# CWE-323.

Every Advisory and CVE whose sources give the weakness CWE-323, newest first.

## Records, newest first

- [Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token](https://agentprime.io/advisories/CVE-2026-109140.md)
  `CVE-2026-109140` · CVE record: NLnet Labs Krill · CVSS 8.4 High · Not analysed yet · Published 2 Nov 2026 · Tags: CWE-323
- [Packet CTR reports a full success length after the counter is exhausted](https://agentprime.io/advisories/CVE-2026-71884.md)
  `CVE-2026-71884` · CVE record: Legion of the Bouncy Castle Inc. BC-LTS-JAVA · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2026 · Tags: CWE-323
- [AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization](https://agentprime.io/advisories/CVE-2026-15890.md)
  `CVE-2026-15890` · CVE record: zephyrproject zephyr · CVSS 5.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Race condition, CWE-323
- [wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records](https://agentprime.io/advisories/CVE-2026-81341.md)
  `CVE-2026-81341` · CVE record: wolfSSL Inc. wolfEngine · CVSS 6.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-323
- [wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record](https://agentprime.io/advisories/CVE-2026-81020.md)
  `CVE-2026-81020` · CVE record: wolfSSL Inc. wolfEngine · CVSS 7.4 High · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-323
- [wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record](https://agentprime.io/advisories/CVE-2026-81019.md)
  `CVE-2026-81019` · CVE record: wolfSSL Inc. wolfProvider · CVSS 7.4 High · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-323
- [ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter](https://agentprime.io/advisories/CVE-2026-50577.md)
  `CVE-2026-50577` · CVE record: fbeta-GmbH ePA3-Service-OpenSource · CVSS 7.4 High · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-323
- [Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement](https://agentprime.io/advisories/CVE-2026-17578.md)
  `CVE-2026-17578` · CVE record: Kong Kong Event Gateway · CVSS 2.3 Low · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-323
- [Reusing a Nonce, Key Pair in Encryption in HLOS](https://agentprime.io/advisories/CVE-2026-21383.md)
  `CVE-2026-21383` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 7.1 High · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-323
- [Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure](https://agentprime.io/advisories/CVE-2026-59099.md)
  `CVE-2026-59099` · CVE record: apereo cas · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-323
- [Session takeover vulnerability](https://agentprime.io/advisories/CVE-2026-13602.md)
  `CVE-2026-13602` · CVE record: pretix pretix and 4 more · CVSS 7.7 High · Not analysed yet · Published 1 Jul 2026 · Tags: CWE-20, CWE-323
- [AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse](https://agentprime.io/advisories/CVE-2026-55967.md)
  `CVE-2026-55967` · CVE record: wolfSSL wolfSSL · CVSS 2.0 Low · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-323
- [Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery](https://agentprime.io/advisories/CVE-2026-12205.md)
  `CVE-2026-12205` · CVE record: TIMLEGGE Crypt::DSA · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-323
- [Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle](https://agentprime.io/advisories/CVE-2026-49952.md)
  `CVE-2026-49952` · CVE record: Discuz! Discuz! X5.0 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-323
- [ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse](https://agentprime.io/advisories/GHSA-qv2q-c278-pch5.md)
  `GHSA-qv2q-c278-pch5`, `CVE-2026-56369` · NuGet `Magick.NET-Q16-AnyCPU` and 16 more: affected `<14.12.0`, fixed in `14.12.0` · CVSS 6.3 Medium · Not analysed yet · Published 21 May 2026 · Tags: Weak cryptography or TLS, CWE-323
