What is the official website of Samsung Electronics Chile ?

The official website of Samsung Electronics Chile is http://www.samsung.com/cl/business/.

What is Samsung Electronics Chile's cybersecurity risk score?

Samsung Electronics Chile has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Samsung Electronics Chile experienced?

According to Rankiteo, Samsung Electronics Chile currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Samsung Electronics Chile been affected by any supply chain cyber incidents ?

According to Rankiteo, Samsung Electronics Chile has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Fortinet (Incident ID: MERCHESAMCOMFOXATTFORTOY1781713752) Advantest (Incident ID: APPADV1771962047) Dimensional Control Systems (Incident ID: DIM4992449100425) Fortinet (Incident ID: SAMFOXORAFORDHL1781785487)

Does Samsung Electronics Chile have SOC 2 Type 1 certification ?

According to Rankiteo, Samsung Electronics Chile is not certified under SOC 2 Type 1.

Does Samsung Electronics Chile have SOC 2 Type 2 certification ?

According to Rankiteo, Samsung Electronics Chile does not hold a SOC 2 Type 2 certification.

Does Samsung Electronics Chile comply with GDPR ?

According to Rankiteo, Samsung Electronics Chile is not listed as GDPR compliant.

Does Samsung Electronics Chile have PCI DSS certification ?

According to Rankiteo, Samsung Electronics Chile does not currently maintain PCI DSS compliance.

Does Samsung Electronics Chile comply with HIPAA ?

According to Rankiteo, Samsung Electronics Chile is not compliant with HIPAA regulations.

Does Samsung Electronics Chile have ISO 27001 certification ?

According to Rankiteo,Samsung Electronics Chile is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Samsung Electronics Chile operate in ?

Samsung Electronics Chile operates primarily in the Computers and Electronics Manufacturing industry.

How many employees does Samsung Electronics Chile have ?

Samsung Electronics Chile employs approximately 265 people worldwide.

Does Samsung Electronics Chile own any subsidiaries ?

Samsung Electronics Chile presently has no subsidiaries across any sectors.

How many LinkedIn followers does Samsung Electronics Chile have ?

Samsung Electronics Chile's official LinkedIn profile has approximately 26,382 followers.

What is the NAICS classification code for Samsung Electronics Chile ?

Samsung Electronics Chile is classified under the NAICS code 334, which corresponds to Computer and Electronic Product Manufacturing.

Does Samsung Electronics Chile have a Crunchbase profile ?

No, Samsung Electronics Chile does not have a profile on Crunchbase.

Does Samsung Electronics Chile have a LinkedIn profile ?

Yes, Samsung Electronics Chile maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/samsungempresaschile.

How many cybersecurity incidents has Samsung Electronics Chile experienced ?

As of August 2, 2026, Rankiteo reports that Samsung Electronics Chile has experienced 19 cybersecurity incidents.

How many peer or competitor companies does Samsung Electronics Chile have ?

Samsung Electronics Chile has an estimated 2,003 peer or competitor companies worldwide.

What types of cybersecurity incidents has Samsung Electronics Chile faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Vulnerability, Ransomware, Data Leak and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SEC

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Samsung Electronics Chile Vendor Cyber Rating & Cyber Score

samsung.com

Add Your Compliance Badge

Samsung es una de las empresas más innovadoras del mundo y tiene el portafolio de productos más integral del mercado, siendo capaz de cubrir ampliamente las necesidades digitales de la empresa. Con Samsung el futuro es hoy y tu empresa podrá ser líder en la transformación digital.

SEC A.I CyberSecurity Scoring

Scoring History

SEC

Samsung Electronics Chile CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Samsung Electronics

Vulnerability

100

5/2026

Fortinet

MERCHESAMCOMFOX...

Samsung Semiconduct...

Ransomware

100

2/2026

Advantest

APPADV177196204...

Samsung Knox

Vulnerability

100

1/2026

SAM1782231942

Samsung Electronics...

Vulnerability

11/2025

SAM593295911052...

Samsung Electronics

Ransomware

100

10/2025

Dimensional Con...

DIM499244910042...

Samsung Electronics...

Vulnerability

8/2025

SAM290202909152...

Samsung Electronics...

Breach

7/2025

SAM945080725

Samsung Electronics

Breach

100

5/2025

Fortinet

SAMFOXORAFORDHL...

