# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Cleartext transmission of sensitive information in EZVIZ APP](https://agentprime.io/advisories/CVE-2026-32683.md)
  `CVE-2026-32683` · CVE record: EZVIZ EZVIZ APP · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Weak cryptography or TLS
- [Vert.x has a DoS via unbounded server-side SNI SslContext cache growth](https://agentprime.io/advisories/GHSA-3g76-f9xq-8vp6.md)
  `GHSA-3g76-f9xq-8vp6`, `CVE-2026-6860` · Maven `io.vertx:vertx-core`: affected `>=4.3.4, <=4.3.8 || >=4.4.0, <=4.4.9 || >=4.5.0, <4.5.27 || >=5.0.0, <5.0.12`, fixed in `4.5.27`, `5.0.12` · CVSS 6.9 Medium · Not analysed yet · Published 9 May 2026 · Tags: Weak cryptography or TLS, Denial of service
- [epa4all-client has a VAU Signature bypass](https://agentprime.io/advisories/GHSA-g8r3-5hwf-qp96.md)
  `GHSA-g8r3-5hwf-qp96`, `CVE-2026-44900` · Maven `com.oviva.telematik:epa4all-client`: affected `<1.2.1`, fixed in `1.2.1` · CVSS 8.1 High · Not analysed yet · Published 8 May 2026 · Tags: Weak cryptography or TLS
- [gitsign verify accepts signatures over go-git-normalized bytes, enabling trust confusion on malformed commits](https://agentprime.io/advisories/GHSA-7rmh-48mx-2vwc.md)
  `GHSA-7rmh-48mx-2vwc`, `CVE-2026-44309`, `GO-2026-5233` · Go `github.com/sigstore/gitsign`: affected `<0.16.0`, fixed in `0.16.0` · CVSS 5.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Weak cryptography or TLS
- [SolidCAM-GPPL-IDE: Path traversal in \`inc\` directive enables file probing and NTLM-hash leak](https://agentprime.io/advisories/CVE-2026-42213.md)
  `CVE-2026-42213` · CVE record: anzory SolidCAM-GPPL-IDE · CVSS 5.1 Medium · Not analysed yet · Published 8 May 2026 · Tags: Path traversal, Information disclosure, Weak cryptography or TLS, Server-side request forgery (SSRF)
- [Plunk: SNS webhook forgery](https://agentprime.io/advisories/CVE-2026-42193.md)
  `CVE-2026-42193` · CVE record: useplunk plunk · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Weak cryptography or TLS
- [OpenTelemetry.Exporter.Instana bypasses TLS certificate validation when a proxy is configured](https://agentprime.io/advisories/GHSA-wfr5-454p-mjc2.md)
  `GHSA-wfr5-454p-mjc2`, `CVE-2026-44213` · NuGet `OpenTelemetry.Exporter.Instana`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 6.5 Medium · Not analysed yet · Published 8 May 2026 · Tags: Weak cryptography or TLS
- [Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output](https://agentprime.io/advisories/GHSA-pvmv-cwg8-v6c8.md)
  `GHSA-pvmv-cwg8-v6c8`, `CVE-2026-104435` · crates.io `zebrad` and 1 more: affected `<4.4.1`, fixed in `4.4.1` · CVSS 8.3 High · Not analysed yet · Published 8 May 2026 · Tags: Weak cryptography or TLS, CWE-354, CWE-573
- [bitcoinj has a ScriptExecution P2PKH/P2WPKH Verification Bypass](https://agentprime.io/advisories/GHSA-hfcf-v2f8-x9pc.md)
  `GHSA-hfcf-v2f8-x9pc`, `CVE-2026-44714` · Maven `org.bitcoinj:bitcoinj-core`: affected `>=0.15, <0.17.1`, fixed in `0.17.1` · CVSS 7.5 High · Not analysed yet · Published 8 May 2026 · Tags: Weak cryptography or TLS
- [Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts](https://agentprime.io/advisories/CVE-2026-6659.md)
  `CVE-2026-6659` · CVE record: RSAVAGE Crypt::PasswdMD5 · CVSS 7.5 High · Not analysed yet · Published 8 May 2026 · Tags: Weak cryptography or TLS
