# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [CoreWCF: WS-Security signature substitution via document-wide Signature lookup](https://agentprime.io/advisories/GHSA-jc6x-rj79-w4mx.md)
  `GHSA-jc6x-rj79-w4mx`, `CVE-2026-54773` · NuGet `CoreWCF.Primitives`: affected `<1.8.1 || >=1.9.0, <1.9.1`, fixed in `1.8.1`, `1.9.1` · CVSS 5.9 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS
- [guzzlehttp/guzzle: Silent HTTPS-Proxy Downgrade to Cleartext](https://agentprime.io/advisories/GHSA-wpwq-4j6v-78m3.md)
  `GHSA-wpwq-4j6v-78m3`, `CVE-2026-55568`, `PKSA-k22t-f949-t9g6` · Packagist `guzzlehttp/guzzle`: affected `<7.12.1`, fixed in `7.12.1` · CVSS 5.9 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS, CWE-636
- [Weak random number generator in JetBrains Hub](https://agentprime.io/advisories/CVE-2026-56141.md)
  `CVE-2026-56141` · CVE record: JetBrains Hub · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jun 2026 · Tags: Weak cryptography or TLS
- [Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2026-50034.md)
  `CVE-2026-50034` · CVE record: Apollo Pharmacy Blood Glucose Monitoring System (Model No. APG-01 BT) · CVSS 7.1 High · Not analysed yet · Published 18 Jun 2026 · Tags: Weak cryptography or TLS
- [PHP JWT Framework: Chacha20Poly1305 key-encryption algorithm discards the Poly1305 authentication tag, performing no authentication on decryption](https://agentprime.io/advisories/GHSA-6vvh-pxr4-25r7.md)
  `GHSA-6vvh-pxr4-25r7` · Packagist `web-token/jwt-experimental` and 1 more: affected `<=4.1.6`, no fixed version yet · CVSS 4.0, no score published · Not analysed yet · Published 18 Jun 2026 · Tags: Weak cryptography or TLS, CWE-353
- [Mojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurely](https://agentprime.io/advisories/CVE-2026-9692.md)
  `CVE-2026-9692` · CVE record: HAYAJO Mojolicious::Sessions::Storable · CVSS 5.3 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Weak cryptography or TLS, CWE-340
- [undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent](https://agentprime.io/advisories/GHSA-vmh5-mc38-953g.md)
  `GHSA-vmh5-mc38-953g`, `CVE-2026-9697` · npm `undici`: affected `>=7.23.0, <7.28.0 || >=8.0.0, <8.5.0`, fixed in `7.28.0`, `8.5.0` · CVSS 7.4 High · Not analysed yet · Published 18 Jun 2026 · Tags: Weak cryptography or TLS
- [PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)](https://agentprime.io/advisories/GHSA-x92v-rpx6-p6cw.md)
  `GHSA-x92v-rpx6-p6cw`, `CVE-2026-57122`, `PYSEC-2026-3523` · PyPI `praisonai`: affected `<4.6.59`, fixed in `4.6.59` · CVSS 8.6 High · Not analysed yet · Published 18 Jun 2026 · Tags: Weak cryptography or TLS, CWE-345
- [PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missing](https://agentprime.io/advisories/GHSA-fc26-m9pf-v56q.md)
  `GHSA-fc26-m9pf-v56q`, `CVE-2026-56837`, `PYSEC-2026-3510` · PyPI `praisonai`: affected `>=4.6.56, <4.6.59`, fixed in `4.6.59` · CVSS 8.6 High · Not analysed yet · Published 18 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Dell PowerFlex](https://agentprime.io/advisories/CVE-2026-40641.md)
  `CVE-2026-40641` · CVE record: Dell PowerFlex · CVSS 4.8 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell PowerFlex Manager](https://agentprime.io/advisories/CVE-2024-47477.md)
  `CVE-2024-47477` · CVE record: Dell PowerFlex Manager · CVSS 6.5 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2026-12162.md)
  `CVE-2026-12162` · CVE record: Devolutions Remote Desktop Manager · CVSS 5.5 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Canon Inc. EOS Network Setting Tool for Windows and others](https://agentprime.io/advisories/CVE-2026-9261.md)
  `CVE-2026-9261` · CVE record: Canon Inc. EOS Network Setting Tool for Windows and 1 more · CVSS 7.6 High · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Canon Inc. EOS Network Setting Tool for Windows and others](https://agentprime.io/advisories/CVE-2026-9259.md)
