# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Hardcoded Cryptographic Keys and Weak IV Generation in linqi](https://agentprime.io/advisories/CVE-2026-11347.md)
  `CVE-2026-11347` · CVE record: linqi GmbH linqi · CVSS 8.5 High · Not analysed yet · Published 5 Jun 2026 · Tags: Hard-coded credentials, Weak cryptography or TLS
- [AdGuard Home: DoQ-to-UDP State Reduction and Source-Port Oracle](https://agentprime.io/advisories/GHSA-xgx4-4h9w-53pv.md)
  `GHSA-xgx4-4h9w-53pv`, `CVE-2026-47703`, `GO-2026-5756` · Go `github.com/AdguardTeam/AdGuardHome` and 1 more: affected `<0.107.75`, fixed in `0.107.75` · CVSS 6.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS, Race condition, CWE-346, CWE-662
- [milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery](https://agentprime.io/advisories/GHSA-jh6h-v6mp-h22v.md)
  `GHSA-jh6h-v6mp-h22v`, `BIT-milvus-2026-10814`, `CVE-2026-10814`, `GO-2026-5999` · Go `github.com/milvus-io/milvus`: affected `<0.10.3-0.20260602041816-3d932f1c3e06`, fixed in `0.10.3-0.20260602041816-3d932f1c3e06` · CVSS 2.0 Low · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake](https://agentprime.io/advisories/GHSA-76qh-xr7q-h39m.md)
  `GHSA-76qh-xr7q-h39m`, `CVE-2026-44393`, `PYSEC-2026-3492` · PyPI `oslo-messaging`: affected `>=1.0.0, <=17.3.0`, no fixed version yet · CVSS 7.4 High · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [LMCache: 16-bit multimodal hash collision can poison KV cache entries](https://agentprime.io/advisories/GHSA-3hh9-752g-5g22.md)
  `GHSA-3hh9-752g-5g22`, `CVE-2026-10813`, `PYSEC-2026-3480` · PyPI `lmcache`: affected `<=0.4.6`, no fixed version yet · CVSS 2.0 Low · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [kas's late signature validation may allow unnoticed repository manipulations](https://agentprime.io/advisories/GHSA-4vqc-wpwg-vh7j.md)
  `GHSA-4vqc-wpwg-vh7j`, `CVE-2026-47192`, `PYSEC-2026-2543` · PyPI `kas`: affected `>=4.8, <5.3`, fixed in `5.3` · CVSS 2.1 Low · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix](https://agentprime.io/advisories/GHSA-xfqj-4cr9-9gr5.md)
  `GHSA-xfqj-4cr9-9gr5`, `CVE-2026-10812`, `PYSEC-2026-3468` · PyPI `gptcache`: affected `<=0.1.44`, no fixed version yet · CVSS 2.0 Low · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [ms-swift: Image Cache Hash Collision via Missing Dimension Metadata](https://agentprime.io/advisories/GHSA-prfw-69r3-wqxf.md)
  `GHSA-prfw-69r3-wqxf`, `CVE-2026-10801`, `PYSEC-2026-3488` · PyPI `ms-swift`: affected `<=4.2.0`, no fixed version yet · CVSS 2.0 Low · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [A vulnerability has been found in Streamlit up to 1.53.0. Impacted is an unknown function in the library lib/streamlit/runtime/caching/hashing.py of the component Palette Handler. Such manipulation...](https://agentprime.io/advisories/GHSA-vqwp-45wm-r9r5.md)
  `GHSA-vqwp-45wm-r9r5`, `CVE-2026-10804`, `PYSEC-2026-212` · PyPI `streamlit`: affected `<1.53.1`, fixed in `1.53.1` · CVSS 2.0 Low · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Computation. This mani...](https://agentprime.io/advisories/GHSA-5qmp-p3c4-72qj.md)
  `GHSA-5qmp-p3c4-72qj`, `BIT-mlflow-2026-10803`, `CVE-2026-10803`, `PYSEC-2026-195` · PyPI `mlflow`: affected `<3.10.1`, fixed in `3.10.1` · CVSS 2.0 Low · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models](https://agentprime.io/advisories/CVE-2026-45432.md)
  `CVE-2026-45432` · CVE record: GX INDIA GX Earth 2022 and 1 more · CVSS 8.7 High · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash](https://agentprime.io/advisories/CVE-2026-10800.md)
  `CVE-2026-10800` · CVE record: PaddlePaddle FastDeploy · CVSS 2.0 Low · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [Permissive TrustAllCerts TLS Verification](https://agentprime.io/advisories/CVE-2026-50208.md)
