# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Tenable Agent Path Traversal Leading to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-15265.md)
  `CVE-2026-15265` · CVE record: tenable tenable_agent · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Path traversal, Weak cryptography or TLS
- [Improper signature verification in Siemens Opcenter X](https://agentprime.io/advisories/CVE-2026-56451.md)
  `CVE-2026-56451` · CVE record: Siemens Opcenter X · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Weak cryptography or TLS
- [Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks](https://agentprime.io/advisories/GHSA-8f6j-263m-g72x.md)
  `GHSA-8f6j-263m-g72x` · PyPI `app-store-server-library`: affected `>=0.2.0, <3.1.2`, fixed in `3.1.2` · CVSS 4.0, no score published · Not analysed yet · Published 13 Jul 2026 · Tags: Weak cryptography or TLS, CWE-299
- [wandb Artifact Integrity Validation hashutil.py ArtifactManifestEntry.download weak hash](https://agentprime.io/advisories/CVE-2026-15605.md)
  `CVE-2026-15605` · CVE record: wandb · CVSS 2.3 Low · Not analysed yet · Published 13 Jul 2026 · Tags: Weak cryptography or TLS
- [Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability](https://agentprime.io/advisories/CVE-2026-15683.md)
  `CVE-2026-15683` · CVE record: Lorex 2K Indoor Wi-Fi Security Camera · CVSS 7.5 High · Not analysed yet · Published 13 Jul 2026 · Tags: Weak cryptography or TLS
- [DIRAC: Pilot code downloaded over unverified HTTPS connection](https://agentprime.io/advisories/GHSA-vg99-gr89-qhw9.md)
  `GHSA-vg99-gr89-qhw9`, `CVE-2026-61668`, `PYSEC-2026-3464` · PyPI `dirac`: affected `>=6.20.1, <8.0.79 || >=8.1.0a1, <9.0.22 || >=9.1.0, <9.1.10`, fixed in `8.0.79`, `9.0.22`, `9.1.10` · CVSS 8.1 High · Not analysed yet · Published 13 Jul 2026 · Tags: Weak cryptography or TLS
- [Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key](https://agentprime.io/advisories/CVE-2026-61500.md)
  `CVE-2026-61500` · CVE record: rejetto hfs · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Weak cryptography or TLS
- [Missing firmware validation allows remote code execution](https://agentprime.io/advisories/CVE-2026-22097.md)
  `CVE-2026-22097` · CVE record: EVbee DC-80 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Weak cryptography or TLS
- [Adversary-in-the-Middle (AitM) attack vulnerability in EVbee Service app](https://agentprime.io/advisories/CVE-2026-22093.md)
  `CVE-2026-22093` · CVE record: EVbee EVbee Service · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Weak cryptography or TLS
- [cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts on Mbed TLS and wolfSSL backends](https://agentprime.io/advisories/CVE-2026-54919.md)
  `CVE-2026-54919` · CVE record: yhirose cpp-httplib · CVSS 7.4 High · Not analysed yet · Published 10 Jul 2026 · Tags: Weak cryptography or TLS
- [Weak password hashing in R-SOFT DMS](https://agentprime.io/advisories/CVE-2026-41879.md)
  `CVE-2026-41879` · CVE record: R-SOFT SERWIS DMS · CVSS 8.2 High · Not analysed yet · Published 10 Jul 2026 · Tags: Weak cryptography or TLS
- [sigstore-go has a multi-log threshold bypass via single compromised log](https://agentprime.io/advisories/GHSA-9vcr-p3rj-q5q6.md)
  `GHSA-9vcr-p3rj-q5q6`, `CVE-2026-49834`, `GO-2026-5952` · Go `github.com/sigstore/sigstore-go`: affected `<1.2.0`, fixed in `1.2.0` · CVSS 5.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Weak cryptography or TLS, CWE-345
- [YesWiki Vulnerable to Unauthenticated ActivityPub Signature-Verification Bypass via \`!openssl_verify(...)\` accepting \`int(-1)\`](https://agentprime.io/advisories/GHSA-mv28-wj57-f57g.md)