Samsung Electronics...

Vulnerability

4/2025

SAM406234011172...

Samsung Electronics...

Vulnerability

3/2025

SAM333031125

Samsung Electronics...

Vulnerability

8/2024

SAM732051525

Samsung Electronics...

Vulnerability

6/2024

SAM313223109122...

Samsung Electronics...

Breach

100

11/2023

SAM1016261123

Samsung Electronics...

Data Leak

4/2023

SAM33929523

Samsung Electronics

Cyber Attack

100

10/2022

SAMNVI177578132...

Samsung Electronics...

Breach

7/2022

SAM709072725

Samsung Electronics...

Breach

7/2022

SAM203923922

Samsung Electronics...

Breach

100

3/2022

SAM211923922

Samsung Electronics...

Breach

6/2021

SAM010040325

Loading…

A.I.

SEC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SEC

Incidents vs Computers and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Samsung Electronics Chile in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Samsung Electronics Chile in 2026.

Incident Types SEC vs Computers and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Samsung Electronics Chile in 2026.

Incident History - SEC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Samsung Electronics Chile Subsidiaries

SEC

Computers and Electronics Manufacturing

Website: http://www.samsung.com/cl/business/

Company Size: 265

Samsung ElectronicsComputers and Electronics Manufacturing

Samsung Electronics AmericaComputers and Electronics Manufacturing

Samsung DisplayAppliances, Electrical, and Electronics Manufacturing

Samsung Networks텔레콤

Galaxy for BusinessAppliances, Electrical, and Electronics Manufacturing

Samsung SSDAppliances, Electrical, and Electronics Manufacturing

Samsung SemiconductorSemiconductor Manufacturing

Samsung IndiaComputers and Electronics Manufacturing

Samsung South AfricaComputers and Electronics Manufacturing

Samsung Business SAComputers and Electronics Manufacturing

Samsung Electronics ItaliaComputers and Electronics Manufacturing

Samsung BrasilComputers and Electronics Manufacturing

Samsung Healthcare의료장비 제조

Samsung Electronics MexicoComputers and Electronics Manufacturing

Samsung Electronics Southeast Asia & OceaniaComputers and Electronics Manufacturing

Samsung Electronics FranceIT Services and IT Consulting

Samsung KnoxInformation Technology & Services

Samsung AustraliaComputers and Electronics Manufacturing

Samsung Electronics UKAppliances, Electrical, and Electronics Manufacturing

Samsung Digital Appliances UK Training TeamComputers and Electronics Manufacturing

Samsung Electronics BeneluxComputers and Electronics Manufacturing

Samsung GulfAppliances, Electrical, and Electronics Manufacturing

Samsung EspañaComputers and Electronics Manufacturing

Samsung Electronics NordicComputers and Electronics Manufacturing

Samsung Electronics PolskaAppliances, Electrical, and Electronics Manufacturing

Samsung Research America (SRA)Software Development

Samsung SwitzerlandComputers and Electronics Manufacturing

Samsung GreeceComputers and Electronics Manufacturing

Samsung LED반도체 제조

Samsung Electronics AdriaticComputers and Electronics Manufacturing

Samsung Research연구 서비스

Samsung Electronics RomaniaAppliances, Electrical, and Electronics Manufacturing

Samsung GermanyAppliances, Electrical, and Electronics Manufacturing

Samsung Saudi Arabia for BusinessAppliances, Electrical, and Electronics Manufacturing

Samsung New ZealandComputers and Electronics Manufacturing

Samsung Electronics SingaporeComputers and Electronics Manufacturing

Samsung PortugalComputers and Electronics Manufacturing

Samsung Electronics BalticsComputers and Electronics Manufacturing

Samsung Electronics Czech Republic & SlovakiaComputers and Electronics Manufacturing

