# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Improper certificate validation in Malcolm](https://agentprime.io/advisories/CVE-2026-90452.md)
  `CVE-2026-90452` · CVE record: CISA Malcolm · CVSS 6.0 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Weak cryptography or TLS
- [Doco-CD has an OCI Trust Policy Bypass via Artifact-Contained Configuration](https://agentprime.io/advisories/CVE-2026-54248.md)
  `CVE-2026-54248` · CVE record: kimdre doco-cd · CVSS 6.5 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Weak cryptography or TLS, CWE-501
- [CVE-2026-80469](https://agentprime.io/advisories/CVE-2026-80469.md)
  `CVE-2026-80469` · CVE record: SICK AG Sentio Creator Extension 'Device Manager' · CVSS 8.3 High · Not analysed yet · Published 11 Sept 2026 · Tags: Weak cryptography or TLS
- [HPE IceWall products, Remote Bypass of Security Restrictions](https://agentprime.io/advisories/CVE-2026-73784.md)
  `CVE-2026-73784` · CVE record: Hewlett Packard Enterprise HPE IceWall products · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Debian live-boot](https://agentprime.io/advisories/CVE-2026-89169.md)
  `CVE-2026-89169` · CVE record: Debian live-boot · CVSS 4.1 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Weak cryptography or TLS
- [rclone: http backend forwards custom/auth headers to a different host on redirect](https://agentprime.io/advisories/GHSA-486v-q2wf-fp2r.md)
  `GHSA-486v-q2wf-fp2r`, `BIT-rclone-2026-88013`, `CVE-2026-88013`, `GO-2026-6463` · Go `github.com/rclone/rclone`: affected `>=1.49.0, <1.75.1`, fixed in `1.75.1` · CVSS 3.7 Low · Not analysed yet · Published 10 Sept 2026 · Tags: Information disclosure, Weak cryptography or TLS, Hard-coded credentials
- [n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open](https://agentprime.io/advisories/GHSA-5m98-cgcr-xx3q.md)
  `GHSA-5m98-cgcr-xx3q`, `CVE-2026-86080` · npm `n8n`: affected `<1.123.76 || >=2.0.0, <2.37.7 || >=2.38.0, <2.38.2`, fixed in `1.123.76`, `2.37.7`, `2.38.2` · CVSS 6.3 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in OCaml jose](https://agentprime.io/advisories/CVE-2026-89086.md)
  `CVE-2026-89086` · CVE record: OCaml jose · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Weak cryptography or TLS
- [passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending](https://agentprime.io/advisories/CVE-2026-89043.md)
  `CVE-2026-89043` · CVE record: krakenjs passport-saml-encrypted · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Weak cryptography or TLS
- [passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification](https://agentprime.io/advisories/CVE-2026-89042.md)
  `CVE-2026-89042` · CVE record: krakenjs passport-saml-encrypted · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Weak cryptography or TLS
- [Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure](https://agentprime.io/advisories/CVE-2026-87872.md)
  `CVE-2026-87872` · CVE record: Red Hat Red Hat Ceph Storage 5 and 3 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information](https://agentprime.io/advisories/CVE-2026-81330.md)
  `CVE-2026-81330` · CVE record: Softish EarVision Android application and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79690.md)
  `CVE-2026-79690` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 3.7 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79736.md)
  `CVE-2026-79736` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 3.7 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79729.md)
  `CVE-2026-79729` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 3.7 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79732.md)
  `CVE-2026-79732` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 3.7 Low · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-78483.md)
  `CVE-2026-78483` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation in Quantum Security Gateway](https://agentprime.io/advisories/CVE-2026-85102.md)
  `CVE-2026-85102` · CVE record: checkpoint Quantum Security Gateway · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.54 · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79970.md)
  `CVE-2026-79970` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-78489.md)
  `CVE-2026-78489` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-78492.md)
  `CVE-2026-78492` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79637.md)
  `CVE-2026-79637` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.7 High · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Apache Impala: SAML authentication bypass via forged bearer token](https://agentprime.io/advisories/CVE-2026-56207.md)
  `CVE-2026-56207` · CVE record: Apache Software Foundation Apache Impala · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79967.md)
  `CVE-2026-79967` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-78491.md)
  `CVE-2026-78491` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 8.2 High · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80122.md)
  `CVE-2026-80122` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.3 High · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-78494.md)
  `CVE-2026-78494` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.4 High · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79636.md)
  `CVE-2026-79636` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.0 High · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in OCaml mirage-crypto-ec](https://agentprime.io/advisories/CVE-2026-87733.md)