  `CVE-2026-50208` · CVE record: Acer Connect M6E 5G Portable WiFi Router · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [Weak random number generator in Cloud Foundry Foundation windows-utilities-release](https://agentprime.io/advisories/CVE-2026-41858.md)
  `CVE-2026-41858` · CVE record: Cloud Foundry Foundation windows-utilities-release · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Cloud Foundry Foundation BOSH](https://agentprime.io/advisories/CVE-2026-41859.md)
  `CVE-2026-41859` · CVE record: Cloud Foundry Foundation BOSH · CVSS 7.1 High · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [Weak encryption in Cloud Foundry Foundation BOSH](https://agentprime.io/advisories/CVE-2026-41860.md)
  `CVE-2026-41860` · CVE record: Cloud Foundry Foundation BOSH · CVSS 7.1 High · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache of the component Audio Cache Key Handler. Performing a manipulation results in use of ...](https://agentprime.io/advisories/GHSA-6655-8ph2-63j3.md)
  `GHSA-6655-8ph2-63j3`, `CVE-2026-10783`, `PYSEC-2026-211` · PyPI `gradio`: affected `<=6.14.0`, no fixed version yet · CVSS 2.0 Low · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain root credentials and privileges via a bruteforce attack.](https://agentprime.io/advisories/CVE-2026-36182.md)
  `CVE-2026-36182` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Jun 2026 · Tags: Weak cryptography or TLS
- [mlrun: DataFrame hash collisions can cause dataset artifact path conflicts and silent data corruption](https://agentprime.io/advisories/GHSA-phx2-3w66-h4pw.md)
  `GHSA-phx2-3w66-h4pw`, `CVE-2026-10766`, `PYSEC-2026-3487` · PyPI `mlrun`: affected `<=1.12.0rc3`, no fixed version yet · CVSS 2.0 Low · Not analysed yet · Published 3 Jun 2026 · Tags: Weak cryptography or TLS
- [CVE-2026-8874](https://agentprime.io/advisories/CVE-2026-8874.md)
  `CVE-2026-8874` · CVE record: Securly Securly Chrome Extension · CVSS 7.1 High · Not analysed yet · Published 3 Jun 2026 · Tags: Weak cryptography or TLS
- [OP-TEE vulnerable to ECDH private key recovery](https://agentprime.io/advisories/CVE-2026-45614.md)
  `CVE-2026-45614` · CVE record: OP-TEE optee_os · CVSS 4.7 Medium · Not analysed yet · Published 3 Jun 2026 · Tags: Weak cryptography or TLS
- [Django fails to prevent reuse of a partially-initialized connection after a failed \`STARTTLS\` handshake](https://agentprime.io/advisories/GHSA-mm6v-q8q9-pgcf.md)
  `GHSA-mm6v-q8q9-pgcf`, `BIT-django-2026-7666`, `CVE-2026-7666`, `PYSEC-2026-200` · PyPI `django`: affected `>=5.2, <5.2.15 || >=6.0, <6.0.6`, fixed in `5.2.15`, `6.0.6` · CVSS 2.3 Low · Not analysed yet · Published 3 Jun 2026 · Tags: Weak cryptography or TLS
- [Django: signed cookies are vulnerable to salt namespace collisions](https://agentprime.io/advisories/GHSA-h7pc-vwp9-298g.md)
  `GHSA-h7pc-vwp9-298g`, `BIT-django-2026-6873`, `CVE-2026-6873`, `PYSEC-2026-199` · PyPI `django`: affected `<5.2.15 || >=6.0.0, <6.0.6`, fixed in `5.2.15`, `6.0.6` · CVSS 2.3 Low · Not analysed yet · Published 3 Jun 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Synology Note Station Client](https://agentprime.io/advisories/CVE-2023-52951.md)
  `CVE-2023-52951` · CVE record: Synology Synology Note Station Client · CVSS 5.9 Medium · Not analysed yet · Published 3 Jun 2026 · Tags: Weak cryptography or TLS
- [Mercusys AC12G (EU) V1 with firmware AC12G(EU)\_V1_200909 transmits DDNS credentials over plaintext HTTP with only Base64 encoding.](https://agentprime.io/advisories/CVE-2026-36610.md)
  `CVE-2026-36610` · CVE record · CVSS 5.9 Medium · Not analysed yet · Published 3 Jun 2026 · Tags: Weak cryptography or TLS, CWE-523