  `CVE-2026-9259` · CVE record: Canon Inc. EOS Network Setting Tool for Windows and 1 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Canon Inc. EOS Network Setting Tool for Windows and others](https://agentprime.io/advisories/CVE-2026-9258.md)
  `CVE-2026-9258` · CVE record: Canon Inc. EOS Network Setting Tool for Windows and 1 more · CVSS 7.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [Dancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonce](https://agentprime.io/advisories/CVE-2026-11832.md)
  `CVE-2026-11832` · CVE record: BIAFRA Dancer2::Plugin::Auth::OAuth · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [Netty: Wrapping plain trust manager silently disables hostname verification](https://agentprime.io/advisories/GHSA-c653-97m9-rcg9.md)
  `GHSA-c653-97m9-rcg9`, `CVE-2026-50010` · Maven `io.netty:netty-handler`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [Netty: QUIC stateless reset token material exposed through header-visible connection IDs](https://agentprime.io/advisories/GHSA-cq4q-cv5g-r8q5.md)
  `GHSA-cq4q-cv5g-r8q5`, `CVE-2026-50009` · Maven `io.netty:netty-codec-classes-quic`: affected `>=4.2.0.Final, <4.2.15.Final`, fixed in `4.2.15.Final` · CVSS 4.8 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Information disclosure, Weak cryptography or TLS
- [WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability](https://agentprime.io/advisories/CVE-2026-42743.md)
  `CVE-2026-42743` · CVE record: ThemeGrill Masteriyo - LMS · CVSS 6.5 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections](https://agentprime.io/advisories/GHSA-4m7w-qmgq-4wj5.md)
  `GHSA-4m7w-qmgq-4wj5`, `CVE-2026-54275`, `PYSEC-2026-237` · PyPI `aiohttp`: affected `<3.14.1`, fixed in `3.14.1` · CVSS 2.7 Low · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed](https://agentprime.io/advisories/GHSA-xgmm-8j9v-c9wx.md)
  `GHSA-xgmm-8j9v-c9wx`, `CVE-2026-48526`, `PYSEC-2026-179` · PyPI `pyjwt`: affected `<2.13.0`, fixed in `2.13.0` · CVSS 7.4 High · Not analysed yet · Published 15 Jun 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [PyJWT: Algorithm allow-list bypass when decoding with \`PyJWK\` / \`PyJWKClient\` keys](https://agentprime.io/advisories/GHSA-jq35-7prp-9v3f.md)
  `GHSA-jq35-7prp-9v3f`, `CVE-2026-48523`, `PYSEC-2026-176` · PyPI `pyjwt`: affected `>=2.9.0, <2.13.0`, fixed in `2.13.0` · CVSS 5.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception](https://agentprime.io/advisories/GHSA-r7g4-qg5f-qqm2.md)
  `GHSA-r7g4-qg5f-qqm2`, `CVE-2026-82662` · npm `nodemailer`: affected `<8.0.8`, fixed in `8.0.8` · CVSS 8.3 High · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Request: Signature Algorithm Downgrade](https://agentprime.io/advisories/GHSA-rrj9-5q2j-4gvr.md)
  `GHSA-rrj9-5q2j-4gvr`, `CVE-2026-48747`, `PKSA-9y9v-rcsm-h82j`, `PKSA-v1cq-8qyb-2p5n` · Packagist `symfony/mailomat-mailer` and 1 more: affected `>=7.2.0, <7.4.13 || >=8.0.0, <8.0.13`, fixed in `7.4.13`, `8.0.13` · CVSS 6.3 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS, CWE-757
- [@angular/common: Weak 32-Bit Cache Key Hashing in \`HttpTransferCache\` Leading to Cross-Request Data Leakage and State Poisoning](https://agentprime.io/advisories/GHSA-39pv-4j6c-2g6v.md)
  `GHSA-39pv-4j6c-2g6v`, `CVE-2026-54266` · npm `@angular/common`: affected `<=19.2.25 || >=20.0.0-next.0, <20.3.25 || >=21.0.0-next.0, <21.2.17 || >=22.0.0-next.0, <22.0.1`, fixed in `20.3.25`, `21.2.17`, `22.0.1` · CVSS 8.8 High · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS, CWE-345
- [In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client authentication), which allows impersonation with certificate…](https://agentprime.io/advisories/CVE-2026-45389.md)
