# CWE-335.

Every Advisory and CVE whose sources give the weakness CWE-335, newest first.

## Records, newest first

- [Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state](https://agentprime.io/advisories/CVE-2026-118765.md)
  `CVE-2026-118765` · CVE record: randombit botan · CVSS 7.3 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-335
- [Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models](https://agentprime.io/advisories/CVE-2026-11730.md)
  `CVE-2026-11730` · CVE record: NETGEAR EX3700 and 1 more · CVSS 2.1 Low · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-335
- [RabbitMQ has predictable credential obfuscation seed value used in Shovel and Federation plugins](https://agentprime.io/advisories/GHSA-v9gv-xp36-jgj8.md)
  `GHSA-v9gv-xp36-jgj8`, `BIT-rabbitmq-2022-31008`, `CVE-2022-31008` · Hex `rabbit_common`: affected `>=3.8.0, <3.8.32 || >=3.9.0, <3.9.18 || >=3.10.0, <3.10.2`, fixed in `3.8.32`, `3.9.18`, `3.10.2` · CVSS 5.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Weak cryptography or TLS, CWE-335
- [Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes](https://agentprime.io/advisories/CVE-2026-11702.md)
  `CVE-2026-11702` · CVE record: DAVIDO Bytes::Random::Secure::Tiny · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-335
- [Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes](https://agentprime.io/advisories/CVE-2026-11625.md)
  `CVE-2026-11625` · CVE record: DAVIDO Bytes::Random::Secure · CVSS 7.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-335
- [CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking](https://agentprime.io/advisories/CVE-2026-41564.md)
  `CVE-2026-41564` · CVE record: MIK CryptX · CVSS 7.5 High · Not analysed yet · Published 23 Apr 2026 · Tags: Weak cryptography or TLS, CWE-335
- [Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).](https://agentprime.io/advisories/CVE-2026-25835.md)
  `CVE-2026-25835` · CVE record · CVSS 7.7 High · Not analysed yet · Published 1 Apr 2026 · Tags: CWE-335
- [Fault injection attack with ML-DSA and ML-KEM on ARM](https://agentprime.io/advisories/CVE-2026-3503.md)
  `CVE-2026-3503` · CVE record: wolfSSL Inc. wolfSSL (wolfCrypt) · CVSS 4.3 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-335
- [Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communic…](https://agentprime.io/advisories/CVE-2025-52578.md)
  `CVE-2025-52578` · CVE record: Gallagher High Sec End of Line Module · CVSS 5.7 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: CWE-335
- [NIH BRICS: NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67…](https://agentprime.io/advisories/CVE-2025-27580.md)
  `CVE-2025-27580` · CVE record: NIH BRICS · CVSS 7.5 High · Not analysed yet · Published 23 Apr 2025 · Tags: CWE-335
- [Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator](https://agentprime.io/advisories/GHSA-pff9-53m5-qr56.md)
  `GHSA-pff9-53m5-qr56`, `CVE-2025-24783` · Maven `org.apache.cocoon:cocoon-forms-impl` and 1 more: affected `<=2.3.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 27 Jan 2025 · Tags: CWE-335
- [ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG).](https://agentprime.io/advisories/CVE-2024-55566.md)
  `CVE-2024-55566` · CVE record · CVSS 6.6 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: CWE-335
- [QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which m…](https://agentprime.io/advisories/CVE-2024-36048.md)
  `CVE-2024-36048` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 May 2024 · Tags: CWE-335
- [Insufficient seeding of random number generator](https://agentprime.io/advisories/CVE-2024-1579.md)
  `CVE-2024-1579` · CVE record: Secomea GateManager · CVSS 8.1 High · Not analysed yet · Published 29 Apr 2024 · Tags: CWE-335
- [An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_header() function.](https://agentprime.io/advisories/CVE-2024-27632.md)
  `CVE-2024-27632` · CVE record · CVSS 8.8 High · Not analysed yet · Published 8 Apr 2024 · Tags: CWE-335
- [Cryptographically weak PRNG in Opinio 7.22](https://agentprime.io/advisories/CVE-2023-4472.md)
  `CVE-2023-4472` · CVE record: Objectplanet Opinio · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Feb 2024 · Tags: CWE-335
- [D-Link COVR 1200,1202,1203 v1.08 was discovered to have a predictable seed in a Pseudo-Random Number Generator.](https://agentprime.io/advisories/CVE-2022-42159.md)
  `CVE-2022-42159` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 13 Oct 2022 · Tags: CWE-335
- [Fastly Compute@Edge JS Runtime has fixed random number seed during compilation](https://agentprime.io/advisories/GHSA-cmr8-5w4c-44v8.md)
  `GHSA-cmr8-5w4c-44v8`, `CVE-2022-39218` · npm `@fastly/js-compute`: affected `>=0.4.0, <0.5.3`, fixed in `0.5.3` · CVSS 7.5 High · Not analysed yet · Published 20 Sept 2022 · Tags: Weak cryptography or TLS, CWE-335
- [Insecure PRNG use in random_password_generator](https://agentprime.io/advisories/GHSA-ggfx-h9xj-5v9c.md)
  `GHSA-ggfx-h9xj-5v9c`, `CVE-2019-25061` · RubyGems `random_password_generator`: affected `<=1.0.0`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 19 May 2022 · Tags: Weak cryptography or TLS, CWE-335
- [Cryptographic Issues in ECK](https://agentprime.io/advisories/GHSA-vfp4-xx6m-7vf6.md)
  `GHSA-vfp4-xx6m-7vf6`, `CVE-2020-7010` · Go `github.com/elastic/cloud-on-k8s`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 7.5 High · Not analysed yet · Published 15 Feb 2022 · Tags: CWE-335
- [Piwigo is image gallery software written in PHP.](https://agentprime.io/advisories/CVE-2016-3735.md)
  `CVE-2016-3735` · CVE record: Piwigo · No CVSS score · Not analysed yet · Published 28 Jan 2022 · Tags: CWE-335
- [Telenot complex: Insecure AES Key Generation](https://agentprime.io/advisories/CVE-2021-34600.md)
  `CVE-2021-34600` · CVE record: Telenot Electronic GmbH CompasX · CVSS 5.5 Medium · Not analysed yet · Published 20 Jan 2022 · Tags: CWE-335
- [Insecure random number generation in keypair](https://agentprime.io/advisories/GHSA-3f99-hvg4-qjwj.md)
  `GHSA-3f99-hvg4-qjwj`, `CVE-2021-41117` · npm `keypair`: affected `<1.0.4`, fixed in `1.0.4` · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2021 · Tags: CWE-335
- [Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization.](https://agentprime.io/advisories/CVE-2018-14647.md)
  `CVE-2018-14647` · CVE record: The Python Project Python · CVSS 5.3 Medium · EPSS 0.11 · Not analysed yet · Published 25 Sept 2018 · Tags: CWE-335, CWE-665
- [An issue was discovered on the D-Link DWR-932B router.](https://agentprime.io/advisories/CVE-2016-10180.md)
  `CVE-2016-10180` · CVE record · CVSS 7.5 High · Not analysed yet · Published 30 Jan 2017 · Tags: Weak cryptography or TLS, CWE-335, CWE-1241

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-335>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-335/>. Everything for agents: <https://agentprime.io/llms.txt>.