- [Mercusys AC12G (EU) V1 router with firmware AC12G(EU)\_V1_200909 uses a static authentication nonce that does not change between requests from the same source IP.](https://agentprime.io/advisories/CVE-2026-36609.md)
  `CVE-2026-36609` · CVE record · CVSS 7.3 High · Not analysed yet · Published 3 Jun 2026 · Tags: Weak cryptography or TLS, CWE-341
- [QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php](https://agentprime.io/advisories/CVE-2026-25861.md)
  `CVE-2026-25861` · CVE record: QloApps QloApps · CVSS 8.2 High · Not analysed yet · Published 2 Jun 2026 · Tags: Weak cryptography or TLS
- [HTTPS Fallback to HTTP in Graph Explorer](https://agentprime.io/advisories/CVE-2026-10584.md)
  `CVE-2026-10584` · CVE record: AWS Graph Explorer · CVSS 8.2 High · Not analysed yet · Published 2 Jun 2026 · Tags: Weak cryptography or TLS
- [CodexBar < 0.32.0 Session Cookie Exposure via HTTP Redirect](https://agentprime.io/advisories/CVE-2026-43625.md)
  `CVE-2026-43625` · CVE record: steipete CodexBar · CVSS 8.2 High · Not analysed yet · Published 1 Jun 2026 · Tags: Weak cryptography or TLS
- [kas checks out SHA-like git branches as valid commits](https://agentprime.io/advisories/GHSA-qjwp-hrq6-r26r.md)
  `GHSA-qjwp-hrq6-r26r`, `CVE-2026-47191`, `PYSEC-2026-2544` · PyPI `kas`: affected `<5.3`, fixed in `5.3` · CVSS 2.1 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Weak cryptography or TLS
- [Apache Airflow has no certificate validation on SMTP STARTTLS connections](https://agentprime.io/advisories/GHSA-799x-qp47-8qwq.md)
  `GHSA-799x-qp47-8qwq`, `BIT-airflow-2026-49267`, `CVE-2026-49267`, `PYSEC-2026-2346` · PyPI `apache-airflow`: affected `>=2.0.0, <3.2.2`, fixed in `3.2.2` · CVSS 5.9 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Weak cryptography or TLS
- [Apache Directory LDAP API lacks server certificate verification for LDAP hostnames](https://agentprime.io/advisories/GHSA-85rw-g4f4-jprr.md)
  `GHSA-85rw-g4f4-jprr`, `CVE-2026-35563` · Maven `org.apache.directory.api:api-ldap-client-api`: affected `>=2.0.0, <2.1.8`, fixed in `2.1.8` · CVSS 8.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: Weak cryptography or TLS
- [Missing authentication and clear‑text data transmission affecting Orca heat pumps](https://agentprime.io/advisories/CVE-2026-25599.md)
  `CVE-2026-25599` · CVE record: Orca Energy Orca heat pump and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Cross-site scripting (XSS), Authentication bypass, Weak cryptography or TLS
- [stigmem-node's federation peer registration lacked explicit out-of-band approval](https://agentprime.io/advisories/GHSA-9vp8-3hmv-8fgh.md)
  `GHSA-9vp8-3hmv-8fgh`, `CVE-2026-76242` · PyPI `stigmem-node`: affected `<0.9.0a2`, fixed in `0.9.0a2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2026 · Tags: Weak cryptography or TLS, CWE-345
- [stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation](https://agentprime.io/advisories/GHSA-jmfc-hfjq-pxcp.md)
  `GHSA-jmfc-hfjq-pxcp`, `CVE-2026-76244` · PyPI `stigmem-node`: affected `<0.9.0a2`, fixed in `0.9.0a2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 May 2026 · Tags: Weak cryptography or TLS, CWE-489
- [Symfony: Twilio SMS Notifier allows unauthenticated webhook injection due to missing X-Twilio-Signature verification](https://agentprime.io/advisories/GHSA-55rj-x2vc-4whq.md)
  `GHSA-55rj-x2vc-4whq`, `CVE-2026-47212`, `PKSA-fgw6-3k5j-cfkn`, `PKSA-rgzg-p3v4-grbh` · Packagist `symfony/symfony` and 1 more: affected `>=6.4.0, <6.4.40 || >=7.0.0, <7.4.12 || >=8.0.0, <8.0.12`, fixed in `6.4.40`, `7.4.12`, `8.0.12` · CVSS 6.9 Medium · Not analysed yet · Published 29 May 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [authentik's XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user](https://agentprime.io/advisories/GHSA-c3m2-jqmq-pvp3.md)