  `GHSA-mv28-wj57-f57g`, `CVE-2026-52767`, `PKSA-cyw7-d17n-rdq5` · Packagist `yeswiki/yeswiki`: affected `>=4.6.2, <4.6.6`, fixed in `4.6.6` · CVSS 8.2 High · Not analysed yet · Published 9 Jul 2026 · Tags: Weak cryptography or TLS
- [Prisma Access Agent: Improper Certificate Validation on iOS](https://agentprime.io/advisories/CVE-2026-0277.md)
  `CVE-2026-0277` · CVE record: Palo Alto Networks Prisma Access Agent · CVSS 5.7 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Weak cryptography or TLS
- [CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unauthenticated Improper Verification of Cryptographic Signature to Payment Bypass via /wp-json/corvuspay/success/ REST Endpoint](https://agentprime.io/advisories/CVE-2026-9027.md)
  `CVE-2026-9027` · CVE record: corvusinfo CorvusPay WooCommerce Payment Gateway · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Weak cryptography or TLS
- [Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported.](https://agentprime.io/advisories/CVE-2025-63579.md)
  `CVE-2025-63579` · CVE record · CVSS 7.5 High · Not analysed yet · Published 9 Jul 2026 · Tags: Information disclosure, Broken access control, Weak cryptography or TLS
- [etcd: gRPC client listener does not enforce \`--client-crl-file\` certificate revocation](https://agentprime.io/advisories/CVE-2026-59818.md)
  `CVE-2026-59818` · CVE record: etcd-io etcd · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Weak cryptography or TLS
- [DoLogin Security <= 4.3 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG Token](https://agentprime.io/advisories/CVE-2026-14495.md)
  `CVE-2026-14495` · CVE record: wpdo5ea DoLogin Security · CVSS 8.8 High · Not analysed yet · Published 8 Jul 2026 · Tags: Weak cryptography or TLS
- [Webauthn: SimpleFakeCredentialGenerator with an empty secret produces predictable fake credentials, weakening username enumeration protection](https://agentprime.io/advisories/GHSA-gq4g-fpc9-vjfq.md)
  `GHSA-gq4g-fpc9-vjfq`, `PKSA-zk1n-qbm6-d3rq` · Packagist `web-auth/webauthn-lib`: affected `>=4.9.0, <5.3.5`, fixed in `5.3.5` · CVSS 4.0, no score published · Not analysed yet · Published 7 Jul 2026 · Tags: Weak cryptography or TLS, CWE-204
- [Better Auth has insecure cryptographic defaults in oidcProvider: alg=none advertised and plain PKCE accepted by default](https://agentprime.io/advisories/GHSA-9h47-pqcx-hjr4.md)
  `GHSA-9h47-pqcx-hjr4`, `CVE-2026-67336` · npm `better-auth`: affected `<1.6.11`, fixed in `1.6.11` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2026 · Tags: Weak cryptography or TLS, CWE-757, CWE-1188
- [Authentication Bypass in HAVELSAN's Open Source Project Liman MYS](https://agentprime.io/advisories/CVE-2026-11348.md)
  `CVE-2026-11348` · CVE record: HAVELSAN Inc. Liman MYS · CVSS 8.1 High · Not analysed yet · Published 7 Jul 2026 · Tags: Weak cryptography or TLS
- [Weak encryption mechanism for User directory](https://agentprime.io/advisories/CVE-2026-14868.md)
  `CVE-2026-14868` · CVE record: arcinfo PcVue · CVSS 8.4 High · Not analysed yet · Published 7 Jul 2026 · Tags: Weak cryptography or TLS
- [Coder's AI Bridge Proxy skips TLS certificate verification in default configuration](https://agentprime.io/advisories/GHSA-84rm-42xw-mx52.md)
  `GHSA-84rm-42xw-mx52`, `CVE-2026-55436`, `GO-2026-5920` · Go `github.com/coder/coder/v2`: affected `>=2.30.0, <2.32.7 || >=2.33.0, <2.33.8 || >=2.34.0, <2.34.2`, fixed in `2.32.7`, `2.33.8`, `2.34.2` · CVSS 7.4 High · Not analysed yet · Published 6 Jul 2026 · Tags: Weak cryptography or TLS
- [GoFiber never set HSTS header in helmet middleware due to incorrect protocol check](https://agentprime.io/advisories/GHSA-gv83-gqw6-9j2c.md)