  `CVE-2026-45389` · CVE record · CVSS 7.4 High · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [In OCaml-TLS before 2.1.0, the client implementation does insufficient checks of the certificate provided by the server, which allows impersonation with certificates that are not meant for server aut…](https://agentprime.io/advisories/CVE-2026-45388.md)
  `CVE-2026-45388` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS
- [SimpleHelp Authentication Bypass via Missing OIDC JWT Signature Verification](https://agentprime.io/advisories/CVE-2026-48558.md)
  `CVE-2026-48558` · CVE record: SimpleHelp SimpleHelp · CVSS 9.5 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.80 · Not analysed yet · Published 12 Jun 2026 · Tags: Weak cryptography or TLS
- [Aqara unauthenticated AES oracle](https://agentprime.io/advisories/CVE-2026-50086.md)
  `CVE-2026-50086` · CVE record: Aqara Aqara IAM/SSO Gateway · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2026 · Tags: Weak cryptography or TLS
- [Crypt::PBKDF2 versions before 0.261630 for Perl have a weak default algorithm and number of iterations](https://agentprime.io/advisories/CVE-2026-9641.md)
  `CVE-2026-9641` · CVE record: ARODLAND Crypt::PBKDF2 · CVSS 5.3 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Weak cryptography or TLS
- [Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts](https://agentprime.io/advisories/CVE-2026-9638.md)
  `CVE-2026-9638` · CVE record: ARODLAND Crypt::PBKDF2 · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2026 · Tags: Weak cryptography or TLS
- [Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry](https://agentprime.io/advisories/GHSA-33j8-j763-4fv5.md)
  `GHSA-33j8-j763-4fv5`, `CVE-2026-50634` · Maven `org.apache.cxf:cxf-rt-rs-security-jose-jaxrs`: affected `>=4.2.0, <4.2.2 || <4.1.7`, fixed in `4.2.2`, `4.1.7` · CVSS 6.5 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Weak cryptography or TLS
- [Idira Vendor PAM - Self-Hosted Connector: Potential Security Bypass due to Incomplete TLS Certificate Validation](https://agentprime.io/advisories/CVE-2026-45170.md)
  `CVE-2026-45170` · CVE record: CyberArk Software, a Palo Alto Networks Company Vendor PAM · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2026 · Tags: Weak cryptography or TLS
- [UAA accepts SAML Encrypted Assertions authentication bypass](https://agentprime.io/advisories/CVE-2026-41005.md)
  `CVE-2026-41005` · CVE record: Cloud Foundry UAA and 1 more · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2026 · Tags: Weak cryptography or TLS
- [Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Validation Bypass in Internal Agent Validation Processes](https://agentprime.io/advisories/CVE-2026-45175.md)
  `CVE-2026-45175` · CVE record: CyberArk Software, a Palo Alto Networks Company Idira Endpoint Privilege Manager · CVSS 8.5 High · Not analysed yet · Published 11 Jun 2026 · Tags: Weak cryptography or TLS
- [@hapi/wreck: Sensitive credential headers leak across cross-port and cross-scheme redirects](https://agentprime.io/advisories/GHSA-x426-x7cc-3fpc.md)
  `GHSA-x426-x7cc-3fpc`, `CVE-2026-48022` · npm `@hapi/wreck`: affected `<18.1.2`, fixed in `18.1.2` · CVSS 6.5 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Information disclosure, Weak cryptography or TLS, Hard-coded credentials, CWE-346
- [Spring Web Services: Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default](https://agentprime.io/advisories/GHSA-p7qj-2q5w-f9r7.md)
  `GHSA-p7qj-2q5w-f9r7`, `CVE-2026-40996` · Maven `org.springframework.ws:spring-ws-security`: affected `>=5.0.0, <5.0.2 || >=4.1.0, <4.1.4 || >=4.0.0, <=4.0.18 || >=3.1.0, <=3.1.8`, fixed in `5.0.2`, `4.1.4` · CVSS 4.8 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Weak cryptography or TLS
- [Spring Boot's Mail Auto-Configuration Does Not Enable SSL Hostname Verification](https://agentprime.io/advisories/GHSA-9wxp-w4px-32vh.md)