Samsung Electronics UkraineComputers and Electronics Manufacturing

Samsung AustriaComputers and Electronics Manufacturing

Loading…

Samsung Electronics Chile Similar Companies

Motorola Mobility (a Lenovo Company)

motorola.com

As part of the Lenovo family, Motorola Mobility is creating innovative smartphones and accessories designed with the consumer in mind. That’s why we’re looking for the thinkers, innovators and problem solvers who believe in working together to challenge the status quo. If you share our commitment to creativity and a passion for bringing new possibilities to life in mobile technology, we want you to say hello to Moto. Motorola has a long history of inventing game-changing technology. As a member of the Motorola team, you’ll help us continue our legacy by collaborating with talented colleagues around the globe to create new products that are not only different, but better. We thrive in an open and supportive culture, working in teams where your contribution has impact. We believe in transparency across all levels of the business, valuing every person’s opinion and encouraging new ways of thinking. Here, we all take accountability for our work, we drive consumer-centric decision-making, and we enable our people to push the line of innovation. Want in? Let’s get started on something different, together. Hello you. Hello Motorola. http://lenovocareers.com/areas-mobile.html

Canon USA

Canon.us

Living and Working Together For The Common Good... - Kyosei Kyosei unites Canon and its employees in contributing to the prosperity of humanity and the protection of the world we share. As a leading provider of consumer, business-to-business, and industrial digital imaging solutions, our determination to live and work together for the common good permeates everything we do, from research and development, to product manufacturing, marketing, sales and distribution.

Voltas Limited - A TATA Enterprise

cb voltas.com

Voltas is the No. 1* Room Air Conditioner Brand in India. Apart from ACs, Voltas offers a wide range of cooling products including Air Coolers, Commercial Refrigeration, Water Coolers and Water Dispensers. Apart from being the leaders in consumer products, Voltas is also one of the world's premier engineering solutions providers and project specialists. We offer engineering solutions for a wide spectrum of industries such as heating, ventilation, air conditioning, refrigeration, electro-mechanical projects, water management, mining, construction & textile.

LG Electronics

cb lge.com

Step into the innovative world of LG Electronics. As a global leader in technology, LG Electronics is dedicated to creating innovative solutions for a better life. Our brand promise, 'Life's Good', embodies our commitment to ensuring a happier, better life for all. With a rich history spanning over six decades and a global presence of more than 100 subsidiaries, we operate on a truly global scale. Since our establishment in 1958, our dedication to enhancing lives worldwide through innovative products has remained unwavering. Our business domains include Home Appliance & Air Solution, Home Entertainment, Vehicle Components Solutions, and Business Solutions. Our management philosophy, "Jeong-do Management," embodies our commitment to high ethical standards and transparent operations. Grounded in the principles of 'Customer-Value Creation' and 'People-Oriented Management', these values shape our corporate culture, fostering creativity, diversity, and integrity. At LG, we believe in the power of collective wisdom, fostering a collaborative work environment. Join us and become a part of a company that is not just about creating solutions for a better life, because at LG, Life's Good.

HARMAN International

harman.com

Headquartered in Stamford, Connecticut, HARMAN (harman.com) designs and engineers connected products and solutions for automakers, consumers, and enterprises worldwide, including connected car systems, audio and visual products, enterprise automation solutions; and services supporting the Internet of Things. With leading brands including AKG®, Harman Kardon®, Infinity®, JBL®, Lexicon®, Mark Levinson® and Revel®, HARMAN is admired by audiophiles, musicians and the entertainment venues where they perform around the world. More than 50 million automobiles on the road today are equipped with HARMAN audio and connected car systems. Our software services power billions of mobile devices and systems that are connected, integrated and secure across all platforms, from work and home to car and mobile. HARMAN has a workforce of approximately 30,000 people across the Americas, Europe, and Asia. In March 2017, HARMAN became a wholly-owned subsidiary of Samsung Electronics Co., Ltd. HARMAN is an Equal Opportunity, Affirmative Action employer. Minorities, women, veterans and individuals with disabilities are encouraged to apply. HARMAN offers a great work environment, challenging career opportunities, professional training and competitive compensation. Looking for a challenge where your experience is valued? Come see what you can achieve as a leader with HARMAN!