- [Astro: Server island encrypted parameters vulnerable to cross-component replay](https://agentprime.io/advisories/GHSA-xr5h-phrj-8vxv.md)
  `GHSA-xr5h-phrj-8vxv`, `CVE-2026-45028` · npm `astro`: affected `<6.1.10`, fixed in `6.1.10` · CVSS 2.9 Low · Not analysed yet · Published 13 May 2026 · Tags: Cross-site scripting (XSS), CWE-323
- [Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks](https://agentprime.io/advisories/GHSA-574f-3g2m-x479.md)
  `GHSA-574f-3g2m-x479`, `CVE-2025-14813` · Maven `org.bouncycastle:bcprov-debug-jdk14` and 13 more: affected `>=1.59, <=1.80.1 || >=1.82, <1.84`, fixed in `1.84` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Apr 2026 · Tags: Weak cryptography or TLS, CWE-323
- [wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse](https://agentprime.io/advisories/CVE-2026-5446.md)
  `CVE-2026-5446` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-323
- [Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-3559.md)
  `CVE-2026-3559` · CVE record: Philips Hue Bridge · CVSS 8.1 High · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-323
- [Libsoup: libsoup: authentication bypass via digest authentication replay attack](https://agentprime.io/advisories/CVE-2026-3099.md)
  `CVE-2026-3099` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 12 Mar 2026 · Tags: CWE-323
- [RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)](https://agentprime.io/advisories/CVE-2026-30785.md)
  `CVE-2026-30785` · CVE record: rustdesk-client RustDesk Client · CVSS 8.2 High · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS, Prototype pollution, CWE-257, CWE-323
- [strongMan vulnerable to private credential recovery due to key and counter reuse](https://agentprime.io/advisories/CVE-2026-25998.md)
  `CVE-2026-25998` · CVE record: strongswan strongMan · CVSS 8.7 High · Not analysed yet · Published 19 Feb 2026 · Tags: CWE-323, CWE-1204
- [Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk](https://agentprime.io/advisories/CVE-2025-59870.md)
  `CVE-2025-59870` · CVE record: HCL Software MyXalytics · CVSS 7.4 High · Not analysed yet · Published 16 Jan 2026 · Tags: CWE-323
- [Reusing a Nonce, Key Pair in Encryption in Automotive Platform](https://agentprime.io/advisories/CVE-2025-47345.md)
  `CVE-2025-47345` · CVE record: Qualcomm, Inc. Snapdragon · CVSS 8.4 High · Not analysed yet · Published 6 Jan 2026 · Tags: CWE-323
- [Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption](https://agentprime.io/advisories/CVE-2025-61739.md)
  `CVE-2025-61739` · CVE record: Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG · CVSS 7.2 High · Not analysed yet · Published 22 Dec 2025 · Tags: CWE-323
- [@hpke/core reuses AEAD nonces](https://agentprime.io/advisories/GHSA-73g8-5h73-26h4.md)
  `GHSA-73g8-5h73-26h4`, `CVE-2025-64767` · npm `@hpke/core`: affected `<1.7.5`, fixed in `1.7.5` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Nov 2025 · Tags: CWE-323
- [Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted messages between cli…](https://agentprime.io/advisories/CVE-2025-46632.md)
  `CVE-2025-46632` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 1 May 2025 · Tags: CWE-323
- [In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association.](https://agentprime.io/advisories/CVE-2022-37660.md)
  `CVE-2022-37660` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-323
- [SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attack](https://agentprime.io/advisories/CVE-2024-11022.md)
  `CVE-2024-11022` · CVE record: SICK AG SICK InspectorP61x and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 6 Dec 2024 · Tags: CWE-323
