What is the official website of Scania Group ?

The official website of Scania Group is https://www.scania.com/.

What is Scania Group's cybersecurity risk score?

Scania Group has an AI-generated cybersecurity risk score of 657 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has Scania Group experienced?

According to Rankiteo, Scania Group currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Scania Group been affected by any supply chain cyber incidents ?

According to Rankiteo, Scania Group has been affected by a supply chain cyber incident involving CARIAD, with the incident ID NISSCATOYVOLKAWAVIJAG1775680268.

Does Scania Group have SOC 2 Type 1 certification ?

According to Rankiteo, Scania Group is not certified under SOC 2 Type 1.

Does Scania Group have SOC 2 Type 2 certification ?

According to Rankiteo, Scania Group does not hold a SOC 2 Type 2 certification.

Does Scania Group comply with GDPR ?

According to Rankiteo, Scania Group is not listed as GDPR compliant.

Does Scania Group have PCI DSS certification ?

According to Rankiteo, Scania Group does not currently maintain PCI DSS compliance.

Does Scania Group comply with HIPAA ?

According to Rankiteo, Scania Group is not compliant with HIPAA regulations.

Does Scania Group have ISO 27001 certification ?

According to Rankiteo,Scania Group is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Scania Group operate in ?

Scania Group operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does Scania Group have ?

Scania Group employs approximately 38,365 people worldwide.

Does Scania Group own any subsidiaries ?

Scania Group presently has no subsidiaries across any sectors.

How many LinkedIn followers does Scania Group have ?

Scania Group's official LinkedIn profile has approximately 684,946 followers.

What is the NAICS classification code for Scania Group ?

Scania Group is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does Scania Group have a Crunchbase profile ?

No, Scania Group does not have a profile on Crunchbase.

Does Scania Group have a LinkedIn profile ?

Yes, Scania Group maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/scania.

How many cybersecurity incidents has Scania Group experienced ?

As of August 3, 2026, Rankiteo reports that Scania Group has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Scania Group have ?

Scania Group has an estimated 13,022 peer or competitor companies worldwide.

What types of cybersecurity incidents has Scania Group faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Scania Group

Boost Score +25 with badge (5 left)

657

/1000

Weak

682

/1000

Weak

Scania Group Vendor Cyber Rating & Cyber Score

scania.com

Add Your Compliance Badge

Scania is a world-leading provider of transport solutions committed to a better tomorrow. Our purpose is to drive the shift towards a sustainable transport system. In doing so, we are creating a world of mobility that’s better for business, society and our environment. Employing more than 50,000 people in about 100 countries, Scania’s research and development is concentrated in Sweden, while production takes place in Europe and South America.

Scania Group A.I CyberSecurity Scoring

Scoring History

Scania Group

Scania Group CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Scania Group

Ransomware

100

11/2025

CARIAD

NISSCATOYVOLKAW...

Scania Group

Breach

6/2025

SCA301061725

Loading…

A.I.

Scania Group Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Scania Group

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Scania Group in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Scania Group in 2026.

Incident Types Scania Group vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Scania Group in 2026.

Incident History - Scania Group (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Scania Group Subsidiaries

