# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Payment Gateway of Stripe for WooCommerce <= 5.0.8 - Unauthenticated Improper Verification of Cryptographic Signature via woocommerce_api_wt_stripe Webhook Endpoint](https://agentprime.io/advisories/CVE-2026-9832.md)
  `CVE-2026-9832` · CVE record: themehigh Payment Gateway of Stripe for WooCommerce · CVSS 5.3 Medium · Not analysed yet · Published 19 Sept 2026 · Tags: Weak cryptography or TLS
- [Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG](https://agentprime.io/advisories/CVE-2026-93868.md)
  `CVE-2026-93868` · CVE record: Cotonti Cotonti · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [IBM Guardium Data Protection is affected by multiple vulnerabilities.](https://agentprime.io/advisories/CVE-2026-84081.md)
  `CVE-2026-84081` · CVE record: IBM Guardium Data Protection · CVSS 8.1 High · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass](https://agentprime.io/advisories/GHSA-xcw4-53cc-hv32.md)
  `GHSA-xcw4-53cc-hv32`, `CVE-2026-59163`, `PYSEC-2026-4106` · PyPI `mnemosyne-memory`: affected `<3.10.1`, fixed in `3.10.1` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing](https://agentprime.io/advisories/GHSA-82r6-8w77-94w6.md)
  `GHSA-82r6-8w77-94w6`, `CVE-2026-63374`, `PYSEC-2026-4025` · PyPI `anyio`: affected `<4.14.2`, fixed in `4.14.2` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)](https://agentprime.io/advisories/CVE-2026-84975.md)
  `CVE-2026-84975` · CVE record: pjsip pjproject · CVSS 7.4 High · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [CareCam CM2507 Use of Password Hash With Insufficient Computational Effort](https://agentprime.io/advisories/CVE-2026-85497.md)
  `CVE-2026-85497` · CVE record: CareCam HMT.CM2507 Firmware · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [Cleartext Transmission of Sensitive Information in Bransys ELD](https://agentprime.io/advisories/CVE-2026-86689.md)
  `CVE-2026-86689` · CVE record: Bransys ELD · CVSS 8.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [Multiple vulnerabilities in IBM Controller](https://agentprime.io/advisories/CVE-2025-36421.md)
  `CVE-2025-36421` · CVE record: IBM Controller · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities](https://agentprime.io/advisories/CVE-2025-33147.md)
  `CVE-2025-33147` · CVE record: IBM Cognos Analytics · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities](https://agentprime.io/advisories/CVE-2024-56344.md)
  `CVE-2024-56344` · CVE record: IBM Cognos Analytics · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [Sensitive File Disclosure via Relative Path Traversal in NetBackup Flex OS Shell](https://agentprime.io/advisories/CVE-2026-28199.md)
  `CVE-2026-28199` · CVE record: Cohesity NetBackup Flex OS · CVSS 4.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell](https://agentprime.io/advisories/CVE-2026-28198.md)
  `CVE-2026-28198` · CVE record: Cohesity NetBackup Flex OS · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Synology DiskStation Manager (DSM)](https://agentprime.io/advisories/CVE-2026-40539.md)
  `CVE-2026-40539` · CVE record: Synology DiskStation Manager (DSM) · CVSS 7.1 High · Not analysed yet · Published 18 Sept 2026 · Tags: Weak cryptography or TLS
- [OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning](https://agentprime.io/advisories/GHSA-w34q-cm8f-9c5x.md)
  `GHSA-w34q-cm8f-9c5x`, `CVE-2026-81871`, `GO-2026-6508` · Go `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`: affected `<0.21.0`, fixed in `0.21.0` · CVSS 6.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-923
- [Steeltoe: Header-forwarded client cert lacks proof of private-key possession](https://agentprime.io/advisories/GHSA-5mq7-rwhj-4fh9.md)
  `GHSA-5mq7-rwhj-4fh9`, `CVE-2026-81868` · NuGet `Steeltoe.Security.Authorization.Certificate`: affected `<4.3.0`, fixed in `4.3.0` · CVSS 6.5 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Malformed connection string may disable field level encryption](https://agentprime.io/advisories/CVE-2026-92757.md)
  `CVE-2026-92757` · CVE record: MongoDB Inc. MongoDB Entity Framework Core Provider · CVSS 6.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python](https://agentprime.io/advisories/CVE-2026-92943.md)
  `CVE-2026-92943` · CVE record: AWS AWSIoTPythonSDK · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [Combining encryption settings may disable encryption](https://agentprime.io/advisories/CVE-2026-92756.md)
  `CVE-2026-92756` · CVE record: MongoDB Inc. MongoDB Entity Framework Core Provider · CVSS 6.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID](https://agentprime.io/advisories/GHSA-c3gv-825q-fvmp.md)
  `GHSA-c3gv-825q-fvmp`, `CVE-2026-86038` · npm `@libp2p/gossipsub`: affected `>=15.0.0, <16.0.5`, fixed in `16.0.5` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-345
