# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper certificate validation in ECOVACS ROBOTICS DEEBOT PRO M1 and others](https://agentprime.io/advisories/CVE-2026-66404.md)
  `CVE-2026-66404` · CVE record: ECOVACS ROBOTICS DEEBOT PRO M1 and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS
- [Missing encryption of sensitive data in Samsung Mobile Smart Switch](https://agentprime.io/advisories/CVE-2026-21079.md)
  `CVE-2026-21079` · CVE record: Samsung Mobile Smart Switch · CVSS 7.0 High · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS
- [Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum](https://agentprime.io/advisories/CVE-2026-58262.md)
  `CVE-2026-58262` · CVE record: klever-io klever-go · CVSS 7.1 High · Not analysed yet · Published 7 Aug 2026 · Tags: Weak cryptography or TLS, CWE-345
- [crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain](https://agentprime.io/advisories/GHSA-rg76-677x-56q9.md)
  `GHSA-rg76-677x-56q9`, `CVE-2026-71851` · npm `crypto-js`: affected `<4.0.0`, fixed in `4.0.0` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Aug 2026 · Tags: Weak cryptography or TLS, CWE-331, CWE-334
- [Root password hash exposure vulnerability in ZTE F689 product](https://agentprime.io/advisories/CVE-2026-49005.md)
  `CVE-2026-49005` · CVE record: ZTE F689 · CVSS 2.4 Low · Not analysed yet · Published 7 Aug 2026 · Tags: Weak cryptography or TLS
- [Microsoft 365 Admin Center Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62873.md)
  `CVE-2026-62873` · CVE record: Microsoft Microsoft 365 Admin Center · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Weak cryptography or TLS
- [Microsoft Teams Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-62918.md)
  `CVE-2026-62918` · CVE record: Microsoft Microsoft Teams · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell RVTools](https://agentprime.io/advisories/CVE-2026-64993.md)
  `CVE-2026-64993` · CVE record: Dell RVTools · CVSS 6.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Weak cryptography or TLS
- [Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account Takeover](https://agentprime.io/advisories/CVE-2026-5430.md)
  `CVE-2026-5430` · CVE record: WSO2 WSO2 Universal Gateway and 4 more · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.22 · Not analysed yet · Published 6 Aug 2026 · Tags: Weak cryptography or TLS
- [Duplicate Advisory: Langflow: Weak Fernet Key via random.seed()](https://agentprime.io/advisories/GHSA-9pw3-x84f-xcwf.md)
  `GHSA-9pw3-x84f-xcwf` · PyPI `langflow`: affected `<=1.10.0`, no fixed version yet · CVSS 7.4 High · Withdrawn · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [rclone: S3 backend does not strip X-Amz-Security-Token on a same-host HTTPS->HTTP redirect](https://agentprime.io/advisories/GHSA-gx4c-2hqx-cw2r.md)
  `GHSA-gx4c-2hqx-cw2r`, `BIT-rclone-2026-79782`, `CVE-2026-79782`, `GO-2026-6196` · Go `github.com/rclone/rclone`: affected `<1.74.4`, fixed in `1.74.4` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [rclone: WebDAV Credentials Survive a Same-Host HTTPS-to-HTTP Redirect](https://agentprime.io/advisories/GHSA-h4mf-4v27-hggj.md)
  `GHSA-h4mf-4v27-hggj`, `BIT-rclone-2026-79779`, `CVE-2026-79779`, `GO-2026-6197` · Go `github.com/rclone/rclone`: affected `<1.75.0`, fixed in `1.75.0` · CVSS 6.0 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [rclone: S3 Redirect Sanitization Omits IBM IAM Bearer Tokens and SSE-C Keys](https://agentprime.io/advisories/GHSA-8mxv-9xhp-86h4.md)
  `GHSA-8mxv-9xhp-86h4`, `BIT-rclone-2026-79780`, `CVE-2026-79780`, `GO-2026-6188` · Go `github.com/rclone/rclone`: affected `<1.75.0`, fixed in `1.75.0` · CVSS 6.0 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Information disclosure, Weak cryptography or TLS, Hard-coded credentials
- [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-9201.md)