  `GHSA-9wxp-w4px-32vh`, `CVE-2026-40992` · Maven `org.springframework.boot:spring-boot-starter-mail`: affected `>=4.0.0, <4.0.7 || >=3.5.0, <3.5.15 || >=3.4.0, <=3.4.16`, fixed in `4.0.7`, `3.5.15` · CVSS 5.0 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Weak cryptography or TLS
- [UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc](https://agentprime.io/advisories/CVE-2026-10795.md)
  `CVE-2026-10795` · CVE record: davidanderson UpdraftPlus: WP Backup & Migration Plugin · CVSS 8.1 High · Not analysed yet · Published 11 Jun 2026 · Tags: Weak cryptography or TLS
- [Assisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communication](https://agentprime.io/advisories/GHSA-8g5p-jxp9-457c.md)
  `GHSA-8g5p-jxp9-457c`, `CVE-2026-53475`, `GO-2026-6232` · Go `github.com/kubev2v/assisted-migration-agent`: affected `<0.16.0`, fixed in `0.16.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jun 2026 · Tags: Weak cryptography or TLS
- [Jenkins does not encrypt secrets from POST config.xml submissions before storing them in job configurations](https://agentprime.io/advisories/GHSA-m6wv-wh8g-64xc.md)
  `GHSA-m6wv-wh8g-64xc`, `BIT-jenkins-2026-53442`, `CVE-2026-53442` · Maven `org.jenkins-ci.main:jenkins-core`: affected `<2.555.3 || >=2.556, <2.568`, fixed in `2.555.3`, `2.568` · CVSS 5.3 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS and others](https://agentprime.io/advisories/CVE-2025-10237.md)
  `CVE-2025-10237` · CVE record: Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS and 4 more · CVSS 8.4 High · Not analysed yet · Published 10 Jun 2026 · Tags: Weak cryptography or TLS
- [Ghidra < 12.1 - Authentication Bypass via Null Signature in PKIAuthenticationModule](https://agentprime.io/advisories/CVE-2026-52754.md)
  `CVE-2026-52754` · CVE record: nationalsecurityagency ghidra · CVSS 8.7 High · Not analysed yet · Published 10 Jun 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation in S2OPC](https://agentprime.io/advisories/CVE-2026-9758.md)
  `CVE-2026-9758` · CVE record: Systerel S2OPC · CVSS 7.3 High · Not analysed yet · Published 10 Jun 2026 · Tags: Weak cryptography or TLS
- [Spring Security SAML2 Service Provider: Decryption Oracle Vulnerability from Unsigned SAML Response and Logout Payloads](https://agentprime.io/advisories/GHSA-ww38-37g9-m3q3.md)
  `GHSA-ww38-37g9-m3q3`, `CVE-2026-41694` · Maven `org.springframework.security:spring-security-saml2-service-provider`: affected `>=7.0.0, <7.0.6 || >=6.5.0, <6.5.11 || >=6.4.0, <=6.4.16 || >=6.3.0, <=6.3.16 || >=5.8.0, <=5.8.25 || <=5.7.23`, fixed in `7.0.6`, `6.5.11` · CVSS 3.7 Low · Not analysed yet · Published 10 Jun 2026 · Tags: Weak cryptography or TLS
- [Spring AMQP Core: Missing Certificate and Hostname Verification for amqps URIs in RabbitConnectionFactoryBean](https://agentprime.io/advisories/GHSA-p8qj-fj6r-w7q9.md)
  `GHSA-p8qj-fj6r-w7q9`, `CVE-2026-41714` · Maven `org.springframework.amqp:spring-amqp`: affected `>=4.0.0, <4.0.4 || >=3.2.0, <3.2.11 || >=3.1.0, <=3.1.15 || <=2.4.17`, fixed in `4.0.4`, `3.2.11` · CVSS 4.0 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Weak cryptography or TLS
- [Spring AMQP Has Predictable Correlation IDs in RabbitTemplate.sendAndReceive() with Fixed Reply Queue](https://agentprime.io/advisories/GHSA-p5f7-rjhp-pxvc.md)
  `GHSA-p5f7-rjhp-pxvc`, `CVE-2026-41701` · Maven `org.springframework.amqp:spring-amqp`: affected `>=4.0.0, <4.0.4 || >=3.2.0, <3.2.11 || >=3.1.0, <=3.1.15 || <=2.4.17`, fixed in `4.0.4`, `3.2.11` · CVSS 4.4 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Weak cryptography or TLS
- [Client side encryption fails to encrypt values in a $vectorSearch](https://agentprime.io/advisories/CVE-2026-9741.md)
  `CVE-2026-9741` · CVE record: MongoDB MongoDB Server · CVSS 7.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Weak cryptography or TLS