  `GHSA-c3m2-jqmq-pvp3`, `BIT-authentik-2026-47201`, `CVE-2026-47201` · Go `goauthentik.io`: affected `<0.0.0-20260528144335-a370d76d23c7`, fixed in `0.0.0-20260528144335-a370d76d23c7` · CVSS 8.5 High · Not analysed yet · Published 29 May 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-20
- [AgenticMail API/storage and outbound relay hardening fixes](https://agentprime.io/advisories/GHSA-wjjv-3mj2-39hf.md)
  `GHSA-wjjv-3mj2-39hf`, `CVE-2026-47255` · npm `@agenticmail/api` and 1 more: affected `<0.9.32`, fixed in `0.9.32` · CVSS 8.2 High · Not analysed yet · Published 29 May 2026 · Tags: SQL injection, Broken access control, Weak cryptography or TLS, Hard-coded credentials
- [MacGregor Voyage Data Recorder (VDR) G4e Use of Password Hash With Insufficient Computational Effort](https://agentprime.io/advisories/CVE-2026-44611.md)
  `CVE-2026-44611` · CVE record: Danelec MacGregor Voyage Data Recorder (VDR) G4e · CVSS 5.9 Medium · Not analysed yet · Published 29 May 2026 · Tags: Weak cryptography or TLS
- [Indian Scout Bobber 2025 WCM-to-ECM weak authentication](https://agentprime.io/advisories/CVE-2026-49323.md)
  `CVE-2026-49323` · CVE record: Indian Motorcycle Scout Bobber + Tech · CVSS 4.1 Medium · Not analysed yet · Published 29 May 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials, Authentication bypass
- [Indian Scout Bobber 2025 Infotainment-to-WCM weak authentication allows recovery of user PIN from observed exchange](https://agentprime.io/advisories/CVE-2026-49322.md)
  `CVE-2026-49322` · CVE record: Indian Motorcycle Scout Bobber + Tech · CVSS 4.1 Medium · Not analysed yet · Published 29 May 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Symfony's Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMAC — Unauthenticated Webhook Event Injection](https://agentprime.io/advisories/GHSA-59f3-vp2f-mp9w.md)
  `GHSA-59f3-vp2f-mp9w`, `CVE-2026-45755`, `PKSA-1jhn-nv8n-vjk2`, `PKSA-n517-312t-6vqg` · Packagist `symfony/mailtrap-mailer` and 1 more: affected `>=7.2.0, <7.4.12 || >=8.0.0, <8.0.12`, fixed in `7.4.12`, `8.0.12` · CVSS 6.9 Medium · Not analysed yet · Published 28 May 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C](https://agentprime.io/advisories/CVE-2026-34126.md)
  `CVE-2026-34126` · CVE record: TP-Link Systems Inc. Tapo L535E v1.0, v3.0 and 2 more · CVSS 7.3 High · Not analysed yet · Published 28 May 2026 · Tags: Weak cryptography or TLS
- [ex_aws_sns SigningCertURL not validated in verify_message/1](https://agentprime.io/advisories/GHSA-8jgf-23q5-x7xx.md)
  `GHSA-8jgf-23q5-x7xx`, `CVE-2026-47074`, `EEF-CVE-2026-47074` · Hex `ex_aws_sns`: affected `>=2.0.1, <2.3.5`, fixed in `2.3.5` · CVSS 8.7 High · Not analysed yet · Published 28 May 2026 · Tags: Weak cryptography or TLS
- [Keycloak has an Improper Verification of Cryptographic Signature issue](https://agentprime.io/advisories/GHSA-p3v8-fm5p-v84h.md)
  `GHSA-p3v8-fm5p-v84h`, `CVE-2026-9793` · Maven `org.keycloak:keycloak-services`: affected `<=26.6.4`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 28 May 2026 · Tags: Weak cryptography or TLS
- [Deno's TLS retry copies stale upgrade hook, risking plaintext traffic](https://agentprime.io/advisories/GHSA-chqv-56wv-7564.md)
  `GHSA-chqv-56wv-7564`, `CVE-2026-44726` · crates.io `deno`: affected `>=2.0.0, <2.7.8`, fixed in `2.7.8` · CVSS 7.4 High · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS
- [WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php](https://agentprime.io/advisories/CVE-2026-45027.md)
  `CVE-2026-45027` · CVE record: LabRedesCefetRJ WeGIA · CVSS 5.9 Medium · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS, CWE-759