- [ex_webrtc client-role handshake is missing DTLS peer fingerprint validation](https://agentprime.io/advisories/GHSA-qwfw-ggxw-577c.md)
  `GHSA-qwfw-ggxw-577c`, `CVE-2026-44700` · Hex `ex_webrtc`: affected `<0.15.1 || >=0.16.0, <0.16.1`, fixed in `0.15.1`, `0.16.1` · CVSS 8.7 High · Not analysed yet · Published 8 May 2026 · Tags: Weak cryptography or TLS
- [MAXHUB Pivot Client Application Use of a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/CVE-2026-6411.md)
  `CVE-2026-6411` · CVE record: MAXHUB MAXHUB Pivot client application · CVSS 7.3 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [Note Mark has a JWT Secret Weakness that allows Full Account Takeover via Token Forgery](https://agentprime.io/advisories/GHSA-q6mh-rqwh-g786.md)
  `GHSA-q6mh-rqwh-g786`, `CVE-2026-44523`, `GO-2026-5567` · Go `github.com/enchant97/note-mark/backend`: affected `<0.0.0-20260501152247-18b587758667`, fixed in `0.0.0-20260501152247-18b587758667` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs](https://agentprime.io/advisories/GHSA-cwfq-rfcr-8hmp.md)
  `GHSA-cwfq-rfcr-8hmp`, `CVE-2026-104437` · crates.io `zebrad`: affected `<4.4.0`, fixed in `4.4.0` · CVSS 8.3 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS, CWE-354, CWE-573
- [Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer](https://agentprime.io/advisories/GHSA-gq4h-3grw-2rhv.md)
  `GHSA-gq4h-3grw-2rhv`, `CVE-2026-44497` · crates.io `zebrad` and 1 more: affected `<4.4.0`, fixed in `4.4.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [Malicious module proxy can bypass checksum database in cmd/go](https://agentprime.io/advisories/GO-2026-4984.md)
  `GO-2026-4984`, `BIT-golang-2026-42501`, `CVE-2026-42501` · Go `toolchain`: affected `<1.25.10 || >=1.26.0-0, <1.26.3`, fixed in `1.25.10`, `1.26.3` · CVSS 7.5 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [GnuTLS backend silently skips certificate chain verification when verify_peer is false](https://agentprime.io/advisories/CVE-2026-42225.md)
  `CVE-2026-42225` · CVE record: pjsip pjproject · CVSS 8.2 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Ivanti Endpoint Manager Mobile](https://agentprime.io/advisories/CVE-2026-5787.md)
  `CVE-2026-5787` · CVE record: Ivanti Endpoint Manager Mobile · CVSS 8.9 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Ivanti Endpoint Manager Mobile](https://agentprime.io/advisories/CVE-2026-7821.md)
  `CVE-2026-7821` · CVE record: Ivanti Endpoint Manager Mobile · CVSS 7.4 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [Gnutls: gnutls: security bypass due to incorrect name constraint handling](https://agentprime.io/advisories/CVE-2026-42011.md)
  `CVE-2026-42011` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.4 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [RELATE: Predictable Token Generation in auth.py and exam.py](https://agentprime.io/advisories/CVE-2026-41505.md)
  `CVE-2026-41505` · CVE record: inducer relate · CVSS 8.7 High · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [CSS Parser: Improper Certificate Validation allows MITM injection of remote CSS content](https://agentprime.io/advisories/GHSA-ff6c-w6qf-7xqc.md)
  `GHSA-ff6c-w6qf-7xqc`, `CVE-2026-44312` · RubyGems `css_parser`: affected `<1.22.0 || >=2.0.0, <2.1.0`, fixed in `1.22.0`, `2.1.0` · CVSS 5.8 Medium · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS, CWE-829