- [Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate](https://agentprime.io/advisories/CVE-2026-42769.md)
  `CVE-2026-42769` · CVE record: OpenSSL OpenSSL · CVSS 5.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Weak cryptography or TLS
- [Spring Framework Predictable Session ID in WebSocket Module](https://agentprime.io/advisories/GHSA-q723-847q-5g8g.md)
  `GHSA-q723-847q-5g8g`, `CVE-2026-41838` · Maven `org.springframework:spring-websocket`: affected `>=7.0.0, <7.0.8 || >=6.2.0, <6.2.19 || >=6.1.0, <=6.1.27 || <=5.3.48`, fixed in `7.0.8`, `6.2.19` · CVSS 4.8 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Weak cryptography or TLS
- [XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform](https://agentprime.io/advisories/CVE-2026-44748.md)
  `CVE-2026-44748` · CVE record: SAP_SE SAP NetWeaver AS ABAP and ABAP Platform · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: Weak cryptography or TLS
- [A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.](https://agentprime.io/advisories/CVE-2026-36721.md)
  `CVE-2026-36721` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: Weak cryptography or TLS
- [Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port](https://agentprime.io/advisories/GHSA-xmv7-r254-6q78.md)
  `GHSA-xmv7-r254-6q78`, `CVE-2026-45673` · Maven `io.netty:netty-resolver-dns`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 6.8 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Weak cryptography or TLS, CWE-340
- [Certificate Validation Bypass in VPN Site-to-Site Connections Using IKEv1](https://agentprime.io/advisories/CVE-2026-50752.md)
  `CVE-2026-50752` · CVE record: checkpoint Quantum Security Gateway and 1 more · CVSS 7.4 High · Not analysed yet · Published 8 Jun 2026 · Tags: Weak cryptography or TLS
- [grepai Uses a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/GHSA-q76h-p6jh-9rw3.md)
  `GHSA-q76h-p6jh-9rw3`, `CVE-2026-11481`, `GO-2026-6128` · Go `github.com/yoanbernabeu/grepai`: affected `<=0.35.0`, no fixed version yet · CVSS 2.0 Low · Not analysed yet · Published 8 Jun 2026 · Tags: Weak cryptography or TLS
- [grepai Uses a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/GHSA-6h35-9p2w-3j3r.md)
  `GHSA-6h35-9p2w-3j3r`, `CVE-2026-11479`, `GO-2026-6125` · Go `github.com/yoanbernabeu/grepai`: affected `<=0.35.0`, no fixed version yet · CVSS 2.3 Low · Not analysed yet · Published 8 Jun 2026 · Tags: Weak cryptography or TLS
- [haxtheweb/haxcms-php uses insecure method for generating salt](https://agentprime.io/advisories/CVE-2026-46493.md)
  `CVE-2026-46493` · CVE record: haxtheweb haxcms-php · CVSS 7.5 High · Not analysed yet · Published 5 Jun 2026 · Tags: Weak cryptography or TLS
- [Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft](https://agentprime.io/advisories/CVE-2026-45745.md)
  `CVE-2026-45745` · CVE record: Termix-SSH Termix · CVSS 8.0 High · Not analysed yet · Published 5 Jun 2026 · Tags: Weak cryptography or TLS
- [claude-mem: The computeObservationContentHash Function is Vulnerable to Hash Collision](https://agentprime.io/advisories/GHSA-5gvr-v6qv-h5mm.md)
  `GHSA-5gvr-v6qv-h5mm`, `CVE-2026-11330` · npm `claude-mem`: affected `<12.0.0`, fixed in `12.0.0` · CVSS 2.0 Low · Not analysed yet · Published 5 Jun 2026 · Tags: Weak cryptography or TLS
- [onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash](https://agentprime.io/advisories/CVE-2026-11329.md)
  `CVE-2026-11329` · CVE record: onnx onnx-mlir · CVSS 2.0 Low · Not analysed yet · Published 5 Jun 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA2LTA1VDEyOjE1OjExLjgzNTAwMFoiLCJDVkUtMjAyNi0xMTMyOSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA2LTE5VDIwOjQ2OjQ2LjAwMDAwMFoiLCJHSFNBLXJwajctaHI3aC13NnA5Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA2LTE5VDIwOjQ2OjQ2LjAwMDAwMFoiLCJHSFNBLXJwajctaHI3aC13NnA5Il0>. Everything for agents: <https://agentprime.io/llms.txt>.