- [Duplicate Advisory: cocoon Reuses a Nonce, Key Pair in Encryption](https://agentprime.io/advisories/GHSA-r2jw-c95q-rj29.md)
  `GHSA-r2jw-c95q-rj29`, `CVE-2024-21530`, `GHSA-6878-6wc2-pf5h`, `RUSTSEC-2023-0068` · crates.io `cocoon`: affected `<0.4.0`, fixed in `0.4.0` · CVSS 4.5 Medium · Withdrawn · Not analysed yet · Published 2 Oct 2024 · Tags: CWE-323
- [HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault](https://agentprime.io/advisories/GHSA-v84f-6r39-cpfc.md)
  `GHSA-v84f-6r39-cpfc`, `BIT-vault-2023-4680`, `CVE-2023-4680`, `GO-2023-2063` · Go `github.com/hashicorp/vault`: affected `>=1.6.0, <1.12.11 || >=1.13.0, <1.13.7 || >=1.14.0, <1.14.3`, fixed in `1.12.11`, `1.13.7`, `1.14.3` · CVSS 6.8 Medium · Not analysed yet · Published 21 Aug 2024 · Tags: CWE-323
- [PheonixAppAPI has visible Encoding Maps](https://agentprime.io/advisories/GHSA-258h-f687-4226.md)
  `GHSA-258h-f687-4226`, `CVE-2024-41951`, `PYSEC-2026-1779` · PyPI `pheonixappapi`: affected `<0.2.5`, fixed in `0.2.5` · CVSS 4.4 Medium · Not analysed yet · Published 31 Jul 2024 · Tags: CWE-323
- [Withdrawn: SFTPGo's JWT implmentation lacks certain security measures](https://agentprime.io/advisories/GHSA-x72p-g37q-4xr9.md)
  `GHSA-x72p-g37q-4xr9`, `CVE-2024-40430` · Go `github.com/drakkan/sftpgo/v2`: affected `<=2.6.2`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 22 Jul 2024 · Tags: Broken access control, CWE-323
- [Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS.](https://agentprime.io/advisories/CVE-2024-36289.md)
  `CVE-2024-36289` · CVE record: FreeFrom K.K. "FreeFrom - the nostr client" App for Android and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 17 Jun 2024 · Tags: CWE-323
- [BoringSSLAEADContext in Netty Repeats Nonces](https://agentprime.io/advisories/GHSA-g762-h86w-8749.md)
  `GHSA-g762-h86w-8749`, `CVE-2024-36121` · Maven `io.netty.incubator:netty-incubator-codec-ohttp`: affected `>=0.0.3.Final, <0.0.11.Final`, fixed in `0.0.11.Final` · CVSS 5.9 Medium · Not analysed yet · Published 5 Jun 2024 · Tags: Memory corruption, Information disclosure, CWE-323
- [CVE-2023-7003](https://agentprime.io/advisories/CVE-2023-7003.md)
  `CVE-2023-7003` · CVE record: Sciener Kontrol Lux · CVSS 6.8 Medium · Not analysed yet · Published 15 Mar 2024 · Tags: CWE-323
- [Duplicate Advisory: Discovery uses the same AES/GCM Nonce throughout the session](https://agentprime.io/advisories/GHSA-wp4m-7hpj-8qp8.md)
  `GHSA-wp4m-7hpj-8qp8` · Maven `tech.pegasys.discovery:discovery`: affected `<0.4.5`, fixed in `0.4.5` · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 20 Jan 2024 · Tags: Weak cryptography or TLS, CWE-323
- [Keystream recovery for arbitrary frames in TETRA](https://agentprime.io/advisories/CVE-2022-24401.md)
  `CVE-2022-24401` · CVE record: ETSI TETRA Standard · CVSS 8.8 High · Not analysed yet · Published 19 Oct 2023 · Tags: CWE-323
- [Discourse CSP nonce reuse vulnerability for anonymous users](https://agentprime.io/advisories/CVE-2023-37467.md)
  `CVE-2023-37467` · CVE record: discourse discourse · CVSS 6.8 Medium · Not analysed yet · Published 28 Jul 2023 · Tags: CWE-323
- [Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files](https://agentprime.io/advisories/CVE-2023-28997.md)
  `CVE-2023-28997` · CVE record: nextcloud security-advisories · CVSS 6.7 Medium · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-323
- [Inbound TCP Agent Protocol/3 authentication bypass in Jenkins](https://agentprime.io/advisories/GHSA-qp4f-2w67-c8hw.md)
  `GHSA-qp4f-2w67-c8hw`, `BIT-jenkins-2020-2099`, `CVE-2020-2099` · Maven `org.jenkins-ci.main:jenkins-core`: affected `<2.204.2 || >=2.205, <2.214`, fixed in `2.204.2`, `2.214` · CVSS 8.6 High · Not analysed yet · Published 24 May 2022 · Tags: Weak cryptography or TLS, CWE-323