- [OpenSearch has ineffective TLS certificate hostname verification](https://agentprime.io/advisories/GHSA-x5hg-x4gv-j98m.md)
  `GHSA-x5hg-x4gv-j98m` · Maven `org.opensearch.plugin:opensearch-security`: affected `>=2.18.0, <2.19.4.0 || >=3.0.0, <3.3.0.0`, fixed in `2.19.4.0`, `3.3.0.0` · CVSS 2.2 Low · Not analysed yet · Published 7 May 2026 · Tags: Weak cryptography or TLS
- [axonflow-sdk-java: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification](https://agentprime.io/advisories/GHSA-248h-974q-xrc2.md)
  `GHSA-248h-974q-xrc2` · Maven `com.getaxonflow:axonflow-sdk`: affected `<7.0.0`, fixed in `7.0.0` · CVSS 5.9 Medium · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS, CWE-345
- [axonflow-sdk-typescript: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification](https://agentprime.io/advisories/GHSA-mph8-9v29-pm42.md)
  `GHSA-mph8-9v29-pm42` · npm `@axonflow/sdk`: affected `<6.0.0`, fixed in `6.0.0` · CVSS 5.9 Medium · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS, CWE-345
- [axonflow-sdk-go: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification](https://agentprime.io/advisories/GHSA-mhc4-qq83-fmrr.md)
  `GHSA-mhc4-qq83-fmrr`, `GO-2026-5508` · Go `github.com/getaxonflow/axonflow-sdk-go/v5`: affected `<5.7.0`, fixed in `5.7.0` · CVSS 5.9 Medium · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS, CWE-345
- [axonflow-sdk-python: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification](https://agentprime.io/advisories/GHSA-7f4h-6264-89fr.md)
  `GHSA-7f4h-6264-89fr` · PyPI `axonflow`: affected `<6.7.0`, fixed in `6.7.0` · CVSS 5.9 Medium · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS, CWE-345
- [misp-modules has unsafe remote resource fetching in expansion](https://agentprime.io/advisories/GHSA-fhq3-2gf3-8f3j.md)
  `GHSA-fhq3-2gf3-8f3j`, `CVE-2026-44363`, `PYSEC-2026-2650` · PyPI `misp-modules`: affected `<3.0.8`, fixed in `3.0.8` · CVSS 5.8 Medium · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS, Server-side request forgery (SSRF)
- [fast-jwt: JWT auth bypass due to empty HMAC secret accepted by async key resolver](https://agentprime.io/advisories/GHSA-gmvf-9v4p-v8jc.md)
  `GHSA-gmvf-9v4p-v8jc`, `CVE-2026-44351` · npm `fast-jwt`: affected `<6.2.4`, fixed in `6.2.4` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2026 · Tags: Authentication bypass, Weak cryptography or TLS, Hard-coded credentials
- [Harvester's SUSE Virtualization Registration Client Vulnerable to MITM and DOS](https://agentprime.io/advisories/GHSA-pgh9-mpwc-8jjf.md)
  `GHSA-pgh9-mpwc-8jjf`, `CVE-2025-71261`, `GO-2026-5538` · Go `github.com/harvester/harvester`: affected `<1.8.0`, fixed in `1.8.0` · CVSS 8.6 High · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS
- [Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled](https://agentprime.io/advisories/GHSA-vr7c-r5gj-j3w5.md)
  `GHSA-vr7c-r5gj-j3w5`, `CVE-2026-44305`, `PYSEC-2026-2590` · PyPI `lemur`: affected `<1.9.0`, fixed in `1.9.0` · CVSS 6.8 Medium · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS
- [Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ](https://agentprime.io/advisories/CVE-2026-43134.md)
  `CVE-2026-43134` · CVE record: Linux Linux · CVSS 8.1 High · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS
- [HCL DFXAnalytics is affected by an Insufficient Transport Layer Protection vulnerability](https://agentprime.io/advisories/CVE-2025-59852.md)
  `CVE-2025-59852` · CVE record: HCL DFXAnalytics · CVSS 3.7 Low · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS
- [Paramiko rsakey.py allows the SHA-1 algorithm](https://agentprime.io/advisories/GHSA-r374-rxx8-8654.md)
  `GHSA-r374-rxx8-8654`, `CVE-2026-44405`, `PYSEC-2026-2858` · PyPI `paramiko`: affected `<5.0.0`, fixed in `5.0.0` · CVSS 3.4 Low · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS
- [Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs](https://agentprime.io/advisories/GHSA-2cwr-gcf9-pvxr.md)
  `GHSA-2cwr-gcf9-pvxr`, `CVE-2026-42155`, `PKSA-qjnm-jjkr-qktb` · Packagist `openmage/magento-lts`: affected `<20.18.0`, fixed in `20.18.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Weak cryptography or TLS, CWE-331
- [Sandboxie-Plus EditPassword hash entropy reduced from 160 bits to 80 bits due to incorrect nibble extraction](https://agentprime.io/advisories/CVE-2026-34527.md)
  `CVE-2026-34527` · CVE record: sandboxie-plus Sandboxie · CVSS 2.0 Low · Not analysed yet · Published 5 May 2026 · Tags: Weak cryptography or TLS
- [awslabs/tough Delegated Roles have a Signature Threshold Bypass](https://agentprime.io/advisories/GHSA-8m7c-8m39-rv4x.md)
  `GHSA-8m7c-8m39-rv4x`, `CVE-2026-6966` · crates.io `tough` and 1 more: affected `<0.22.0`, fixed in `0.22.0` · CVSS 7.0 High · Not analysed yet · Published 5 May 2026 · Tags: Weak cryptography or TLS
- [Langchain-Chatchat Uses Insufficiently Random Values](https://agentprime.io/advisories/GHSA-jv4p-mhmp-69vw.md)
  `GHSA-jv4p-mhmp-69vw`, `CVE-2026-7847`, `PYSEC-2026-2557` · PyPI `langchain-chatchat`: affected `<=0.3.1.3`, no fixed version yet · CVSS 2.1 Low · Not analysed yet · Published 5 May 2026 · Tags: Weak cryptography or TLS, CWE-310
- [Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/GHSA-wmvv-fhm6-w34x.md)
  `GHSA-wmvv-fhm6-w34x`, `CVE-2026-7845`, `PYSEC-2026-2558` · PyPI `langchain-chatchat`: affected `<=0.3.1.3`, no fixed version yet · CVSS 2.1 Low · Not analysed yet · Published 5 May 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in multiple RouterOS services](https://agentprime.io/advisories/CVE-2025-42611.md)
  `CVE-2025-42611` · CVE record: Mikrotik RouterOS · CVSS 6.5 Medium · Not analysed yet · Published 5 May 2026 · Tags: Weak cryptography or TLS
- [Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability](https://agentprime.io/advisories/GHSA-7pwc-h2j2-rjgj.md)
  `GHSA-7pwc-h2j2-rjgj`, `BIT-thrift-2026-43869`, `CVE-2026-43869` · Maven `org.apache.thrift:libthrift`: affected `<0.23.0`, fixed in `0.23.0` · CVSS 7.3 High · Not analysed yet · Published 5 May 2026 · Tags: Weak cryptography or TLS
- [pyload-ng: non-admin SETTINGS users can disable outbound TLS peer verification via unrestricted \`ssl_verify\` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)](https://agentprime.io/advisories/GHSA-ccxc-x975-4hh9.md)
  `GHSA-ccxc-x975-4hh9`, `CVE-2026-42312`, `PYSEC-2026-126` · PyPI `pyload-ng`: affected `<0.5.0b3.dev100`, fixed in `0.5.0b3.dev100` · CVSS 6.8 Medium · Not analysed yet · Published 4 May 2026 · Tags: Weak cryptography or TLS, Authentication bypass, Broken access control
- [Incus has an OVN TLS Verification that Accepts Peer-Supplied Roots](https://agentprime.io/advisories/GHSA-c839-4qxr-j4x3.md)
