# Weak cryptography or TLS. Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-86131.md) `CVE-2026-86131` · CVE record: WatchGuard Fireware OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Code injection, Weak cryptography or TLS, CWE-829 - [Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature](https://agentprime.io/advisories/CVE-2026-91191.md) `CVE-2026-91191` · CVE record: Lantronix G520 Series · CVSS 7.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS - [Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5](https://agentprime.io/advisories/CVE-2026-100293.md) `CVE-2026-100293` · CVE record: Anjvision YSSD-RTMP-H5 · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS - [undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool](https://agentprime.io/advisories/GHSA-w293-vg96-wgc3.md) `GHSA-w293-vg96-wgc3`, `CVE-2026-84961` · npm `undici`: affected `>=7.24.1, <7.29.1 || >=8.0.0, <8.10.2`, fixed in `7.29.1`, `8.10.2` · CVSS 7.4 High · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS - [NetX Secure DTLS server issues predictable HelloVerifyRequest cookies, so a spoofed client can pass the return-routability check](https://agentprime.io/advisories/CVE-2026-102719.md) `CVE-2026-102719` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS - [Cleartext transmission of sensitive information in Dell Secure Connect Gateway (SCG) Policy Manager](https://agentprime.io/advisories/CVE-2026-76114.md) `CVE-2026-76114` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 5.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS - [Improper certificate validation in Dell Secure Connect Gateway (SCG) Policy Manager](https://agentprime.io/advisories/CVE-2026-73594.md) `CVE-2026-73594` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 6.4 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS - [Nodemailer: Process-global DNS cache reuses TLS \`servername\` across transports, enabling cross-tenant SMTP credential disclosure](https://agentprime.io/advisories/GHSA-6vj9-mwq6-2f5v.md) `GHSA-6vj9-mwq6-2f5v`, `CVE-2026-100701` · npm `nodemailer`: affected `>=5.0.0, <10.0.2`, fixed in `10.0.2` · CVSS 6.0 Medium · Not analysed yet · Published 28 Sept 2026 · Tags: Weak cryptography or TLS - [utcp-mcp before 1.1.3 SSRF via unvalidated MCP server URL](https://agentprime.io/advisories/CVE-2026-101057.md) `CVE-2026-101057` · CVE record: universal-tool-calling-protocol python-utcp · CVSS 2.3 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS - [OCSP stapling v2 multi accepts non-CA chain certificates as issuers](https://agentprime.io/advisories/CVE-2026-89102.md) `CVE-2026-89102` · CVE record: wolfSSL wolfSSL · CVSS 8.3 High · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS - [NameConstraints not enforced across unconstrained intermediate CA](https://agentprime.io/advisories/CVE-2026-89133.md) `CVE-2026-89133` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS - [Subject CN name-constraint check bypassed when non-DNS SAN present](https://agentprime.io/advisories/CVE-2026-89134.md) `CVE-2026-89134` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS - [Failed X509_verify_cert leaves unverified CA in shared CertManager](https://agentprime.io/advisories/CVE-2026-89135.md) `CVE-2026-89135` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS - [Trusted peer certificate match ignores public key, allowing forged CA clones](https://agentprime.io/advisories/CVE-2026-93302.md) `CVE-2026-93302` · CVE record: wolfSSL wolfSSL · CVSS 8.3 High · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS - [Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY](https://agentprime.io/advisories/CVE-2026-94418.md) `CVE-2026-94418` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS - [Contrast before 1.16.0 Remote Attestation Relay Attack](https://agentprime.io/advisories/CVE-2026-100835.md) `CVE-2026-100835` · CVE record: edgelesssys contrast · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS - [Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass](https://agentprime.io/advisories/CVE-2026-100665.md) `CVE-2026-100665` · CVE record: netty netty · CVSS 8.7 High · Not analysed yet · Published 26 Sept 2026 · Tags: Weak cryptography or TLS - [SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie](https://agentprime.io/advisories/CVE-2026-100635.md) `CVE-2026-100635` · CVE record: siyuan-note siyuan · CVSS 8.2 High · Not analysed yet · Published 26 Sept 2026 · Tags: Weak cryptography or TLS - [OpenClaw iOS Control UI TLS Pin Enforcement Bypass](https://agentprime.io/advisories/CVE-2026-100551.md) `CVE-2026-100551` · CVE record: OpenClaw OpenClaw · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Sept 2026 · Tags: Weak cryptography or TLS - [TLS Hostname Verification Falls Back to CN After SAN Mismatch](https://agentprime.io/advisories/CVE-2026-91769.md) `CVE-2026-91769` · CVE record: PHP Group PHP · CVSS 4.