  `GHSA-gv83-gqw6-9j2c`, `CVE-2026-53624`, `GO-2026-5912` · Go `github.com/gofiber/fiber`: affected `<3.4.0`, fixed in `3.4.0` · CVSS 4.8 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation](https://agentprime.io/advisories/CVE-2026-6900.md)
  `CVE-2026-6900` · CVE record: B&R Industrial Automation GmbH APROL · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2026 · Tags: Weak cryptography or TLS
- [langchain-ai langgraph Task Result Cache \_cache.py \_freeze weak hash](https://agentprime.io/advisories/CVE-2026-14742.md)
  `CVE-2026-14742` · CVE record: langchain-ai langgraph · CVSS 2.3 Low · Not analysed yet · Published 5 Jul 2026 · Tags: Weak cryptography or TLS
- [exo-explore exo Vision Feature Cache vision.py \_image_cache_key weak hash](https://agentprime.io/advisories/CVE-2026-14738.md)
  `CVE-2026-14738` · CVE record: exo-explore exo · CVSS 6.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Weak cryptography or TLS
- [zcaceres markdownify-mcp webpage-to-markdown Markdownify.ts saveToTempFile random values](https://agentprime.io/advisories/CVE-2026-14702.md)
  `CVE-2026-14702` · CVE record: zcaceres markdownify-mcp · CVSS 2.0 Low · Not analysed yet · Published 5 Jul 2026 · Tags: Weak cryptography or TLS, CWE-310
- [Crypt::DSA versions before 1.22 for Perl draw the DSA signing nonce and private key from a biased random generator, leading to private-key recovery](https://agentprime.io/advisories/CVE-2026-14570.md)
  `CVE-2026-14570` · CVE record: TIMLEGGE Crypt::DSA · CVSS 7.5 High · Not analysed yet · Published 5 Jul 2026 · Tags: Weak cryptography or TLS
- [ForceInjection AI-fundermentals Memory Recall smart_customer_service.py get_conversation_history weak hash](https://agentprime.io/advisories/CVE-2026-14630.md)
  `CVE-2026-14630` · CVE record: ForceInjection AI-fundermentals · CVSS 2.3 Low · Not analysed yet · Published 4 Jul 2026 · Tags: Weak cryptography or TLS
- [SSH improper host validation](https://agentprime.io/advisories/CVE-2026-9547.md)
  `CVE-2026-9547` · CVE record: curl curl · CVSS 7.4 High · Not analysed yet · Published 3 Jul 2026 · Tags: Weak cryptography or TLS
- [wrong STARTTLS connection reuse](https://agentprime.io/advisories/CVE-2026-8286.md)
  `CVE-2026-8286` · CVE record: curl curl · CVSS 8.1 High · Not analysed yet · Published 3 Jul 2026 · Tags: Weak cryptography or TLS
- [proto-default skips SSH verification](https://agentprime.io/advisories/CVE-2026-12064.md)
  `CVE-2026-12064` · CVE record: curl curl · CVSS 7.5 High · Not analysed yet · Published 3 Jul 2026 · Tags: Weak cryptography or TLS
- [Native CA trust persist](https://agentprime.io/advisories/CVE-2026-11564.md)
  `CVE-2026-11564` · CVE record: curl curl · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Jul 2026 · Tags: Weak cryptography or TLS
- [WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS](https://agentprime.io/advisories/CVE-2026-13722.md)
  `CVE-2026-13722` · CVE record: WatchGuard Fireware OS · CVSS 8.6 High · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS
- [IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload](https://agentprime.io/advisories/CVE-2026-50721.md)
  `CVE-2026-50721` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS, Denial of service
- [IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload](https://agentprime.io/advisories/CVE-2026-50722.md)
  `CVE-2026-50722` · CVE record: The Libreswan Project libreswan · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS, Denial of service
- [Steeltoe: OAEP setting silently selects PKCS#1 v1.5 padding](https://agentprime.io/advisories/GHSA-4j9m-h44m-2hv8.md)