Scania Group

Motor Vehicle Manufacturing

Website: https://www.scania.com/

Company Size: 10,000+ employees

Ventures and New Business - Scania GroupAutomation Machinery Manufacturing

Scania Latin AmericaMotor Vehicle Manufacturing

Scania BrasilAutomotive

Scania SverigeMotor Vehicle Manufacturing

Scania UKMotor Vehicle Manufacturing

VRS UKAutomotive

Scania ArgentinaMotor Vehicle Manufacturing

Scania FranceMotor Vehicle Manufacturing

Scania ChileMotor Vehicle Manufacturing

Scania NederlandAutomotive

Scania AustraliaMotor Vehicle Manufacturing

Scania ColombiaMotor Vehicle Manufacturing

Italscania S.p.A.Motor Vehicle Manufacturing

Scania TimeTransportation/Trucking/Railroad

Scania Time TVTruck Transportation

Scania West AfricaMotor Vehicle Manufacturing

Keltruck ScaniaWholesale Motor Vehicles and Parts

Codema ScaniaTruck Transportation

Scania East AfricaMotor Vehicle Manufacturing

Scania USAMotor Vehicle Manufacturing

Scania SpainMotor Vehicle Manufacturing

Scania SingaporeAutomotive

Scania Schweiz AGMotor Vehicle Manufacturing

Scania PolskaAutomotive

Scania DeutschlandMotor Vehicle Manufacturing

Scania BeneluxTransportation/Trucking/Railroad

Scania MalaysiaAutomotive

Scania Parts LogisticsTransportation, Logistics, Supply Chain and Storage

Scania Luleå | Ferruform AB |Motor Vehicle Manufacturing

Scania South AfricaTransportation/Trucking/Railroad

Scania BelgiumMotor Vehicle Manufacturing

Scania ÖsterreichMotor Vehicle Manufacturing

Scania UkraineMotor Vehicle Manufacturing

Scania LogisticsTransportation, Logistics, Supply Chain and Storage

Scania Hong KongMotor Vehicle Manufacturing

Scania New ZealandTruck Transportation

Scania MilanoMotor Vehicle Manufacturing

Scania Rhône-AlpesMotor Vehicle Manufacturing

Scania JapanMotor Vehicle Manufacturing

Scania BulgariaMotor Vehicle Manufacturing

Scania LatviaMotor Vehicle Manufacturing

Scania Eesti ASMotor Vehicle Manufacturing

SCANIA SlovakiaMotor Vehicle Manufacturing

Scania Fuel CardsOil and Gas

Scania Financial Services IrelandFinancial Services

Scania LuxembourgMotor Vehicle Manufacturing

Scania MagyarországAutomotive

Scania TanzaniaTruck Transportation

Scania Finance DACHFinancial Services

Scania ZambiaAutomotive

Scania Middle EastMotor Vehicle Manufacturing

Scania Industrial BatteriesIndustrial Machinery Manufacturing

Scania Finance New ZealandTruck Transportation

Scania Commerciale S.p.A.International Trade and Development

Scania Tanzania LtdTruck Transportation

Scania MarocMotor Vehicle Manufacturing

Scania OskarshamnMotor Vehicle Manufacturing

Scania PortugalMotor Vehicle Manufacturing

Scania LietuvaAutomotive

Scania Trucking LTDTransportation, Logistics, Supply Chain and Storage

Scania DanmarkTruck Transportation

SCANIA EAR (Scania East Adriatic Region)Automotive

Scania ThailandTruck Transportation

Scania Czech RepublicMotor Vehicle Manufacturing

Scania ChinaMotor Vehicle Manufacturing

Loading…

Scania Group Similar Companies

Volkswagen Group

volkswagenag.com

The Volkswagen Group with its headquarters in Wolfsburg is one of the world’s leading automobile manufacturers and the largest carmaker in Europe. The Group is made up of ten brands from seven European countries: Volkswagen, Volkswagen Nutzfahrzeuge, ŠKODA, SEAT, CUPRA, Audi, Lamborghini, Bentley, Porsche and Ducati. Our group sells vehicles in 153 countries and operates 114 production plants worldwide. Each working day, around 675,000 employees worldwide produce cars, are involved in vehicle-related services or work in the other fields of business. Our goal is to make mobility sustainable for us and for future generations. Our promise: With electric drive, digital networking and autonomous driving, we make the automobile clean, quiet, intelligent and safe. At the same time, our core product becomes even more emotional and offers a completely new driving experience. It is also becoming part of the solution when it comes to climate and environmental protection. In this way, the car can continue to be a cornerstone of contemporary, individual and affordable mobility in the future. #Shapingmobility Imprint & Legal: http://vw.de/legal-notice DAT: http://vw.de/dat

Michelin

michelin.com

Michelin is a world-leading manufacturer of life-changing composites and experiences. Pioneering materials science over more than 130 years, Michelin is uniquely positioned to make decisive contributions to human progress and a more sustainable world. Drawing on technological leadership in polymer composites, Michelin is constantly innovating to manufacture high-quality tires and components for critical applications in demanding fields as varied as mobility, construction, aeronautics, low-carbon energies, and healthcare. The care we put into our products and our intimate knowledge of consumer habits enable Michelin to offer its customers exceptional experiences, whether in terms of connected solutions and artificial intelligence for professional fleets, or for discovering the outstanding restaurants and hotels that the MICHELIN Guide recommends.