  `CVE-2026-87733` · CVE record: OCaml mirage-crypto-ec · CVSS 6.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in OCaml mirage-crypto](https://agentprime.io/advisories/CVE-2026-87732.md)
  `CVE-2026-87732` · CVE record: OCaml mirage-crypto · CVSS 6.2 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-87608.md)
  `CVE-2026-87608` · CVE record: Google Chrome · CVSS 7.5 High · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-87551.md)
  `CVE-2026-87551` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-87571.md)
  `CVE-2026-87571` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Google Chrome](https://agentprime.io/advisories/CVE-2026-87482.md)
  `CVE-2026-87482` · CVE record: Google Chrome · CVSS 5.9 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: Weak cryptography or TLS
- [OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption](https://agentprime.io/advisories/CVE-2026-53939.md)
  `CVE-2026-53939` · CVE record: OpenIDC cjose · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Hard-coded credentials, Weak cryptography or TLS
- [HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies](https://agentprime.io/advisories/GHSA-7mj9-2mp8-4m2p.md)
  `GHSA-7mj9-2mp8-4m2p`, `CVE-2026-84381`, `PYSEC-2026-3844`, `PYSEC-2026-3845` · PyPI `httpcore2` and 1 more: affected `<2.10.0`, fixed in `2.10.0` · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Eclipse Foundation Eclipse Ditto](https://agentprime.io/advisories/CVE-2026-84197.md)
  `CVE-2026-84197` · CVE record: Eclipse Foundation Eclipse Ditto · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS, CWE-300
- [Skype for Business Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-69646.md)
  `CVE-2026-69646` · CVE record: Microsoft Skype for Business Server 2015 CU13 and 2 more · CVSS 8.3 High · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Google Android](https://agentprime.io/advisories/CVE-2026-28590.md)
  `CVE-2026-28590` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/CVE-2026-81822.md)
  `CVE-2026-81822` · CVE record: AVEVA Pipeline Integrity Monitor · CVSS 8.3 High · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash](https://agentprime.io/advisories/CVE-2026-86670.md)
  `CVE-2026-86670` · CVE record: aircheng-org iWebShop-5 · CVSS 6.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69382.md)
  `CVE-2026-69382` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-57098.md)
  `CVE-2026-57098` · CVE record: Microsoft Remote Desktop client for Windows Desktop · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Fortinet FortiOS and others](https://agentprime.io/advisories/CVE-2026-84393.md)
  `CVE-2026-84393` · CVE record: Fortinet FortiOS and 1 more · CVSS 7.3 High · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [CommServe Privilege Escalation](https://agentprime.io/advisories/CVE-2026-77105.md)
  `CVE-2026-77105` · CVE record: Commvault Commvault Cloud · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificate issuance to namespace edit users](https://agentprime.io/advisories/CVE-2026-78234.md)
  `CVE-2026-78234` · CVE record: Red Hat Red Hat build of Apache Camel - HawtIO 4 · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.](https://agentprime.io/advisories/CVE-2026-79588.md)
  `CVE-2026-79588` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack.](https://agentprime.io/advisories/CVE-2026-79575.md)
  `CVE-2026-79575` · CVE record · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module](https://agentprime.io/advisories/CVE-2026-52486.md)
  `CVE-2026-52486` · CVE record · CVSS 6.6 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79639.md)
  `CVE-2026-79639` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.6 High · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80125.md)
  `CVE-2026-80125` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79975.md)
  `CVE-2026-79975` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79642.md)
  `CVE-2026-79642` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.6 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79943.md)
  `CVE-2026-79943` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79691.md)
  `CVE-2026-79691` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.3 High · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79644.md)
  `CVE-2026-79644` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.4 High · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79734.md)
  `CVE-2026-79734` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-80164.md)
  `CVE-2026-80164` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 7.4 High · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [nRF54H20: MCUBoot can be tricked to executing unauthenticated code](https://agentprime.io/advisories/CVE-2026-14296.md)
  `CVE-2026-14296` · CVE record: Nordic Semiconductor ASA nRF54H20 · CVSS 7.5 High · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in MediaTek, Inc. MediaTek chipset](https://agentprime.io/advisories/CVE-2026-20500.md)
  `CVE-2026-20500` · CVE record: MediaTek, Inc. MediaTek chipset · CVSS 5.0 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA5LTA3VDAxOjU3OjEzLjcxMTAwMFoiLCJDVkUtMjAyNi0yMDUwMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA5LTExVDIxOjUyOjM2Ljk0MTAwMFoiLCJDVkUtMjAyNi05MDQ1NyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA5LTExVDIxOjUyOjM2Ljk0MTAwMFoiLCJDVkUtMjAyNi05MDQ1NyJd>. Everything for agents: <https://agentprime.io/llms.txt>.