# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id](https://agentprime.io/advisories/CVE-2026-5082.md)
  `CVE-2026-5082` · CVE record: TOKUHIROM Amon2::Plugin::Web::CSRFDefender · CVSS 5.3 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Weak cryptography or TLS, CWE-340
- [lightrag-hku: JWT Algorithm Confusion Vulnerability](https://agentprime.io/advisories/GHSA-8ffj-4hx4-9pgf.md)
  `GHSA-8ffj-4hx4-9pgf`, `CVE-2026-39413`, `PYSEC-2026-2592` · PyPI `lightrag-hku`: affected `<1.4.14`, fixed in `1.4.14` · CVSS 4.2 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Weak cryptography or TLS
- [LiteLLM: Password hash exposure and pass-the-hash authentication bypass](https://agentprime.io/advisories/GHSA-69x8-hrgq-fjj8.md)
  `GHSA-69x8-hrgq-fjj8` · PyPI `litellm`: affected `<1.83.0`, fixed in `1.83.0` · CVSS 4.0, no score published · Not analysed yet · Published 8 Apr 2026 · Tags: Information disclosure, Weak cryptography or TLS
- [Botan has a certificate authentication bypass due to trust anchor confusion](https://agentprime.io/advisories/CVE-2026-34580.md)
  `CVE-2026-34580` · CVE record: randombit botan · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Apr 2026 · Tags: Weak cryptography or TLS
- [Semtech LR11xx Secure Boot Bypass](https://agentprime.io/advisories/CVE-2025-14859.md)
  `CVE-2025-14859` · CVE record: Semtech LR1110 and 2 more · CVSS 7.0 High · Not analysed yet · Published 7 Apr 2026 · Tags: Weak cryptography or TLS
- [OrangeHRM Uses AES-ECB for Sensitive Data Encryption Enables Pattern Disclosure](https://agentprime.io/advisories/CVE-2026-39349.md)
  `CVE-2026-39349` · CVE record: orangehrm orangehrm · CVSS 2.1 Low · Not analysed yet · Published 7 Apr 2026 · Tags: Weak cryptography or TLS
- [OpenClaw: Android accepted cleartext remote gateway endpoints and sent stored credentials over ws://](https://agentprime.io/advisories/GHSA-83f3-hh45-vfw9.md)
  `GHSA-83f3-hh45-vfw9`, `CVE-2026-40045` · npm `openclaw`: affected `<2026.4.2`, fixed in `2026.4.2` · CVSS 5.9 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: Information disclosure, Weak cryptography or TLS
- [OpenClaw: Forged Nostr DMs could create pairing state before signature verification](https://agentprime.io/advisories/GHSA-h43v-27wg-5mf9.md)
  `GHSA-h43v-27wg-5mf9`, `CVE-2026-41301` · npm `openclaw`: affected `>=2026.3.22, <2026.3.31`, fixed in `2026.3.31` · CVSS 6.9 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: Weak cryptography or TLS
- [Open Cluster Management (OCM): Cross-cluster privilege escalation via improper Kubernetes client certificate renewal validation](https://agentprime.io/advisories/GHSA-q4gv-pjmh-c735.md)
  `GHSA-q4gv-pjmh-c735`, `CVE-2026-4740`, `GO-2026-5564` · Go `open-cluster-management.io/ocm`: affected `<1.2.1`, fixed in `1.2.1` · CVSS 8.2 High · Not analysed yet · Published 7 Apr 2026 · Tags: Weak cryptography or TLS
- [OCSP designated-responder authorization bypass via missing signature verification](https://agentprime.io/advisories/CVE-2026-32144.md)
  `CVE-2026-32144` · CVE record: Erlang OTP · CVSS 7.6 High · Not analysed yet · Published 7 Apr 2026 · Tags: Weak cryptography or TLS
- [Bulwark Webmail S/MIME signature verification accepted self-signed certificates](https://agentprime.io/advisories/CVE-2026-35389.md)
  `CVE-2026-35389` · CVE record: bulwarkmail webmail · CVSS 8.7 High · Not analysed yet · Published 6 Apr 2026 · Tags: Weak cryptography or TLS
- [Meesho Online Shopping App com.meesho.supply endpoint risky encryption](https://agentprime.io/advisories/CVE-2026-5682.md)
  `CVE-2026-5682` · CVE record: Meesho Online Shopping App · CVSS 6.3 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Weak cryptography or TLS, CWE-310