- [Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc](https://agentprime.io/advisories/CVE-2021-32791.md)
  `CVE-2021-32791` · CVE record: zmartzone mod_auth_openidc · CVSS 5.9 Medium · Not analysed yet · Published 26 Jul 2021 · Tags: Weak cryptography or TLS, CWE-323
- [Discovery uses the same AES/GCM Nonce throughout the session](https://agentprime.io/advisories/GHSA-w3hj-wr2q-x83g.md)
  `GHSA-w3hj-wr2q-x83g`, `CVE-2024-23688` · Maven `tech.pegasys.discovery:discovery`: affected `<0.4.5`, fixed in `0.4.5` · CVSS 5.3 Medium · Not analysed yet · Published 6 Apr 2021 · Tags: Weak cryptography or TLS, CWE-323
- [ceph: A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container…](https://agentprime.io/advisories/CVE-2020-1759.md)
  `CVE-2020-1759` · CVE record: The Ceph Project ceph · CVSS 6.4 Medium · Not analysed yet · Published 13 Apr 2020 · Tags: CWE-323
- [Metasys use of shared RSA key pairs](https://agentprime.io/advisories/CVE-2019-7593.md)
  `CVE-2019-7593` · CVE record: Johnson Controls Metasys versions prior to 9.0 · CVSS 6.8 Medium · Not analysed yet · Published 20 Aug 2019 · Tags: CWE-323
- [Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the…](https://agentprime.io/advisories/CVE-2017-13088.md)
  `CVE-2017-13088` · CVE record: Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) · No CVSS score · Not analysed yet · Published 17 Oct 2017 · Tags: CWE-323
- [Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link…](https://agentprime.io/advisories/CVE-2017-13086.md)
  `CVE-2017-13086` · CVE record: Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) · No CVSS score · Not analysed yet · Published 17 Oct 2017 · Tags: CWE-323
- [Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the…](https://agentprime.io/advisories/CVE-2017-13084.md)
  `CVE-2017-13084` · CVE record: Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) · No CVSS score · Not analysed yet · Published 17 Oct 2017 · Tags: CWE-323
- [Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of…](https://agentprime.io/advisories/CVE-2017-13082.md)
  `CVE-2017-13082` · CVE record: Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) · No CVSS score · Not analysed yet · Published 17 Oct 2017 · Tags: CWE-323
- [Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of…](https://agentprime.io/advisories/CVE-2017-13081.md)
  `CVE-2017-13081` · CVE record: Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) · No CVSS score · Not analysed yet · Published 17 Oct 2017 · Tags: CWE-323
- [Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key…](https://agentprime.io/advisories/CVE-2017-13080.md)
  `CVE-2017-13080` · CVE record: Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) · No CVSS score · Not analysed yet · Published 17 Oct 2017 · Tags: CWE-323
- [Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of…](https://agentprime.io/advisories/CVE-2017-13079.md)
  `CVE-2017-13079` · CVE record: Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) · No CVSS score · Not analysed yet · Published 17 Oct 2017 · Tags: CWE-323
- [Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key…](https://agentprime.io/advisories/CVE-2017-13078.md)
  `CVE-2017-13078` · CVE record: Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2) · No CVSS score · Not analysed yet · Published 17 Oct 2017 · Tags: CWE-323
- [A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, Version 16.00 and pri…](https://agentprime.io/advisories/CVE-2017-7902.md)
  `CVE-2017-7902` · CVE record: Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 · No CVSS score · Not analysed yet · Published 30 Jun 2017 · Tags: CWE-323

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-323>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-323/>. Everything for agents: <https://agentprime.io/llms.txt>.