Garmin

garmin.com

WHERE DO WE START? How about Kansas City? That’s our home. That’s where Garmin put a stake in the ground in 1989. We’ve grown substantially over the years, offering diverse products and global reach in 5 diverse markets. But some things won’t ever change: Our entrepreneurial spirit and a culture where everyone’s opinion matters. That’s because we believe it’s possible to light the tech world on fire and still be on a first name basis. BIG IDEAS, SMALL EGOS What we do best is make products that let our customers do what they love. To do that, we focus on practical innovation, never losing sight of the benefits our products bring to our customers. Sure, we love bells and whistles. What leading technology company doesn't? But we make sure ours have purpose. It’s not about the things we make. It’s about the things we make possible. WE’RE GLOBAL, SERIOUSLY. Yeah, we’re based in Kansas City, but we are truly a global company. With offices throughout Europe, Asia, Middle East, South America and Australia, our products are sold all over the world. One elevator ride at our headquarters and you’re likely to hear 4 (or more) different languages being spoken. At Garmin, we may act local, but we think global. DREAM BIG. SLEEP WELL. At Garmin, we like to encourage dreamers. But at some point it’s nice to wake up and enjoy a fully aware life. So we make it super easy to achieve a good balance between working, dreaming and enjoying life—from workout classes offered throughout the day, breaks to get out and move on our campus, and wellness programs offered throughout the year. It’s almost impossible not to take advantage of Garmin’s work-life balance opportunities.

Apple

cb apple.com

We’re a diverse collective of thinkers and doers, continually reimagining what’s possible to help us all do what we love in new ways. And the same innovation that goes into our products also applies to our practices — strengthening our commitment to leave the world better than we found it. This is where your work can make a difference in people’s lives. Including your own. Apple is an equal opportunity employer that is committed to inclusion and diversity. Visit apple.com/careers to learn more.

Samsung Electronics

samsung.com

Samsung Electronics is a global leader in technology, opening new possibilities for people everywhere. Through relentless innovation and discovery, we are transforming the worlds of TVs, smartphones, wearable devices, tablets, digital appliances, network systems, medical devices, semiconductors and LED solutions. Samsung is also leading in the Internet of Things space through, among others, our Smart Home and Digital Health initiatives. Since being established in 1969, Samsung Electronics has grown into one of the world’s leading technology companies, and become recognized as one of the top 10 global brands. Our network now extends across the world, and Samsung takes great pride in the creativity and diversity of its talented people, who drive our growth. To discover more, please visit our website at www.samsung.com and our official newsroom at news.samsung.com

Loading…

NEWS

Samsung Electronics Chile CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 03, 2026 08:00 AM

Latin America Smartphone Market Size, Share & Growth, 2034

The Latin America smartphone market is expected to reach USD 102.79 billion by 2034, rising from USD 51.85 billion in 2026,...

Read Article

January 27, 2026 08:00 AM

Thales and Samsung form strategic alliance to raise the standard of mobile security and digital sovereignty in Latin America

Thales, a global technology leader in the Defense, Aerospace, Cybersecurity, and Digital sectors, and Samsung Electronics, announce today...

Read Article

December 04, 2025 08:00 AM

India retreats from mandatory cybersecurity app amid privacy concerns

The Indian government has scrapped its directive mandating the "Sanchar Saathi" cybersecurity app on new smartphones after just five days.

Read Article

December 03, 2025 08:00 AM

India drops plan to mandate pre-installation of cybersecurity app after vendor pushback

Telecom devices and platform news in emerging markets.

Read Article

November 10, 2025 08:00 AM

Cybersecurity and XR and Spatial Computing: Samsung's Technology Receives Multiple CES 2026 Awards

Innovations in mobile devices, home entertainment, appliances, and semiconductors win multiple CES® 2026 Innovation Awards.

Read Article

May 02, 2023 07:00 AM

Samsung bans staff from using ChatGPT after data leak

After staff leaked chip and device source code into the chatbot, the Korean electronics giant has taken action. Claudia Glover May 2, 2023.

Read Article

December 15, 2022 08:00 AM

Korea heavily dependent on China for battery minerals supply: report

Samsung SDI's battery cell manufacturing plant in Xian, China / Courtesy of Samsung SDIKorea has the highest foreign dependency among its...

Read Article

March 11, 2021 08:00 AM

Telefónica people moves: Cybersecurity & Cloud CIO named

Joseph Purnell is BTwatch and Vodafonewatch Editor and a Senior Reporter at TelcoTitans, contributing telecoms news analysis since 2019.

Read Article

January 10, 2020 08:00 AM

Why are Samsung smartphones talking to servers in China?