  `GHSA-c839-4qxr-j4x3`, `CVE-2026-40243`, `GO-2026-5319` · Go `github.com/lxc/incus/v6/cmd/incusd`: affected `<7.0.0`, fixed in `7.0.0` · CVSS 2.3 Low · Not analysed yet · Published 4 May 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Dolibarr has Insufficient Verification of Data Authenticity](https://agentprime.io/advisories/GHSA-jggh-5rmh-r6h5.md)
  `GHSA-jggh-5rmh-r6h5`, `CVE-2026-7689`, `PKSA-dxkr-sbbp-889v` · Packagist `dolibarr/dolibarr`: affected `<=15.0.3`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 3 May 2026 · Tags: Weak cryptography or TLS, CWE-345
- [TRENDnet TEW-821DAP Firmware Update ssi cleartext transmission](https://agentprime.io/advisories/CVE-2026-7610.md)
  `CVE-2026-7610` · CVE record: TRENDnet TEW-821DAP · CVSS 6.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Weak cryptography or TLS, CWE-310
- [apache-airflow-providers-smtp: No certificate validation on SMTP STARTTLS connections in SMTP provider](https://agentprime.io/advisories/GHSA-x8mh-94wc-33gv.md)
  `GHSA-x8mh-94wc-33gv`, `CVE-2026-41016`, `PYSEC-2026-24` · PyPI `apache-airflow-providers-smtp`: affected `>=2.0.0, <3.0.0`, fixed in `3.0.0` · CVSS 5.9 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Weak cryptography or TLS
- [Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely](https://agentprime.io/advisories/CVE-2026-5080.md)
  `CVE-2026-5080` · CVE record: BIGPRESH Dancer::Session::Abstract · CVSS 5.9 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Weak cryptography or TLS, CWE-340
- [Admidio Ignores SAML Signature Validation Result, Processes Forged AuthnRequests and LogoutRequests](https://agentprime.io/advisories/GHSA-25cw-98hg-g3cg.md)
  `GHSA-25cw-98hg-g3cg`, `CVE-2026-41669`, `PKSA-mwvm-8f5c-nh8q` · Packagist `admidio/admidio`: affected `<5.0.9`, fixed in `5.0.9` · CVSS 8.2 High · Not analysed yet · Published 29 Apr 2026 · Tags: Weak cryptography or TLS
- [CKAN has no certificate validation on STMP connection](https://agentprime.io/advisories/GHSA-mpfm-fpgx-647q.md)
  `GHSA-mpfm-fpgx-647q`, `CVE-2026-41132`, `PYSEC-2026-2419` · PyPI `ckan`: affected `<2.10.10 || >=2.11.0, <2.11.5`, fixed in `2.10.10`, `2.11.5` · CVSS 6.6 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Weak cryptography or TLS
- [Sensitive Data Exposure Vulnerability in e-Sushrut HMIS](https://agentprime.io/advisories/CVE-2026-42514.md)
  `CVE-2026-42514` · CVE record: CDAC-Noida e-Sushrut, Hospital Management Information System (HMIS) · CVSS 8.8 High · Not analysed yet · Published 29 Apr 2026 · Tags: Weak cryptography or TLS
- [Elastic Package Registry has Improper Verification of Cryptographic Signature](https://agentprime.io/advisories/GHSA-r727-5pf6-47r2.md)
  `GHSA-r727-5pf6-47r2`, `CVE-2026-33467`, `GO-2026-5611` · Go `github.com/elastic/package-registry`: affected `<1.38.0`, fixed in `1.38.0` · CVSS 5.9 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Weak cryptography or TLS
- [Netmaker does not verify JWT signatures for host tokens](https://agentprime.io/advisories/GHSA-qpv2-rwc8-c993.md)
  `GHSA-qpv2-rwc8-c993`, `CVE-2026-38651`, `GO-2026-5588` · Go `github.com/gravitl/netmaker`: affected `<1.5.0`, fixed in `1.5.0` · CVSS 8.2 High · Not analysed yet · Published 28 Apr 2026 · Tags: Weak cryptography or TLS
- [Apache Thrift has an issue with Java TSSLTransportFactory hostname verification](https://agentprime.io/advisories/GHSA-gf47-qgg5-9g9q.md)