- [OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter](https://agentprime.io/advisories/GHSA-9jpj-g8vv-j5mf.md)
  `GHSA-9jpj-g8vv-j5mf`, `CVE-2026-34511` · npm `openclaw`: affected `<2026.4.2`, fixed in `2026.4.2` · CVSS 6.0 Medium · Not analysed yet · Published 4 Apr 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Duplicate Advisory: OpenClaw: Gemini OAuth exposed the PKCE verifier through the OAuth state parameter](https://agentprime.io/advisories/GHSA-ch86-pxr9-j9h9.md)
  `GHSA-ch86-pxr9-j9h9` · npm `openclaw`: affected `<2026.4.2`, fixed in `2026.4.2` · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 3 Apr 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in identity provider connection components in Amazon Athena ODBC driver](https://agentprime.io/advisories/CVE-2026-35560.md)
  `CVE-2026-35560` · CVE record: Amazon Amazon Athena ODBC driver · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Apr 2026 · Tags: Weak cryptography or TLS
- [Rust-rpm-sequoia: rust-rpm-sequoia: denial of service via crafted rpm file during signature verification](https://agentprime.io/advisories/CVE-2026-2625.md)
  `CVE-2026-2625` · CVE record: Red Hat Red Hat Hardened Images and 2 more · CVSS 4.0 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Weak cryptography or TLS
- [Antrea has Missing Encryption of Sensitive Data](https://agentprime.io/advisories/GHSA-qcmw-8mm4-4p28.md)
  `GHSA-qcmw-8mm4-4p28`, `CVE-2026-34992`, `GO-2026-5579` · Go `antrea.io/antrea`: affected `<1.11.0-alpha.0.0.20260225185322-738bad662b20 || >=1.11.0 || >=2.5.0`, fixed in `1.11.0-alpha.0.0.20260225185322-738bad662b20` · CVSS 7.1 High · Not analysed yet · Published 3 Apr 2026 · Tags: Weak cryptography or TLS
- [fast-jwt: Incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key](https://agentprime.io/advisories/GHSA-mvf2-f6gm-w987.md)
  `GHSA-mvf2-f6gm-w987`, `CVE-2026-34950` · npm `fast-jwt`: affected `<6.2.0`, fixed in `6.2.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Apr 2026 · Tags: Weak cryptography or TLS, CWE-20
- [OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verification](https://agentprime.io/advisories/CVE-2026-34840.md)
  `CVE-2026-34840` · CVE record: OneUptime oneuptime · CVSS 8.1 High · Not analysed yet · Published 2 Apr 2026 · Tags: Weak cryptography or TLS
- [Convoy: JWT Signature Verification Bypass Allows Authentication as Arbitrary Users](https://agentprime.io/advisories/CVE-2026-33746.md)
  `CVE-2026-33746` · CVE record: ConvoyPanel panel · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Apr 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [S/MIME Signature Additional Certificate](https://agentprime.io/advisories/CVE-2026-29140.md)
  `CVE-2026-29140` · CVE record: SEPPmail Secure Email Gateway · CVSS 7.7 High · Not analysed yet · Published 2 Apr 2026 · Tags: Weak cryptography or TLS
- [Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster](https://agentprime.io/advisories/GHSA-gvrj-cjch-728p.md)
  `GHSA-gvrj-cjch-728p`, `CVE-2026-4370`, `GO-2026-5405` · Go `github.com/juju/juju`: affected `<=0.0.0-20260401092550-1c1ac1922b57`, no fixed version yet · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Apr 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-296
- [Tesla Fleet Telemetry allows spoofing telemetry for arbitrary vehicles via compromised vehicle credentials](https://agentprime.io/advisories/GHSA-prxj-3gcv-cqrh.md)
  `GHSA-prxj-3gcv-cqrh`, `GO-2026-5553` · Go `github.com/teslamotors/fleet-telemetry`: affected `<0.9.0`, fixed in `0.9.0` · CVSS 5.9 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Weak cryptography or TLS