  `CVE-2026-9201` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [Langflow is affected by weaknesses in secret handling and sensitive configuration access](https://agentprime.io/advisories/CVE-2026-8470.md)
  `CVE-2026-8470` · CVE record: IBM Langflow OSS · CVSS 7.4 High · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-20294.md)
  `CVE-2026-20294` · CVE record: Cisco Cisco Catalyst SD-WAN Manager · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak…](https://agentprime.io/advisories/CVE-2026-18531.md)
  `CVE-2026-18531` · CVE record: IBM Maximo Application Suite · CVSS 5.3 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers](https://agentprime.io/advisories/CVE-2026-12730.md)
  `CVE-2026-12730` · CVE record: IBM Business Automation Workflow containers and traditional · CVSS 3.8 Low · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [SAML authentication bypass in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-7557.md)
  `CVE-2026-7557` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [Keycloak-services: keycloak-services: saml broker metadata import disables response signature validation](https://agentprime.io/advisories/CVE-2026-16443.md)
  `CVE-2026-16443` · CVE record: Red Hat Red Hat build of Keycloak 26.4 and 4 more · CVSS 7.4 High · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries](https://agentprime.io/advisories/CVE-2026-71225.md)
  `CVE-2026-71225` · CVE record: Stephan Muelle libkcapi and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [Global TLS Certificate Validation Bypass in Lenovo XClarity Orchestrator](https://agentprime.io/advisories/CVE-2026-16792.md)
  `CVE-2026-16792` · CVE record: Lenovo XClarity Orchestrator · CVSS 7.0 High · Not analysed yet · Published 4 Aug 2026 · Tags: Weak cryptography or TLS
- [Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens](https://agentprime.io/advisories/CVE-2026-18569.md)
  `CVE-2026-18569` · CVE record: Red Hat Red Hat build of Keycloak 26.6 and 4 more · CVSS 3.7 Low · Not analysed yet · Published 4 Aug 2026 · Tags: Weak cryptography or TLS
- [Misskey: JSON-LD signature validation + compaction may lead to improper activity handling](https://agentprime.io/advisories/CVE-2026-46713.md)
  `CVE-2026-46713` · CVE record: misskey-dev misskey · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees](https://agentprime.io/advisories/GHSA-m2h6-j472-rp4c.md)
  `GHSA-m2h6-j472-rp4c`, `CVE-2026-69248`, `PYSEC-2026-3554` · PyPI `cryptography`: affected `>=45.0.0, <49.0.0`, fixed in `49.0.0` · CVSS 6.9 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [Emlog Pro 2.6.23 TLS Certificate Validation Disabled in ai.php](https://agentprime.io/advisories/CVE-2026-67598.md)
  `CVE-2026-67598` · CVE record: emlog emlog · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation in TP-Link Omada Cloud Communications](https://agentprime.io/advisories/CVE-2025-9291.md)
  `CVE-2025-9291` · CVE record: TP-Link Systems Inc. Omada Gateways and 2 more · CVSS 7.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [XML::Sig versions from 0.29 before 0.72 for Perl allow signature verification bypass because verify returns true when every signature was skipped before any cryptographic check](https://agentprime.io/advisories/CVE-2026-18568.md)
  `CVE-2026-18568` · CVE record: TIMLEGGE XML::Sig · CVSS 7.5 High · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath instead of the signed subtr…](https://agentprime.io/advisories/CVE-2026-18092.md)
  `CVE-2026-18092` · CVE record: TIMLEGGE Net::SAML2 · CVSS 8.1 High · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID](https://agentprime.io/advisories/CVE-2026-9487.md)
  `CVE-2026-9487` · CVE record: TIMLEGGE XML::Sig · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [Net::SAML2 versions before 0.86 for Perl allow authentication bypass because \_verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signature](https://agentprime.io/advisories/CVE-2026-18108.md)