  `GHSA-gf47-qgg5-9g9q`, `BIT-thrift-2026-41603`, `CVE-2026-41603` · Maven `org.apache.thrift:libthrift`: affected `<0.23.0`, fixed in `0.23.0` · CVSS 7.4 High · Not analysed yet · Published 28 Apr 2026 · Tags: Weak cryptography or TLS
- [Improper TLS Certificate Validation RCE via Malicious Update in DeskTime Time Tracking App](https://agentprime.io/advisories/CVE-2025-10539.md)
  `CVE-2025-10539` · CVE record: DeskTime DeskTime Time Tracking App · CVSS 4.8 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Weak cryptography or TLS, CWE-296, CWE-494
- [Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verification](https://agentprime.io/advisories/GHSA-mqvw-jfmh-93qq.md)
  `GHSA-mqvw-jfmh-93qq`, `CVE-2026-40974` · Maven `org.springframework.boot:spring-boot-cassandra`: affected `>=4.0.0, <4.0.6 || >=3.5.0, <3.5.14 || >=3.4.0, <=3.4.15 || >=3.3.0, <=3.3.18 || <=2.7.32`, fixed in `4.0.6`, `3.5.14` · CVSS 5.0 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Weak cryptography or TLS
- [Spring Boot's random value property source uses a weak PRNG unsuitable for secrets](https://agentprime.io/advisories/GHSA-m4x9-hx6x-2c43.md)
  `GHSA-m4x9-hx6x-2c43`, `CVE-2026-40975` · Maven `org.springframework.boot:spring-boot-cassandra`: affected `>=4.0.0, <4.0.6 || >=3.5.0, <3.5.14 || >=3.4.0, <=3.4.15 || >=3.3.0, <=3.3.18 || <=2.7.32`, fixed in `4.0.6`, `3.5.14` · CVSS 4.8 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Weak cryptography or TLS
- [Spring Boot's RabbitMQ auto-configuration doesn't perform hostname verification when connecting to the RabbitMQ broker](https://agentprime.io/advisories/GHSA-9vc8-qppq-wvxc.md)
  `GHSA-9vc8-qppq-wvxc`, `CVE-2026-40971` · Maven `org.springframework.boot:spring-boot-rabbitmq`: affected `>=4.0.0, <4.0.6 || >=3.5.0, <3.5.14`, fixed in `4.0.6`, `3.5.14` · CVSS 5.0 Medium · Not analysed yet · Published 28 Apr 2026 · Tags: Weak cryptography or TLS
- [Spring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsearch server.](https://agentprime.io/advisories/GHSA-c96x-rpm4-349p.md)
  `GHSA-c96x-rpm4-349p`, `CVE-2026-40970` · Maven `org.springframework.boot:spring-boot-elasticsearch`: affected `>=4.0.0, <4.0.6`, fixed in `4.0.6` · CVSS 5.0 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Weak cryptography or TLS
- [Apache Storm Prometheus Reporter vulnerable to Improper Certificate Validation via Global SSL Context Downgrade](https://agentprime.io/advisories/GHSA-82fm-wpc2-5pmp.md)
  `GHSA-82fm-wpc2-5pmp`, `CVE-2026-40557` · Maven `org.apache.storm:storm-metrics-prometheus`: affected `>=2.6.3, <2.8.7`, fixed in `2.8.7` · CVSS 4.8 Medium · Not analysed yet · Published 27 Apr 2026 · Tags: Weak cryptography or TLS
- [SmarterTools SmarterMail < Build 9610 Cryptographic Weakness via Weak RNG](https://agentprime.io/advisories/CVE-2026-40514.md)
  `CVE-2026-40514` · CVE record: SmarterTools Inc. SmarterMail · CVSS 8.2 High · Not analysed yet · Published 27 Apr 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA0LTI3VDE0OjIxOjQwLjU2NDAwMFoiLCJDVkUtMjAyNi00MDUxNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA1LTEwVDE5OjEwOjU3LjQ5MjAwMFoiLCJDVkUtMjAyNi00NTE3OSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA1LTEwVDE5OjEwOjU3LjQ5MjAwMFoiLCJDVkUtMjAyNi00NTE3OSJd>. Everything for agents: <https://agentprime.io/llms.txt>.