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Weak cryptography or TLS - [Zammad: Invalid PGP Detached Signatures Reported as Good Signature on Inbound Mail](https://agentprime.io/advisories/CVE-2026-61855.md) `CVE-2026-61855` · CVE record: zammad zammad · CVSS 5.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Weak cryptography or TLS - [Zammad: S/MIME signature verification allows forged sender impersonation](https://agentprime.io/advisories/CVE-2026-84465.md) `CVE-2026-84465` · CVE record: zammad zammad · CVSS 7.1 High · Not analysed yet · Published 25 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS - [Zammad: PGP signature spoofing via unvalidated verification return](https://agentprime.io/advisories/CVE-2026-56727.md) `CVE-2026-56727` · CVE record: zammad zammad · CVSS 7.1 High · Not analysed yet · Published 25 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-391 - [PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink](https://agentprime.io/advisories/CVE-2026-97469.md) `CVE-2026-97469` · CVE record: DALIBO PostgreSQL Anonymizer · CVSS 4.3 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Weak cryptography or TLS - [Improper signature verification in IRONMACE Ironshield](https://agentprime.io/advisories/CVE-2026-97732.md) `CVE-2026-97732` · CVE record: IRONMACE Ironshield · CVSS 5.1 Medium · Not analysed yet · Published 25 Sept 2026 · Tags: Weak cryptography or TLS - [Improper signature verification in MinIO](https://agentprime.io/advisories/CVE-2026-97731.md) `CVE-2026-97731` · CVE record: MinIO MinIO · CVSS 7.1 High · Not analysed yet · Published 25 Sept 2026 · Tags: Weak cryptography or TLS - [Botslab G980H Dashcams Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2026-82585.md) `CVE-2026-82585` · CVE record: Botslab G980H · CVSS 7.1 High · Not analysed yet · Published 24 Sept 2026 · Tags: Weak cryptography or TLS - [social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing](https://agentprime.io/advisories/GHSA-3c93-f73f-qc9h.md) `GHSA-3c93-f73f-qc9h`, `CVE-2026-57178`, `PYSEC-2026-4165` · PyPI `social-auth-core`: affected `<5.0.0`, fixed in `5.0.0` · CVSS 7.4 High · Not analysed yet · Published 24 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS - [Improper certificate validation in Eufy Omni C20](https://agentprime.io/advisories/CVE-2026-93291.md) `CVE-2026-93291` · CVE record: Eufy Omni C20 · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: Weak cryptography or TLS - [Improper certificate validation in Dell ThinOS 10](https://agentprime.io/advisories/CVE-2026-82157.md) `CVE-2026-82157` · CVE record: Dell ThinOS 10 · CVSS 8.3 High · Not analysed yet · Published 24 Sept 2026 · Tags: Weak cryptography or TLS - [TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine](https://agentprime.io/advisories/CVE-2026-77707.md) `CVE-2026-77707` · CVE record: HAVELSAN Inc. Liman Render Engine · CVSS 5.9 Medium · Not analysed yet · Published 24 Sept 2026 · Tags: Weak cryptography or TLS - [IBM Db2 Mirror for i is vulnerable to obtain sensitive information \[\]](https://agentprime.io/advisories/CVE-2026-18104.md) `CVE-2026-18104` · CVE record: IBM Db2 Mirror for i · CVSS 3.3 Low · Not analysed yet · Published 24 Sept 2026 · Tags: Weak cryptography or TLS - [Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy](https://agentprime.io/advisories/GHSA-rj24-g8cc-g7g2.md) `GHSA-rj24-g8cc-g7g2`, `CVE-2026-91187`, `EEF-CVE-2026-91187` · Hex `nimble_zta`: affected `>=0.1.2, <0.1.3`, fixed in `0.1.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: Weak cryptography or TLS - [An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function](https://agentprime.io/advisories/CVE-2026-51996.md) `CVE-2026-51996` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Sept 2026 · Tags: Weak cryptography or TLS - [RabbitMQ: Trust-store whitelist by Issuer+Serial only](https://agentprime.io/advisories/CVE-2026-67231.md) `CVE-2026-67231` · CVE record: rabbitmq rabbitmq-server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS - [RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch](https://agentprime.io/advisories/CVE-2026-67404.md) `CVE-2026-67404` · CVE record: rabbitmq rabbitmq-server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS - [sfturing hosp_order MailUtil.java getProperties cleartext transmission](https://agentprime.io/advisories/CVE-2026-96550.md) `CVE-2026-96550` · CVE record: sfturing hosp_order · CVSS 6.