  `CVE-2026-18108` · CVE record: TIMLEGGE Net::SAML2 · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is configured](https://agentprime.io/advisories/CVE-2026-18089.md)
  `CVE-2026-18089` · CVE record: TIMLEGGE Net::SAML2 · CVSS 7.5 High · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609).](https://agentprime.io/advisories/CVE-2026-56609.md)
  `CVE-2026-56609` · CVE record: HCL Software HCL iControl · CVSS 4.8 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [eParakstītājs 3.0 for Windows – remote code execution via unauthenticated auto-update](https://agentprime.io/advisories/CVE-2026-0392.md)
  `CVE-2026-0392` · CVE record: Latvijas Valsts radio un televīzijas centrs (LVRTC) eParakstītājs 3.0 · CVSS 7.3 High · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS, CWE-494
- [Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI](https://agentprime.io/advisories/GHSA-9pwp-9qqc-pr26.md)
  `GHSA-9pwp-9qqc-pr26`, `CVE-2026-8763` · Maven `org.bouncycastle:bc-fips` and 3 more: affected `<1.0.2.7 || >=2.0.0, <2.0.2 || >=2.1.0, <2.1.3`, fixed in `1.0.2.7`, `2.0.2`, `2.1.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path](https://agentprime.io/advisories/CVE-2026-12860.md)
  `CVE-2026-12860` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA and 1 more · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [Stapled OCSP response accepted without binding to the checked certificate](https://agentprime.io/advisories/CVE-2026-58062.md)
  `CVE-2026-58062` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [JSSE hostname verifier CN-fallback enabled by default despite documented opt-in](https://agentprime.io/advisories/CVE-2026-59638.md)
  `CVE-2026-59638` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [CMS verifySignatures returns true for SignedData with zero signers](https://agentprime.io/advisories/CVE-2026-59639.md)
  `CVE-2026-59639` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA and 2 more · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [OpenPGP inline-signature policy failures silently ignored](https://agentprime.io/advisories/CVE-2026-59643.md)
  `CVE-2026-59643` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA and 1 more · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [BKS keystore accepts legacy version with 16-bit integrity MAC key](https://agentprime.io/advisories/CVE-2026-59651.md)
  `CVE-2026-59651` · CVE record: Legion of the Bouncy Castle Inc. BC-JAVA and 1 more · CVSS 7.1 High · Not analysed yet · Published 3 Aug 2026 · Tags: Weak cryptography or TLS
- [Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation](https://agentprime.io/advisories/GHSA-7975-hp3r-5qhv.md)
  `GHSA-7975-hp3r-5qhv`, `CVE-2026-55735`, `EEF-CVE-2026-55735` · Hex `guardian`: affected `>=1.0.0, <2.4.1`, fixed in `2.4.1` · CVSS 8.2 High · Not analysed yet · Published 1 Aug 2026 · Tags: Weak cryptography or TLS
- [FreeRDP before 3.29.0 TLS Certificate EKU Bypass](https://agentprime.io/advisories/CVE-2026-67294.md)
  `CVE-2026-67294` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2026 · Tags: Weak cryptography or TLS
- [FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass](https://agentprime.io/advisories/CVE-2026-66402.md)
  `CVE-2026-66402` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2026 · Tags: Weak cryptography or TLS
- [FreeRDP before 3.29.0 Improper Certificate Hostname Validation](https://agentprime.io/advisories/CVE-2026-67293.md)
  `CVE-2026-67293` · CVE record: FreeRDP FreeRDP · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Aug 2026 · Tags: Weak cryptography or TLS
- [Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP](https://agentprime.io/advisories/CVE-2026-18536.md)
  `CVE-2026-18536` · CVE record: RRWO Data::Entropy · CVSS 7.5 High · Not analysed yet · Published 1 Aug 2026 · Tags: Weak cryptography or TLS, CWE-353
- [Thumbor has HMAC validation bypass via multiple .replace() calls when removing URL signature](https://agentprime.io/advisories/GHSA-mw3h-qjxj-6xg9.md)
  `GHSA-mw3h-qjxj-6xg9`, `CVE-2026-53501`, `PYSEC-2026-3620` · PyPI `thumbor`: affected `<7.8.0`, fixed in `7.8.0` · CVSS 8.2 High · Not analysed yet · Published 31 Jul 2026 · Tags: Weak cryptography or TLS
- [Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header](https://agentprime.io/advisories/CVE-2026-18141.md)
  `CVE-2026-18141` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 3 more · CVSS 8.2 High · Not analysed yet · Published 31 Jul 2026 · Tags: Weak cryptography or TLS
- [Storage of passwords in a reversible format](https://agentprime.io/advisories/CVE-2026-65309.md)
  `CVE-2026-65309` · CVE record: ANDRITZ HIPASE-250 and 1 more · CVSS 7.5 High · Not analysed yet · Published 31 Jul 2026 · Tags: Weak cryptography or TLS, CWE-257
- [ControllerAgent does not perform validation of firmware](https://agentprime.io/advisories/CVE-2026-44104.md)
  `CVE-2026-44104` · CVE record: Phoenix Contact CHARX SEC-3150 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in node](https://agentprime.io/advisories/CVE-2026-58040.md)
  `CVE-2026-58040` · CVE record: nodejs node · CVSS 6.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Weak cryptography or TLS
- [Spring Boot DevTools remote secret generated with a non-cryptographic PRNG](https://agentprime.io/advisories/CVE-2026-47882.md)
  `CVE-2026-47882` · CVE record: Spring Spring Tools for Eclipse · CVSS 8.3 High · Not analysed yet · Published 30 Jul 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Google Chrome](https://agentprime.io/advisories/CVE-2026-17872.md)
  `CVE-2026-17872` · CVE record: Google Chrome · CVSS 6.1 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Weak cryptography or TLS
- [Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-13305.md)
  `CVE-2026-13305` · CVE record: Autel MaxiCharger AC Elite Home · CVSS 6.4 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Devolutions Password Manager](https://agentprime.io/advisories/CVE-2026-8497.md)
  `CVE-2026-8497` · CVE record: Devolutions Password Manager · CVSS 7.4 High · Not analysed yet · Published 29 Jul 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation in S2OPC](https://agentprime.io/advisories/CVE-2026-18257.md)
  `CVE-2026-18257` · CVE record: Systerel S2OPC · CVSS 5.6 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Weak cryptography or TLS
- [Apache Traffic Server: Certifier plugin trusts client SNI when generating certificates](https://agentprime.io/advisories/CVE-2026-58162.md)
  `CVE-2026-58162` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.4 High · Not analysed yet · Published 29 Jul 2026 · Tags: Weak cryptography or TLS
- [Apache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (\`verify_signature\` defaults to \`False\`)](https://agentprime.io/advisories/CVE-2026-59243.md)
  `CVE-2026-59243` · CVE record: Apache Software Foundation Apache Airflow FAB provider · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Weak cryptography or TLS
- [Apache Traffic Server: HTTP/2 multiplexed origin sessions are reused without certificate re-verification](https://agentprime.io/advisories/CVE-2026-65325.md)
  `CVE-2026-65325` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 6.3 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Weak cryptography or TLS
- [TOTP two-factor authentication bypass vulnerability](https://agentprime.io/advisories/CVE-2026-63237.md)
  `CVE-2026-63237` · CVE record: Three Learning Koollab LMS · CVSS 4.8 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA3LTI5VDA2OjI1OjUyLjM0MTAwMFoiLCJDVkUtMjAyNi02MzIzNyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA4LTEwVDA4OjAwOjI1LjE0MDAwMFoiLCJDVkUtMjAyNi02NjQwNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA4LTEwVDA4OjAwOjI1LjE0MDAwMFoiLCJDVkUtMjAyNi02NjQwNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.