Ashok Leyland

ashokleyland.com

Ashok Leyland vehicles have built a reputation for reliability and ruggedness. The 5,00,000 vehicles we have put on the roads have considerably eased the additional pressure placed on road transportation in independent India. In the populous Indian metros, four out of the five State Transport Undertaking (STU) buses come from Ashok Leyland. Some of them like the double-decker and vestibule buses are unique models from Ashok Leyland, tailor-made for high-density routes. The blueprint prepared for the future reflected the global ambitions of the company, captured in four words: Global Standards, Global Markets. This was at a time when liberalisation and globalisation were not yet in the air. Ashok Leyland embarked on a major product and process upgradation to match world-class standards of technology. In the journey towards global standards of quality, Ashok Leyland reached a major milestone in 1993 when it became the first in India's automobile history to win the ISO 9002 certification. The more comprehensive ISO 9001 certification came in 1994, QS 9000 in 1998 and ISO 14001 certification for all vehicle manufacturing units in 2002. It has also become the first Indian auto company to receive the latest ISO/TS 16949 Corporate Certification (in July 2006) which is specific to the auto industry.

BMW Group

bmwgroup.com

With its four brands BMW, MINI, Rolls-Royce and BMW Motorrad, the BMW Group is the world’s leading premium manufacturer of automobiles and motorcycles and also provides premium financial services. The BMW Group production network comprises over 30 production sites worldwide; the company has a global sales network in more than 140 countries. In 2024, the BMW Group sold over 2.45 million passenger vehicles and more than 210,000 motorcycles worldwide. The profit before tax in the financial year 2024 was € 11.0 billion on revenues amounting to € 142.4 billion. As of 31 December 2024, the BMW Group had a workforce of 159,104 employees. The economic success of the BMW Group has always been based on long-term thinking and responsible action. Sustainability is a key element of the BMW Group’s corporate strategy and covers all products from the supply chain and production to the end of their useful life.

Hero MotoCorp

heromotocorp.com

Hero MotoCorp, the world’s largest two-wheeler company, is shaping the future of mobility for over 125 million riders across 48 countries. Our story began in 1984, founded by the visionary Chairman Emeritus, Dr. Brijmohan Lall Munjal, with a bold vision: to make mobility accessible and aspirational for millions. Under the dynamic leadership of Executive Chairman, Dr. Pawan Munjal, we have grown into a global force in innovation, sustainability, and purpose-driven growth. Driven by our vision to ‘Be the Future of Mobility,’ we are innovating for tomorrow with our emerging mobility brand, VIDA, and groundbreaking innovations like the Surge S32, recognized as one of TIME's Best Inventions of 2024. With world-class R&D hubs in India and Germany, and advanced green manufacturing across three countries, we’re building more than machines. We’re building momentum for the planet. From icons like Splendor and Karizma to our premium collaboration with Harley-Davidson, we deliver performance with purpose. Our commitment to sustainability runs deep - we've achieved zero waste-to-landfill and 455% water positivity, and our DJSI (Dow Jones Sustainability Index) recognition reflects our dedication to doing business the right way. Recognized by TIME as the World’s Best Organizations (2024) and Asia Pacific’s Best Companies (2025), we are an organization driven by values and powered by people. Hero MotoCorp is more than a workplace; it’s a launchpad for your boldest ambitions. Join us. Create. Collaborate. Inspire. Come, be the future of mobility.

Dana Incorporated

dana.com

In a world of constant motion, life is about balance. At Dana, our balanced approach considers the people, products, and planet that sustain us all. For 120 years, we've been powering innovation to move our world. Today, over 25,000 Dana people, in more than 20 countries, advance drive and motion systems, thermal and sealing technologies, and power management innovations. Supporting traditional, hybrid, and EV manufacturers, wherever the road takes us. We're not just adapting to the future of mobility. We're shaping it. Headquartered in Maumee, Ohio, United States — Dana reported sales of $7.7 billion in 2024. We were named among the "World's Most Ethical Companies 2025” by Ethisphere and as one of "America's Most Responsible Companies 2023" by Newsweek. We’re always looking for talented people to join the Dana team. For more, please visit https://jobs.dana.com.