- [AsyncHttpClient sends origin credentials to the proxy on the plaintext CONNECT request](https://agentprime.io/advisories/GHSA-xr57-gcx8-52hf.md)
  `GHSA-xr57-gcx8-52hf`, `CVE-2026-85720` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.0, <3.0.12 || >=2.0.0, <2.16.1`, fixed in `3.0.12`, `2.16.1` · CVSS 5.9 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser](https://agentprime.io/advisories/GHSA-33mj-cw25-m34h.md)
  `GHSA-33mj-cw25-m34h`, `CVE-2026-77405`, `GO-2026-6492` · Go `github.com/rabbitmq/amqp091-go`: affected `<1.13.0`, fixed in `1.13.0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-316
- [mport permits repository and package mirror fetches over insecure transport](https://agentprime.io/advisories/CVE-2026-54586.md)
  `CVE-2026-54586` · CVE record: MidnightBSD mport · CVSS 6.0 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-345
- [mport bootstrap index fetch can continue after hash verification failure](https://agentprime.io/advisories/CVE-2026-54581.md)
  `CVE-2026-54581` · CVE record: MidnightBSD mport · CVSS 8.3 High · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, CWE-345
- [AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP](https://agentprime.io/advisories/CVE-2026-85719.md)
  `CVE-2026-85719` · CVE record: AsyncHttpClient async-http-client · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [Improper certificate validation in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-81447.md)
  `CVE-2026-81447` · CVE record: Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [Token revocation record built from unverified JWT claims in AshAuthentication](https://agentprime.io/advisories/GHSA-mfwg-5cpf-px58.md)
  `GHSA-mfwg-5cpf-px58`, `CVE-2026-78223`, `EEF-CVE-2026-78223` · Hex `ash_authentication`: affected `>=0.2.0, <4.15.0 || >=5.0.0-rc.0, <5.0.0-rc.14`, fixed in `4.15.0`, `5.0.0-rc.14` · CVSS 6.9 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [admin3 through 3.0.0 Weak Password Hashing via Single-Round MD5](https://agentprime.io/advisories/CVE-2026-92921.md)
  `CVE-2026-92921` · CVE record: cjbi admin3 · CVSS 6.9 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [AVideo Weak PRNG Activation Code Authentication Bypass](https://agentprime.io/advisories/CVE-2026-92913.md)
  `CVE-2026-92913` · CVE record: WWBN AVideo · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [AVideo Cryptographically Weak PRNG via uniqid Stream Key](https://agentprime.io/advisories/CVE-2026-92912.md)
  `CVE-2026-92912` · CVE record: WWBN AVideo · CVSS 8.3 High · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-81438.md)
  `CVE-2026-81438` · CVE record: Dell Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 3.7 Low · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [Newsletter < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification via Predictable Tracking Signature Key](https://agentprime.io/advisories/CVE-2026-86824.md)
  `CVE-2026-86824` · CVE record: Unknown Newsletter · CVSS 4.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS
- [SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret](https://agentprime.io/advisories/CVE-2026-92749.md)
  `CVE-2026-92749` · CVE record: chaitin SafeLine · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-20323.md)
  `CVE-2026-20323` · CVE record: Cisco Cisco Secure Firewall Management Center (FMC) and 1 more · CVSS 8.3 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache](https://agentprime.io/advisories/CVE-2026-92718.md)
  `CVE-2026-92718` · CVE record: projectdiscovery nuclei · CVSS 7.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Sequoia-openpgp: sequoia-openpgp: cryptographic integrity compromise via key flag confusion](https://agentprime.io/advisories/CVE-2026-42784.md)
  `CVE-2026-42784` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9 and 4 more · CVSS 7.4 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Dell Elastic Cloud Storage (ECS)](https://agentprime.io/advisories/CVE-2025-36591.md)
  `CVE-2025-36591` · CVE record: Dell Elastic Cloud Storage (ECS) · CVSS 4.4 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Advantech EKI-1242IEIMS and others](https://agentprime.io/advisories/CVE-2026-73174.md)
  `CVE-2026-73174` · CVE record: Advantech EKI-1242IEIMS and 1 more · CVSS 8.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper Verification of the Firmware Signature vulnerability](https://agentprime.io/advisories/CVE-2026-86585.md)
  `CVE-2026-86585` · CVE record: Fermax Electronica S.A.U. DUOX PLUS monitor firmware (VEO Wi-Fi range) · CVSS 7.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation in the Firmware Download vulnerability](https://agentprime.io/advisories/CVE-2026-86474.md)
  `CVE-2026-86474` · CVE record: Fermax Electronica S.A.U. DUOX PLUS monitor firmware (VEO Wi-Fi range) · CVSS 7.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Cleartext Transmission of Sensitive Information in the Pairing Process vulnerability](https://agentprime.io/advisories/CVE-2026-85628.md)