- [nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification](https://agentprime.io/advisories/CVE-2026-42790.md)
  `CVE-2026-42790` · CVE record: Erlang OTP · CVSS 7.6 High · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS
- [OCSP responder certificate validity period not checked in public_key](https://agentprime.io/advisories/CVE-2026-42791.md)
  `CVE-2026-42791` · CVE record: Erlang OTP · CVSS 6.3 Medium · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS, CWE-672
- [Non-CA certificate accepted as intermediate issuer in public_key path validation](https://agentprime.io/advisories/CVE-2026-42789.md)
  `CVE-2026-42789` · CVE record: Erlang OTP · CVSS 7.0 High · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS, CWE-296
- [Cleartext transmission of sensitive information in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-47269.md)
  `CVE-2024-47269` · CVE record: Synology Surveillance Station · CVSS 4.9 Medium · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS
- [Insufficient Verification of Data Authenticity](https://agentprime.io/advisories/CVE-2025-41669.md)
  `CVE-2025-41669` · CVE record: Phoenix Contact AXC F 1152 and 4 more · CVSS 8.7 High · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS
- [Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass.](https://agentprime.io/advisories/CVE-2025-67903.md)
  `CVE-2025-67903` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS
- [Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring](https://agentprime.io/advisories/GHSA-9rfg-v8g9-9367.md)
  `GHSA-9rfg-v8g9-9367`, `CVE-2026-42462` · npm `@fedify/fedify`: affected `<1.9.11 || >=1.10.0, <1.10.10 || >=2.0.0, <2.0.18 || >=2.1.0, <2.1.14 || >=2.2.0, <2.2.3`, fixed in `1.9.11`, `1.10.10`, `2.0.18`, `2.1.14`, `2.2.3` · CVSS 7.0 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS, CWE-180, CWE-436, CWE-1289
- [netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte\[\] on failures](https://agentprime.io/advisories/GHSA-f659-372h-6x3x.md)
  `GHSA-f659-372h-6x3x`, `CVE-2026-41207` · Maven `io.netty.incubator:netty-incubator-codec-ohttp`: affected `<0.0.21.Final`, fixed in `0.0.21.Final` · CVSS 6.9 Medium · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS
- [Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available](https://agentprime.io/advisories/CVE-2026-8647.md)
  `CVE-2026-8647` · CVE record: MIK Crypt::ScryptKDF · CVSS 4.8 Medium · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS
- [Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name](https://agentprime.io/advisories/CVE-2026-42013.md)
  `CVE-2026-42013` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.2 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS
- [Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans](https://agentprime.io/advisories/CVE-2026-42012.md)
  `CVE-2026-42012` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.1 High · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS
- [MaxKB: Unsalted MD5 Password Hashing](https://agentprime.io/advisories/CVE-2026-45413.md)
  `CVE-2026-45413` · CVE record: 1Panel-dev MaxKB · CVSS 6.9 Medium · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS
- [Joomla! Core - \[20260518\] - Transport encryption downgrade for password and username reset links](https://agentprime.io/advisories/CVE-2026-48902.md)
  `CVE-2026-48902` · CVE record: Joomla! Project Joomla! CMS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA1LTI2VDE2OjQzOjMyLjgzNTAwMFoiLCJDVkUtMjAyNi00ODkwMiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA2LTA1VDEyOjE1OjExLjgzNTAwMFoiLCJDVkUtMjAyNi0xMTMyOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA2LTA1VDEyOjE1OjExLjgzNTAwMFoiLCJDVkUtMjAyNi0xMTMyOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.