Volvo Cars

cb volvocars.com

Everything we do starts with people. Our purpose is to provide freedom to move, in a personal, sustainable and safe way. We are committed to simplifying our customers’ lives by offering better technology solutions that improve their impact on the world and bringing the most advanced mobility innovations to protect them, their loved ones and the people around them. Volvo Cars’ continued success is the result of a collaborative, diverse, and inclusive working environment. The people of Volvo Cars are committed to making a difference in our world. Today, we are one of the most well-known and respected car brands, with over 40,000 employees across the globe. We believe in bringing out the best in each other and harnessing the true power of people. At Volvo Cars your career is designed around your talents and aspirations so you can reach your full potential. Join us on a journey of a lifetime as we create safety, autonomous driving and electrification technologies of tomorrow. Read about our privacy policy here: http://volvoca.rs/privacy

Harley-Davidson Motor Company

harley-davidson.com

In 1903, out of a small shed in Milwaukee, Wisconsin, four young men lit a cultural wildfire that would grow and spread across geographies and generations. Their innovation and imagination for what was possible on two wheels sparked a transportation revolution and lifestyle that would make Harley-Davidson the most desirable motorcycle brand in the world. • Our Mission: More than building machines, we stand for the timeless pursuit of adventure. Freedom for the soul. • Our Vision: Building our legend and leading our industry through innovation, evolution and emotion. Our Mission and Vision honor our past and help define our future. And what we hope you see in these guiding statements is a consumer-led company that’s driven to win, lead and deliver a Harley-Davidson experience that our riders expect and deserve – one where adventure and “freedom for the soul” are the payoff. To do this, we are redefining our culture to reignite the company’s soul and spirit. We are calling our cultural journey “H-D#1” represented by our recognizable #1 logo, introduced in 1969 to celebrate a National Racing Championship. The #1 logo is uniquely ours - an iconic symbol of winning and the hard work it takes to get there. The Hardwire is Harley-Davidson’s 2021-2025 strategic plan guided by our mission and vision. Our plan is targeting long-term profitable growth through focused efforts that extend and strengthen our brand and drive value for all stakeholders. The Hardwire is designed to enhance the desirability of Harley-Davidson and fuel our unique lifestyle brand. For more information, visit our company site: www.harley-davidson.com or our career site: jobs.harley-davidson.com

Toyota North America

cb toyota.com

At Toyota, we’re known for making some of the highest quality vehicles on the road. But there is more to our story. We believe in putting people first and creating opportunities for our team members to build careers as unique as they are. As one of the world’s most admired brands, we are leading the way to the future of mobility, so everyone can move freely, happily and comfortably. We have big dreams and believe that nothing is impossible. Ready to Dream, Do and Grow with us?

Loading…

NEWS

Scania Group CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 23, 2025 08:00 AM

More than 22 million Aflac customers impacted by June data breach

The company has begun notifying state regulators about the attack and sending breach notification letters to victims.

Read Article

November 07, 2025 08:00 AM

Major Cyber Attacks Targeting the Automotive Industry 2025

The automotive industry isn't just battling supply chain headaches and the race to electrification. It's also facing a relentless wave of...

Read Article

October 30, 2025 07:00 AM

Scania Appoints GMMCO as Dealer Partner to Expand India Operations

Swedish commercial vehicle manufacturer Scania has partnered with GMMCO Limited of the CKA Birla Group to strengthen its presence across...

Read Article

June 30, 2025 07:00 AM

Scania Confirms Data Breach that Leaked Insurance Claim Documents

Auto giant Scania has disclosed a data breach stemming from a third-party managed system in May 2025, which resulted in threat actors stealing insurance claim...

Read Article

June 24, 2025 07:00 AM

MSP cybersecurity news digest, June 24, 2025

Columbian users targeted through sophisticated Shadow Vector malware campaign, Swiss firm Chain IQ and Australian MSP Vertel hit with...

Read Article

June 22, 2025 07:00 AM

Weekly Cybersecurity News Recap – Top Vulnerabilities, Threat and Data Breaches

In our fast-paced, interconnected world, the dangers of cyberattacks are becoming more frequent and complex. That's why it's more important...

Read Article

June 19, 2025 07:00 AM

Transport Solution Company Scania Confirms Cybersecurity Incident

The company has stated that the malicious actors leveraged compromised credentials to gain access to its Financial Services systems, allowing...

Read Article

June 19, 2025 07:00 AM

Swedish Truck Giant Scania Investigating Hack

Swedish truck giant Scania is investigating a cybersecurity incident after a hacker offered to sell data allegedly stolen from its systems.

Read Article

June 19, 2025 07:00 AM

Scania admits leak of data after extortion attempt

Hacker stole 34000 files from a third-party managed website, trucking company says.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…