  `CVE-2026-85628` · CVE record: Fermax Electronica S.A.U. DuoxMe and 1 more · CVSS 7.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode](https://agentprime.io/advisories/CVE-2026-59969.md)
  `CVE-2026-59969` · CVE record: Apache Software Foundation Apache ZooKeeper · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Security Advisory 0182](https://agentprime.io/advisories/CVE-2026-86109.md)
  `CVE-2026-86109` · CVE record: Arista Networks VeloCloud Edge · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [EspoCRM through 10.0.8 Weak Token Generation via rand()](https://agentprime.io/advisories/CVE-2026-92298.md)
  `CVE-2026-92298` · CVE record: EspoCRM EspoCRM · CVSS 6.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Weak cryptography or TLS
- [Cryptographic Padding Oracle](https://agentprime.io/advisories/CVE-2026-15638.md)
  `CVE-2026-15638` · CVE record: Delinea Secret Server (On-Prem) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Devolutions Server](https://agentprime.io/advisories/CVE-2026-13327.md)
  `CVE-2026-13327` · CVE record: Devolutions Server · CVSS 8.3 High · Not analysed yet · Published 15 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Devolutions Server](https://agentprime.io/advisories/CVE-2026-84850.md)
  `CVE-2026-84850` · CVE record: Devolutions Server · CVSS 4.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Weak cryptography or TLS
- [Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect](https://agentprime.io/advisories/CVE-2026-69212.md)
  `CVE-2026-69212` · CVE record: http4s http4s · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure, Weak cryptography or TLS
- [Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-11929.md)
  `CVE-2026-11929` · CVE record: IBM Verify Identity Access and 3 more · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Weak cryptography or TLS
- [GCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDK](https://agentprime.io/advisories/CVE-2026-19407.md)
  `CVE-2026-19407` · CVE record: Google Cloud Gemini Enterprise Agent Platform SDK for Python · CVSS 7.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: Weak cryptography or TLS
- [Insufficiently random values in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-84606.md)
  `CVE-2026-84606` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS, Information disclosure
- [Improper certificate validation in Apple macOS](https://agentprime.io/advisories/CVE-2026-86889.md)
  `CVE-2026-86889` · CVE record: Apple macOS · CVSS 4.8 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-86881.md)
  `CVE-2026-86881` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Weak cryptography or TLS
- [Vulnerabilities exists in IBM Cloud Pak for Data System](https://agentprime.io/advisories/CVE-2026-17467.md)
  `CVE-2026-17467` · CVE record: IBM Cloud Pak for Data System (Yosemite 1.0) · CVSS 8.2 High · Not analysed yet · Published 14 Sept 2026 · Tags: Weak cryptography or TLS
- [Apache Syncope: SRA OAuth2 JWT signature verification bypass](https://agentprime.io/advisories/CVE-2026-87802.md)
  `CVE-2026-87802` · CVE record: Apache Software Foundation Apache Syncope · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Sept 2026 · Tags: Weak cryptography or TLS
- [andreashappe cochise SSH Host Key ssh_connection.py asyncssh.connect certificate validation](https://agentprime.io/advisories/CVE-2026-90623.md)
  `CVE-2026-90623` · CVE record: andreashappe cochise · CVSS 6.3 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Cleartext transmission of sensitive information in supremainc BioStar 2](https://agentprime.io/advisories/CVE-2026-31278.md)
  `CVE-2026-31278` · CVE record: supremainc BioStar 2 · CVSS 7.7 High · Not analysed yet · Published 14 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Socket Firewall](https://agentprime.io/advisories/CVE-2026-90651.md)
  `CVE-2026-90651` · CVE record: Socket Socket Firewall · CVSS 8.1 High · Not analysed yet · Published 12 Sept 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Kalkitech ASE2000 V2 Communication Test Set](https://agentprime.io/advisories/CVE-2026-90647.md)
  `CVE-2026-90647` · CVE record: Kalkitech ASE2000 V2 Communication Test Set · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Sept 2026 · Tags: Weak cryptography or TLS
- [Weak password hashing in CISA Malcolm](https://agentprime.io/advisories/CVE-2026-90457.md)
  `CVE-2026-90457` · CVE record: CISA Malcolm · CVSS 6.9 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTA5LTExVDIxOjUyOjM2Ljk0MTAwMFoiLCJDVkUtMjAyNi05MDQ1NyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTA5LTIwVDExOjA5OjQwLjg5MTAwMFoiLCJDVkUtMjAyNi05NDEwNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTA5LTIwVDExOjA5OjQwLjg5MTAwMFoiLCJDVkUtMjAyNi05NDEwNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.