining at the forefront of technological evolution. It was established in 1935 to commercialize ferrite, a key material in electronic and magnetic products. TDK’s comprehensive, innovation-driven portfolio features passive components such as ceramic, aluminum electrolytic and film capacitors, as well as magnetics, high-frequency, and piezo and protection devices. The product spectrum also includes sensors and sensor systems such as temperature and pressure, magnetic, and MEMS sensors. In addition, TDK provides power supplies and energy devices, magnetic heads, software and more. These products are marketed under the product brands TDK, EPCOS, InvenSense, Micronas, Tronics, and TDK-Lambda. TDK focuses on demanding markets in automotive, industrial and consumer electronics, and information and communication technology. The company has a network of design and manufacturing locations and sales offices in Asia, Europe, and in North and South America. In fiscal 2025, TDK posted total sales of USD 14.4 billion and employed about 105,000 people worldwide.

Legrand

legrandgroup.com

Legrand is a global specialist in electrical and digital building infrastructures, dedicated to supporting technological, societal and environmental change around the globe. Our purpose is to improve lives by transforming the spaces where people live, work and meet by delivering electrical and digital infrastructures and connected solutions that are simple, innovative and sustainable. With nearly 38,000 employees around the world, we work hard every day to make the buildings of tomorrow more sustainable for everyone. Legrand reported sales of €8.3 billion in 2022. The company is listed on Euronext Paris and is notably a component stock of the CAC 40, CAC 40 ESG and CAC SBT 1.5 indexes. (code ISIN FR0010307819).

Midea Group

midea-group.com

Midea Group aspires to the vision of “Bringing Great Innovations to Life”, upholding the Founders’ philosophy of creating a better life through technology. Midea Group has evolved into a global leading technology company specializing in six major businesses including Smart Home Business, Industrial Technologies, Building Technologies, Robotics &Automation, Midea Healthcare and Annto Logistics. Over the past ten years, we have invested nearly 100 billion yuan in R&D and developed a global network spanning 38 R&D centers and 44 major production sites across the world. At present, Midea Group’s products and services serve more than 500 million customers in over 200 countries and regions, our brand portfolio contains Little Swan, Toshiba, WAHIN, COLMO, Clivet, Eureka, KUKA, GMCC, Welling, LINVOL, and Wandong. With nearly 200,000 employees globally and more than 40,000 based internationally, Midea Group ranks 277th on the Global Fortune 500 in 2024, marking the 9th consecutive year on the list. The company holds A/A2/A credit ratings from S&P, Moody's, and Fitch respectively. Midea Group places a strong focus on technology leadership, driving innovation across global markets. Midea adheres to the new strategic axis of "Technology Leadership, User Direct Access, Digital Intelligence Driven, and Global Breakthroughs," we advance our leadership in Smart Home and Smart Manufacturing while fostering talent. By providing growth opportunities in a dynamic, global environment, we empower our teams to shape the future of innovation.

Jabil

jabil.com

At Jabil (NYSE: JBL), we are proud to be a trusted partner for the world's top brands, offering comprehensive engineering, supply chain, and manufacturing solutions. With over 50 years of experience across industries and a vast network of over 100 sites worldwide, Jabil combines global reach with local expertise to deliver both scalable and customized solutions. Our commitment extends beyond business success as we strive to build sustainable processes that minimize environmental impact and foster vibrant and diverse communities around the globe.

Loading…

NEWS

Samsung Display CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 21, 2026 01:31 PM

Best gaming monitor deal: Samsung’s 49-inch Odyssey G9 hits lowest price on Amazon

The Samsung 49-inch Odyssey G9 gaming monitor is down to $699.99 on Amazon,$300 off its $999.99 list price.

Read Article

January 20, 2026 05:21 PM

The giant 55-inch Samsung Odyssey Ark curved gaming monitor is on sale for $1,500 off

The 55-inch Samsung Odyssey Ark curved gaming monitor is on sale at Woot for $1199.99, down from the list price of $2699.99. That's a 56% discount.

Read Article

January 19, 2026 03:14 PM

Best gaming monitor deal: Save 30% on the 49-inch Samsung G9 curved monitor

The 49-inch Samsung Odyssey G9 curved gaming monitor is on sale at Amazon for $899.99, down from the standard price of $1289. That's a 30% discount.

Read Article

January 13, 2026 11:53 AM

The Samsung Odyssey G5 gaming monitor is almost half price — now only $249.99

The Samsung Odyssey gaming monitor is now only $249.99, both for the 32-inch and 27-inch models.

Read Article

January 12, 2026 03:36 PM

Samsung 57-inch Odyssey Neo G9 deal: Save $800 at Amazon

As of Jan. 12, you can get the Samsung 57-inch Odyssey Neo G9 (G95NC) Series gaming monitor for $1499.99 at Amazon.

Read Article

January 08, 2026 05:08 PM

Best monitor deal: Get the Samsung Odyssey G8 QD-OLED gaming monitor for its lowest price yet

As of Jan. 8, get the Samsung Odyssey G8 QD-OLED gaming monitor for its lowest price yet.

Read Article

January 06, 2026 04:20 PM

CES 2026: Samsung's creaseless OLED screen may unlock foldable iPhones

As the floor opens for CES 2026's first official day, rumors are buzzing that Apple could be on the brink of bringing foldable devices to its iPhone lineup.

Read Article

December 19, 2025 08:00 AM

Samsung Celebrated for Transformative Tech by Consumer Technology Association

Samsung's CES 2026 Innovation Awards highlight major leaps in AI, XR, displays and chip security. Here is what the wins reveal about the...

Read Article

December 18, 2025 05:04 PM

Go big with this 57-inch Samsung Odyssey Neo G9 curved gaming monitor while it's nearly 40% off at Amazon

The 57-inch Samsung Odyssey Neo G9 curved gaming monitor is on sale at Amazon for $1449.99, down from the list price of $2299.99. That's a 37% discount.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…