Galaxy 10+ user finds that Samsung's Device Care tool is powered by Chinese cybersecurity firm Qihoo 360.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18556

SUMMARY

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://uptime.n-able.com/

CVE-2026-55735

SUMMARY

Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revoke/3 in lib/guardian.ex decodes the supplied token with peek/1, which performs no signature verification (it only base64-decodes the JWT header and payload). The resulting unverified claims are forwarded directly to the configured token module's revoke callback and the implementation's on_revoke callback, a state-mutating sink. The sibling operations refresh/2 and exchange/4 both call decode_and_verify first, so the signature is checked before anything acts on the claims; revoke/3 is the only state-mutating path that acts on claims without verifying the signature. An attacker who knows or guesses a victim's identifying claim values (jti, sub) can forge a JWT carrying those claims, sign it with an arbitrary key, and submit it to any endpoint that funnels a caller-supplied token into Guardian.revoke/3 (the standard logout / session-revocation pattern). When the token module mutates state keyed by the claims (whitelist deletion or blacklist insertion, for example a GuardianDb-style store), the victim's legitimate session is evicted. This is an unauthenticated session-revocation denial of service; the attacker never needs the signing secret. This issue affects guardian: from 1.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55734

SUMMARY

Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exhaustion. This vulnerability is associated with program file lib/guardian/permissions.ex and program routines 'Elixir.Guardian.Permissions':encode_permissions!/1, 'Elixir.Guardian.Permissions':encode_permissions_into_claims!/2, 'Elixir.Guardian.Permissions':do_encode_permissions!/2. The Guardian.Permissions mixin installs a public encode_permissions!/1 function on every module that does use Guardian.Permissions. For each key of the supplied map, encode_permissions!/1 calls String.to_atom(to_string(k)) before any validation runs. The integer-value clause of do_encode_permissions!/2 then short-circuits straight to encoding without validating the key against the configured permission set, so a key with an integer value is interned as a fresh atom with no exception raised. Atoms are never garbage collected and the BEAM atom table is a fixed-size resource (default roughly 1,048,576 entries), so each unique attacker-chosen key permanently consumes one slot. An attacker who can influence a permission map that reaches encode_permissions!/1 (for example a permissions map read from a request body and passed into token issuance via encode_permissions_into_claims!/2) can mint an unbounded number of atoms and exhaust the atom table, crashing the entire BEAM node and every service running on it. The sibling decode_permissions/1 is not affected because it skips keys absent from the configured permission set. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55733

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Guardian.Permissions.AtomEncoding encodes permission scopes by passing arbitrary binaries to String.to_atom/1. When encode/3 in lib/guardian/permissions/atom_encoding.ex is called with a list, each binary entry is handled by the encode_value/3 binary clause, which calls String.to_atom(value) with no allow-list check. The perm_set argument (the application's small, finite set of legitimate permission names) is discarded, so any external string flows straight into atom creation. This encoder is selected with use Guardian.Permissions, encoding: Guardian.Permissions.AtomEncoding and reached through the imported encode/3 entry point. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that funnels attacker-influenced permission scopes (from a request body, a JWT claim, or other external input) into encode/3 therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node with system_limit, taking down every application running on it. The default encoder is Guardian.Permissions.BitwiseEncoding, which is not affected. This issue affects guardian: from 2.0.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54894

SUMMARY

Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Guardian.Plug.Keys derives connection and session namespace keys by passing arbitrary binaries to String.to_atom/1. base_key/1 in lib/guardian/plug/keys.ex converts any binary into the atom :"guardian_<input>", and the derived helpers claims_key/1, resource_key/1, and token_key/1 create a second atom on top of that. key_from_other/1 likewise converts a regex-captured binary through String.to_atom/1. The public specs advertise String.t() as a valid argument, so passing a string is documented usage, and higher-level entry points such as Guardian.Plug.current_token(conn, key: key) thread the caller-supplied key straight into these functions. String.to_atom/1 creates a brand-new atom for every previously unseen binary, atoms are never garbage collected, and the BEAM atom table is fixed at roughly 1,048,576 entries by default. An application that routes attacker-influenced data (a tenant identifier, header, or other request input) into a Guardian key therefore mints one permanent atom per distinct value. A modest stream of varied, unauthenticated input permanently consumes the atom table and crashes the BEAM node, taking down every application running on it. This issue affects guardian: from 0.1.0 before 2.4.1.

Published

Date2026-08-01

Updated

Date2026-08-01

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…