- [StableLib Ed25519 Signature Malleability via Missing S < L Check](https://agentprime.io/advisories/GHSA-x3ff-w252-2g7j.md)
  `GHSA-x3ff-w252-2g7j` · npm `@stablelib/ed25519`: affected `<=2.0.2`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Weak cryptography or TLS
- [openssl-encrypt's unverified key bundle from_dict() + to_identity() path allows encryption to attacker keys](https://agentprime.io/advisories/GHSA-8h88-gxp3-j7pg.md)
  `GHSA-8h88-gxp3-j7pg`, `CVE-2026-74876`, `PYSEC-2026-3756` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Apr 2026 · Tags: Weak cryptography or TLS
- [Multiple vulnerabilities have been addressed in IBM Aspera Shares](https://agentprime.io/advisories/CVE-2025-13916.md)
  `CVE-2025-13916` · CVE record: IBM Aspera Shares · CVSS 5.9 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Weak cryptography or TLS
- [Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability](https://agentprime.io/advisories/CVE-2026-20042.md)
  `CVE-2026-20042` · CVE record: Cisco Cisco Nexus Dashboard · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Weak cryptography or TLS
- [An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0.](https://agentprime.io/advisories/CVE-2026-34872.md)
  `CVE-2026-34872` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Apr 2026 · Tags: Weak cryptography or TLS
- [An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0.](https://agentprime.io/advisories/CVE-2026-34871.md)
  `CVE-2026-34871` · CVE record · CVSS 6.7 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Weak cryptography or TLS
- [Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.](https://agentprime.io/advisories/CVE-2026-25834.md)
  `CVE-2026-25834` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Weak cryptography or TLS
- [openssl-encrypt has non-cryptographic PRNG used for steganography pixel selection](https://agentprime.io/advisories/GHSA-vfgx-5q85-58q3.md)
  `GHSA-vfgx-5q85-58q3`, `CVE-2026-74874`, `PYSEC-2026-3754` · PyPI `openssl-encrypt`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 8.7 High · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS
- [Cloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding)](https://agentprime.io/advisories/GHSA-f8xp-wvcx-p6f4.md)
  `GHSA-f8xp-wvcx-p6f4`, `CVE-2026-25726`, `GO-2026-5350` · Go `github.com/cloudreve/Cloudreve/v4`: affected `<4.0.0-20260205113604-ec9fdd33bc54`, fixed in `4.0.0-20260205113604-ec9fdd33bc54` · CVSS 8.1 High · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS
- [PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely](https://agentprime.io/advisories/CVE-2026-5087.md)
  `CVE-2026-5087` · CVE record: JJNAPIORK PAGI::Middleware::Session::Store::Cookie · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS, CWE-1204
- [jose vulnerable to untrusted JWK header key acceptance during signature verification](https://agentprime.io/advisories/CVE-2026-34240.md)
  `CVE-2026-34240` · CVE record: appsup-dart jose · CVSS 7.5 High · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS
- [RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB](https://agentprime.io/advisories/CVE-2026-34155.md)
  `CVE-2026-34155` · CVE record: rauc rauc · CVSS 7.2 High · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS, CWE-196
- [Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key](https://agentprime.io/advisories/CVE-2025-15618.md)
  `CVE-2025-15618` · CVE record: MOCK Business::OnlinePayment::StoredTransaction · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS, CWE-693
- [Session hijacking in PaperCut NG/MF embedded application for Konica Minolta devices](https://agentprime.io/advisories/CVE-2026-5115.md)
  `CVE-2026-5115` · CVE record: PaperCut Papercut NG/MF · CVSS 3.6 Low · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS
- [Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange](https://agentprime.io/advisories/GHSA-wrpj-755p-x363.md)
  `GHSA-wrpj-755p-x363`, `CVE-2026-32794`, `PYSEC-2026-2357` · PyPI `apache-airflow`: affected `>=1.10.0, <1.12.0`, fixed in `1.12.0` · CVSS 4.8 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Weak cryptography or TLS
- [Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass](https://agentprime.io/advisories/CVE-2026-32883.md)
  `CVE-2026-32883` · CVE record: randombit botan · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Weak cryptography or TLS
- [Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)](https://agentprime.io/advisories/CVE-2026-32884.md)
  `CVE-2026-32884` · CVE record: randombit botan · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Weak cryptography or TLS
- [OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow](https://agentprime.io/advisories/CVE-2026-31946.md)
  `CVE-2026-31946` · CVE record: OpenOLAT OpenOLAT · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Zebra has a Consensus Failure due to Improper Verification of V5 Transactions](https://agentprime.io/advisories/GHSA-3vmh-33xr-9cqh.md)
  `GHSA-3vmh-33xr-9cqh`, `CVE-2026-34377` · crates.io `zebra-consensus` and 1 more: affected `<5.0.1`, fixed in `5.0.1` · CVSS 8.4 High · Not analysed yet · Published 30 Mar 2026 · Tags: Weak cryptography or TLS
- [Weak hash in node](https://agentprime.io/advisories/CVE-2026-21717.md)
  `CVE-2026-21717` · CVE record: nodejs node · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Weak cryptography or TLS
- [nginx-ui Backup Restore Allows Tampering with Encrypted Backups](https://agentprime.io/advisories/GHSA-fhh2-gg7w-gwpq.md)
  `GHSA-fhh2-gg7w-gwpq`, `CVE-2026-33026`, `GO-2026-4903` · Go `github.com/0xJacky/Nginx-UI`: affected `<1.9.10-0.20260315015203-f61bcec547c0`, fixed in `1.9.10-0.20260315015203-f61bcec547c0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Information disclosure, Weak cryptography or TLS, CWE-354
- [Libsoup: libsoup: information disclosure via cleartext transmission of cookies during https tunnel establishment](https://agentprime.io/advisories/CVE-2026-5119.md)
  `CVE-2026-5119` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Weak cryptography or TLS
- [Duplicate Advisory: OpenClaw: Feishu webhook mode accepted forged events when only \`verificationToken\` was configured](https://agentprime.io/advisories/GHSA-vjqw-w5jr-g9w5.md)
  `GHSA-vjqw-w5jr-g9w5` · npm `openclaw`: affected `<2026.3.12`, fixed in `2026.3.12` · CVSS 8.6 High · Withdrawn · Not analysed yet · Published 29 Mar 2026 · Tags: Weak cryptography or TLS
- [HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids](https://agentprime.io/advisories/CVE-2026-3256.md)
  `CVE-2026-3256` · CVE record: KTAT HTTP::Session · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Mar 2026 · Tags: Weak cryptography or TLS, CWE-340
- [Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions](https://agentprime.io/advisories/CVE-2025-15604.md)
  `CVE-2025-15604` · CVE record: TOKUHIROM Amon2 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Mar 2026 · Tags: Weak cryptography or TLS, CWE-340
- [UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM](https://agentprime.io/advisories/CVE-2019-25652.md)
  `CVE-2019-25652` · CVE record: Ubiquiti UniFi Network Controller · CVSS 7.7 High · Not analysed yet · Published 27 Mar 2026 · Tags: Weak cryptography or TLS
- [Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control](https://agentprime.io/advisories/CVE-2019-25651.md)
  `CVE-2019-25651` · CVE record: Ubiquiti UniFi Network Controller and 4 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2026 · Tags: Weak cryptography or TLS
- [cryptography has incomplete DNS name constraint enforcement on peer names](https://agentprime.io/advisories/GHSA-m959-cc7f-wv43.md)
  `GHSA-m959-cc7f-wv43`, `CVE-2026-34073`, `PYSEC-2026-35` · PyPI `cryptography`: affected `<46.0.6`, fixed in `46.0.6` · CVSS 1.7 Low · Not analysed yet · Published 27 Mar 2026 · Tags: Weak cryptography or TLS
- [Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE](https://agentprime.io/advisories/CVE-2025-15612.md)
  `CVE-2025-15612` · CVE record: Wazuh Wazuh Provisioning Scripts (Agent Build Environment) · CVSS 6.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Weak cryptography or TLS, CWE-829
- [Incus does not verify combined fingerprint when downloading images from simplestreams servers](https://agentprime.io/advisories/GHSA-p8mm-23gg-jc9r.md)
  `GHSA-p8mm-23gg-jc9r`, `CVE-2026-33542`, `GO-2026-4882` · Go `github.com/lxc/incus/v6/client`: affected `<6.23.0`, fixed in `6.23.0` · CVSS 5.7 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Weak cryptography or TLS, CWE-354
- [Grafana Tempo has Inadequate Encryption Strength](https://agentprime.io/advisories/GHSA-ffqx-q65f-36jf.md)
  `GHSA-ffqx-q65f-36jf`, `CVE-2026-28377`, `GO-2026-5359` · Go `github.com/grafana/tempo`: affected `<2.10.3`, fixed in `2.10.3` · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2026 · Tags: Weak cryptography or TLS
- [Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)](https://agentprime.io/advisories/GHSA-2328-f5f3-gj25.md)
  `GHSA-2328-f5f3-gj25`, `CVE-2026-33896` · npm `node-forge`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 7.4 High · Not analysed yet · Published 26 Mar 2026 · Tags: Weak cryptography or TLS
- [Forge has signature forgery in Ed25519 due to missing S > L check](https://agentprime.io/advisories/GHSA-q67f-28xg-22rw.md)
  `GHSA-q67f-28xg-22rw`, `CVE-2026-33895` · npm `node-forge`: affected `<1.4.0`, fixed in `1.4.0` · CVSS 7.5 High · Not analysed yet · Published 26 Mar 2026 · Tags: Weak cryptography or TLS
- [libcrux has an Incorrect Check of Signer Response Norm During Verification](https://agentprime.io/advisories/GHSA-cp57-fq8g-qh6v.md)
  `GHSA-cp57-fq8g-qh6v`, `RUSTSEC-2026-0077` · crates.io `libcrux-ml-dsa`: affected `<0.0.8`, fixed in `0.0.8` · CVSS 4.0, no score published · Not analysed yet · Published 26 Mar 2026 · Tags: Weak cryptography or TLS
- [IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information](https://agentprime.io/advisories/CVE-2026-1014.md)
  `CVE-2026-1014` · CVE record: IBM InfoSphere Information Server · CVSS 6.5 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Weak cryptography or TLS
- [Multiple Vulnerabilities in IBM Concert Software](https://agentprime.io/advisories/CVE-2025-64648.md)
  `CVE-2025-64648` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Cisco IOS XE Software](https://agentprime.io/advisories/CVE-2026-20115.md)
  `CVE-2026-20115` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.1 Medium · Not analysed yet · Published 25 Mar 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTAzLTI1VDE2OjA4OjAxLjkxNzAwMFoiLCJDVkUtMjAyNi0yMDExNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA0LTA4VDA1OjUzOjE2Ljk2MzAwMFoiLCJDVkUtMjAyNi01MDgzIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA0LTA4VDA1OjUzOjE2Ljk2MzAwMFoiLCJDVkUtMjAyNi01MDgzIl0>. Everything for agents: <https://agentprime.io/llms.txt>.