  `GHSA-4j9m-h44m-2hv8`, `CVE-2026-50268` · NuGet `Steeltoe.Configuration.Encryption`: affected `>=4.0.0, <4.2.0`, fixed in `4.2.0` · CVSS 1.9 Low · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS, CWE-256
- [Steeltoe's env sanitizer misses connection strings — leaks embedded DB passwords](https://agentprime.io/advisories/GHSA-q62h-354g-5r85.md)
  `GHSA-q62h-354g-5r85`, `CVE-2026-50200` · NuGet `Steeltoe.Management.Endpoint` and 1 more: affected `<4.2.0`, fixed in `4.2.0` · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: Information disclosure, Weak cryptography or TLS
- [SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass](https://agentprime.io/advisories/GHSA-6929-8p9f-26jx.md)
  `GHSA-6929-8p9f-26jx`, `CVE-2026-49283`, `PKSA-4y26-97zb-p98g`, `PKSA-yk3g-3g3t-ts6q` · Packagist `simplesamlphp/saml2` and 1 more: affected `<4.19.3 || >=4.20.0, <4.20.2 || >=5.0.0, <5.0.6 || >=6.0.0, <6.2.1`, fixed in `4.19.3`, `4.20.2`, `5.0.6`, `6.2.1` · CVSS 8.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS
- [joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)](https://agentprime.io/advisories/GHSA-gg9x-qcx2-xmrh.md)
  `GHSA-gg9x-qcx2-xmrh`, `CVE-2026-49852`, `PYSEC-2026-2528` · PyPI `joserfc`: affected `<1.6.8`, fixed in `1.6.8` · CVSS 8.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Authentication bypass, Weak cryptography or TLS, Hard-coded credentials
- [Improper verification of cryptographic signature in CubeSpace CW0057 Reaction Wheel](https://agentprime.io/advisories/CVE-2026-13743.md)
  `CVE-2026-13743` · CVE record: CubeSpace CW0057 Reaction Wheel · CVSS 3.3 Low · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS
- [Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled](https://agentprime.io/advisories/GHSA-g3xr-5w5j-w4q4.md)
  `GHSA-g3xr-5w5j-w4q4`, `BIT-contour-2026-50149`, `CVE-2026-50149`, `GO-2026-5889` · Go `github.com/projectcontour/contour`: affected `>=1.23.0, <1.33.5`, fixed in `1.33.5` · CVSS 6.5 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Weak cryptography or TLS
- [oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens](https://agentprime.io/advisories/GHSA-xf85-363p-868w.md)
  `GHSA-xf85-363p-868w`, `CVE-2026-48978`, `GO-2026-5885` · Go `oras.land/oras-go` and 1 more: affected `<=1.2.7`, no fixed version yet · CVSS 2.1 Low · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS, Server-side request forgery (SSRF)
- [QUIC has Broken TLS verification](https://agentprime.io/advisories/GHSA-2r8v-p65x-3663.md)
  `GHSA-2r8v-p65x-3663`, `CVE-2026-49457` · Hex `quic`: affected `<1.4.4`, fixed in `1.4.4` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS
- [Centrifugo's dynamic JWKS key cache keyed only by \`kid\` allows cross-issuer JWT authentication bypass](https://agentprime.io/advisories/GHSA-g6vg-wj8f-48cj.md)
  `GHSA-g6vg-wj8f-48cj`, `CVE-2026-49998`, `GO-2026-5872` · Go `github.com/centrifugal/centrifugo` and 4 more: affected `<=2.4.0`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS
- [SurrealDB: ES512 silently downgraded to ES384 due to jsonwebtoken crate limitation](https://agentprime.io/advisories/GHSA-fwg2-gr34-q3w8.md)
  `GHSA-fwg2-gr34-q3w8`, `CVE-2026-63761` · crates.io `surrealdb`: affected `<3.1.0`, fixed in `3.1.0` · CVSS 5.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS
- [sigstore's \`certificateOIDs\` verification constraints are silently dropped and never enforced](https://agentprime.io/advisories/GHSA-52v5-jr5w-gjxr.md)
  `GHSA-52v5-jr5w-gjxr`, `CVE-2026-48815` · npm `sigstore`: affected `<4.1.1`, fixed in `4.1.1` · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS
- [Connection possible to the Administration portal with a revoked certificate](https://agentprime.io/advisories/CVE-2026-8480.md)
  `CVE-2026-8480` · CVE record: Stormshield Stormshield Network Security · CVSS 4.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS
- [Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool](https://agentprime.io/advisories/CVE-2026-12374.md)
  `CVE-2026-12374` · CVE record: Cato Networks SDP Client · CVSS 6.4 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS, Race condition
- [Weak password hash protection in Control-M/Entreprise Manager](https://agentprime.io/advisories/CVE-2026-10540.md)
  `CVE-2026-10540` · CVE record: BMC Control-M/Enterprise Manager · CVSS 5.6 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS
- [CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources](https://agentprime.io/advisories/CVE-2026-56016.md)
  `CVE-2026-56016` · CVE record: MARKSTOS CGI::Session::ID::md5 · CVSS 5.9 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS, CWE-340
- [UltraVNC MS-Logon II uses 64-bit Diffie-Hellman and seeded libc rand() enabling credential interception](https://agentprime.io/advisories/CVE-2026-7830.md)
  `CVE-2026-7830` · CVE record: uvnc UltraVNC · CVSS 7.4 High · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS
- [UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes](https://agentprime.io/advisories/CVE-2026-44040.md)
  `CVE-2026-44040` · CVE record: uvnc UltraVNC · CVSS 4.8 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS
- [Vulnerabilities found in Watson Data Intelligence](https://agentprime.io/advisories/CVE-2025-12530.md)
  `CVE-2025-12530` · CVE record: IBM watsonx.data intelligence · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Weak cryptography or TLS
- [Cleartext Transmission of Sensitive Information in Watson Data Intelligence](https://agentprime.io/advisories/CVE-2025-36336.md)
  `CVE-2025-36336` · CVE record: IBM watsonx.data intelligence · CVSS 5.9 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Weak cryptography or TLS
- [Weak Cryptographic Key Derivation Exposed All Stored Credentials](https://agentprime.io/advisories/CVE-2026-7874.md)
  `CVE-2026-7874` · CVE record: IBM Langflow OSS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jun 2026 · Tags: Weak cryptography or TLS
- [Sigstore Java has a vulnerability with bundle verification of integratedTime](https://agentprime.io/advisories/GHSA-qqw8-7c2r-jxch.md)
  `GHSA-qqw8-7c2r-jxch`, `CVE-2026-48791` · Maven `dev.sigstore:sigstore-java`: affected `>=2.0.0, <2.1.0`, fixed in `2.1.0` · CVSS 2.0 Low · Not analysed yet · Published 30 Jun 2026 · Tags: Weak cryptography or TLS
- [RabbitMQ has predictable credential obfuscation seed value used in Shovel and Federation plugins](https://agentprime.io/advisories/GHSA-v9gv-xp36-jgj8.md)
  `GHSA-v9gv-xp36-jgj8`, `BIT-rabbitmq-2022-31008`, `CVE-2022-31008` · Hex `rabbit_common`: affected `>=3.8.0, <3.8.32 || >=3.9.0, <3.9.18 || >=3.10.0, <3.10.2`, fixed in `3.8.32`, `3.9.18`, `3.10.2` · CVSS 5.5 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Weak cryptography or TLS, CWE-335
- [PostgreSQL Anonymizer: Unrestricted function can leak the secret salt](https://agentprime.io/advisories/CVE-2026-13455.md)
  `CVE-2026-13455` · CVE record: DALIBO PostgreSQL Anonymizer · CVSS 4.3 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA2LTMwVDE1OjE5OjU3LjY1NzAwMFoiLCJDVkUtMjAyNi0xMzQ1NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA3LTE0VDE1OjE1OjA4LjA2MzAwMFoiLCJDVkUtMjAyNi01OTgzNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA3LTE0VDE1OjE1OjA4LjA2MzAwMFoiLCJDVkUtMjAyNi01OTgzNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.