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS, CWE-310 - [Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production](https://agentprime.io/advisories/CVE-2026-82356.md) `CVE-2026-82356` · CVE record: Imprivata Imprivata Enterprise Access Management · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS - [Isotope eCommerce through 2.9.10 Weak Order Identifier Generation](https://agentprime.io/advisories/CVE-2026-96599.md) `CVE-2026-96599` · CVE record: isotope isotope-core · CVSS 8.2 High · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS - [Improper certificate validation in Dell Secure Connect Gateway (SCG) Policy Manager](https://agentprime.io/advisories/CVE-2026-73587.md) `CVE-2026-73587` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 6.8 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS - [Foxit PDF Editor/Reader FoxitUpdater Improper Certificate Validation Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2026-91812.md) `CVE-2026-91812` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 7.9 High · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS - [Security vulnerability: Foxit PDF Editor/Reader Fails to Detect Modifications to Signed Documents Displaying Newly Added Content](https://agentprime.io/advisories/CVE-2026-91814.md) `CVE-2026-91814` · CVE record: Foxit Software Inc. Foxit PDF Editor and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Weak cryptography or TLS - [Insufficiently random values in OpenEye Apex Network Video Recorder (NVR)](https://agentprime.io/advisories/CVE-2026-92930.md) `CVE-2026-92930` · CVE record: OpenEye Apex Network Video Recorder (NVR) · CVSS 6.2 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18176.md) `CVE-2026-18176` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 7.4 High · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18173.md) `CVE-2026-18173` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 3.7 Low · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18153.md) `CVE-2026-18153` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 5.4 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18152.md) `CVE-2026-18152` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 7.4 High · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities](https://agentprime.io/advisories/CVE-2026-18134.md) `CVE-2026-18134` · CVE record: IBM Financial Transaction Manager (FTM) for RedHat OpenShift · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [Multiple Vulnerabilities in IBM Concert Software](https://agentprime.io/advisories/CVE-2025-36084.md) `CVE-2025-36084` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [Adobe Connect | Improper Certificate Validation (CWE-295)](https://agentprime.io/advisories/CVE-2026-83964.md) `CVE-2026-83964` · CVE record: Adobe Adobe Connect and 1 more · CVSS 6.2 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [Notepad++: Authenticode verification bypass allows modified updater execution](https://agentprime.io/advisories/CVE-2026-85995.md) `CVE-2026-85995` · CVE record: notepad-plus-plus notepad-plus-plus · CVSS 7.3 High · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys](https://agentprime.io/advisories/CVE-2026-94456.md) `CVE-2026-94456` · CVE record: GitroomHQ postiz-app · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS, CWE-341 - [Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass](https://agentprime.io/advisories/CVE-2026-80154.md) `CVE-2026-80154` · CVE record: LANTRONIX SLC8000 and 4 more · CVSS 8.9 High · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [Improper certificate validation in NVIDIA Infrastructure Controller](https://agentprime.io/advisories/CVE-2026-65118.md) `CVE-2026-65118` · CVE record: NVIDIA Infrastructure Controller · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [Improper certificate validation in NVIDIA Infrastructure Controller](https://agentprime.io/advisories/CVE-2026-65129.md) `CVE-2026-65129` · CVE record: NVIDIA Infrastructure Controller · CVSS 6.7 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [Keycloak-services: keycloak-services: potential kdc spoofing bypass when kerberos password authentication is enabled](https://agentprime.io/advisories/CVE-2026-95503.md) `CVE-2026-95503` · CVE record: Red Hat Red Hat build of Keycloak 26.6.8 and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Weak cryptography or TLS - [Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target](https://agentprime.io/advisories/CVE-2026-91166.md) `CVE-2026-91166` · CVE record: warp-tech warpgate · CVSS 5.7 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Weak cryptography or TLS, CWE-923 - [Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before signed body is consumed](https://agentprime.io/advisories/CVE-2026-75939.md) `CVE-2026-75939` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.18 and 2 more · CVSS 7.4 High · Not analysed yet · Published 21 Sept 2026 · Tags: Weak cryptography or TLS - [Noobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-copy-source header](https://agentprime.io/advisories/CVE-2026-94368.md) `CVE-2026-94368` · CVE record: Red Hat Red Hat Openshift Data Foundation 4 · CVSS 7.1 High · Not analysed yet · Published 21 Sept 2026 · Tags: Weak cryptography or TLS - [NivoCart through 2.4.0 Predictable Administrator Password Reset Token](https://agentprime.io/advisories/CVE-2026-94107.md) `CVE-2026-94107` · CVE record: nivocart nivocart · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Weak cryptography or TLS Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .