# Weak cryptography or TLS. Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [OpenSSL partial chain store policy bypass](https://agentprime.io/advisories/CVE-2025-14819.md) `CVE-2025-14819` · CVE record: curl curl · CVSS 5.3 Medium · Not analysed yet · Published 8 Jan 2026 · Tags: Weak cryptography or TLS - [No QUIC certificate pinning with GnuTLS](https://agentprime.io/advisories/CVE-2025-13034.md) `CVE-2025-13034` · CVE record: curl curl · CVSS 5.9 Medium · Not analysed yet · Published 8 Jan 2026 · Tags: Weak cryptography or TLS - [FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure](https://agentprime.io/advisories/CVE-2019-25278.md) `CVE-2019-25278` · CVE record: iWT Ltd. FaceSentry Access Control System · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jan 2026 · Tags: Weak cryptography or TLS - [EXCHANGE OF CREDENTIALS IN CLEAR TEXT](https://agentprime.io/advisories/CVE-2026-22544.md) `CVE-2026-22544` · CVE record: EFACEC QC 60/90/120 · CVSS 8.7 High · Not analysed yet · Published 7 Jan 2026 · Tags: Weak cryptography or TLS - [Apache Uniffle: Insecure SSL Configuration in Uniffle HTTP Client](https://agentprime.io/advisories/CVE-2025-68637.md) `CVE-2025-68637` · CVE record: Apache Software Foundation Apache Uniffle · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jan 2026 · Tags: Weak cryptography or TLS - [iDS6 DSSPro Digital Signage System 6.2 Cleartext Password Disclosure via Cookie](https://agentprime.io/advisories/CVE-2020-36917.md) `CVE-2020-36917` · CVE record: Guangzhou Yeroo Tech Co., Ltd. iDS6 DSSPro Digital Signage System · CVSS 8.6 High · Not analysed yet · Published 6 Jan 2026 · Tags: Weak cryptography or TLS - [QiHang Media Web Digital Signage 3.0.9 Cookie Authentication Credentials Disclosure](https://agentprime.io/advisories/CVE-2020-36914.md) `CVE-2020-36914` · CVE record: Shenzhen Xingmeng Qihang Media Co., Ltd. QiHang Media Web (QH.aspx) Digital Signage · CVSS 8.6 High · Not analysed yet · Published 6 Jan 2026 · Tags: Weak cryptography or TLS - [Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.5 - Unauthenticated Sensitive Information Exposure](https://agentprime.io/advisories/CVE-2025-11723.md) `CVE-2025-11723` · CVE record: croixhaug Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin · CVSS 6.5 Medium · Not analysed yet · Published 6 Jan 2026 · Tags: Weak cryptography or TLS - [libtpms returns wrong initialization vector when certain symmetric ciphers are used](https://agentprime.io/advisories/CVE-2026-21444.md) `CVE-2026-21444` · CVE record: stefanberger libtpms · CVSS 5.5 Medium · Not analysed yet · Published 2 Jan 2026 · Tags: Weak cryptography or TLS - [Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.](https://agentprime.io/advisories/CVE-2025-67159.md) `CVE-2025-67159` · CVE record · CVSS 7.5 High · Not analysed yet · Published 2 Jan 2026 · Tags: Weak cryptography or TLS - [Improper certificate validation in KDE messagelib](https://agentprime.io/advisories/CVE-2025-69412.md) `CVE-2025-69412` · CVE record: KDE messagelib · CVSS 3.4 Low · Not analysed yet · Published 31 Dec 2025 · Tags: Weak cryptography or TLS - [Coturn has unsafe nonce and relay port randomization due to weak random number generation.](https://agentprime.io/advisories/CVE-2025-69217.md) `CVE-2025-69217` · CVE record: coturn coturn · CVSS 7.7 High · Not analysed yet · Published 30 Dec 2025 · Tags: Weak cryptography or TLS - [Weak Algorithm Support in SSH Server on TL-WR820N](https://agentprime.io/advisories/CVE-2025-14175.md) `CVE-2025-14175` · CVE record: TP-Link Systems Inc. TL-WR820N v2.8 · CVSS 6.0 Medium · Not analysed yet · Published 29 Dec 2025 · Tags: Weak cryptography or TLS - [Data Exposure in Kings Information & Network KESS Enterprise](https://agentprime.io/advisories/CVE-2025-15065.md) `CVE-2025-15065` · CVE record: Kings Information & Network Co. KESS Enterprise · CVSS 8.6 High · Not analysed yet · Published 29 Dec 2025 · Tags: Information disclosure, Weak cryptography or TLS - [Improper signature verification in GnuPG](https://agentprime.io/advisories/CVE-2025-68972.md) `CVE-2025-68972` · CVE record: GnuPG GnuPG · CVSS 5.9 Medium · Not analysed yet · Published 27 Dec 2025 · Tags: Weak cryptography or TLS - [FreshRSS has weak cryptographic randomness in remember-me token and nonce generation](https://agentprime.io/advisories/CVE-2025-68932.md) `CVE-2025-68932` · CVE record: FreshRSS FreshRSS · CVSS 2.9 Low · Not analysed yet · Published 26 Dec 2025 · Tags: Weak cryptography or TLS - [DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2025-62578.md) `CVE-2025-62578` · CVE record: Delta Electronics DVP-12SE · CVSS 7.2 High · Not analysed yet · Published 26 Dec 2025 · Tags: Weak cryptography or TLS - [Insufficient certificate validation](https://agentprime.io/advisories/CVE-2025-52598.md) `CVE-2025-52598` · CVE record: Hanwha Vision Co., Ltd. QNV-C8012 · CVSS 6.3 Medium · Not analysed yet · Published 26 Dec 2025 · Tags: Weak cryptography or TLS - [Amazon S3 Encryption Client has a Key Commitment Issue in github.com/aws/amazon-s3-encryption-client-go](https://agentprime.io/advisories/GHSA-3g75-q268-r9r6.md) `GHSA-3g75-q268-r9r6`, `CVE-2025-14764`, `GO-2025-4250` · Go `github.com/aws/amazon-s3-encryption-client-go` and 2 more: affected `*`, no fixed version yet · CVSS 6.0 Medium · Not analysed yet · Published 22 Dec 2025 · Tags: Weak cryptography or TLS - [Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator](https://agentprime.io/advisories/CVE-2025-26379.md) `CVE-2025-26379` · CVE record: Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG · CVSS 7.2 High · Not analysed yet · Published 22 Dec 2025 · Tags: Weak cryptography or TLS - [Johnson Controls PowerG and IQPanel cleartext transmission of sensitive information](https://agentprime.io/advisories/CVE-2025-61738.md) `CVE-2025-61738` · CVE record: Johnson Controls IQPanel2, IQHub,IQPanel2+,IQPanel 4,PowerG · CVSS 2.3 Low · Not analysed yet · Published 22 Dec 2025 · Tags: Weak cryptography or TLS - [Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret](https://agentprime.io/advisories/CVE-2023-53951.md) `CVE-2023-53951` · CVE record: Gauzy ever gauzy · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Dec 2025 · Tags: Weak cryptography or TLS - [Apache Log4j does not verify the TLS hostname in its Socket Appender](https://agentprime.io/advisories/GHSA-vc5p-v9hr-52mj.md) `GHSA-vc5p-v9hr-52mj`, `CVE-2025-68161` · Maven `org.apache.logging.log4j:log4j-core`: affected `>=2.0-beta9, <2.25.3`, fixed in `2.25.3` · CVSS 6.3 Medium · Not analysed yet · Published 18 Dec 2025 · Tags: Weak cryptography or TLS - [Kentico Xperience <= 12.0.102 URL Hashing Cryptography Vulnerability](https://agentprime.io/advisories/CVE-2021-47712.md) `CVE-2021-47712` · CVE record: Kentico Xperience · CVSS 6.9 Medium · Not analysed yet · Published 18 Dec 2025 · Tags: Weak cryptography or TLS - [AWS SDK for PHP's S3 Encryption Client has a Key Commitment Issue](https://agentprime.io/advisories/GHSA-x8cp-jf6f-r4xh.md) `GHSA-x8cp-jf6f-r4xh`, `CVE-2025-14761`, `PKSA-dxyf-6n16-t87m` · Packagist `aws/aws-sdk-php`: affected `<3.368.0`, fixed in `3.368.0` · CVSS 6.0 Medium · Not analysed yet · Published 18 Dec 2025 · Tags: Weak cryptography or TLS - [AWS SDK for Ruby's S3 Encryption Client has a Key Commitment Issue](https://agentprime.io/advisories/GHSA-2xgq-q749-89fq.md) `GHSA-2xgq-q749-89fq`, `CVE-2025-14762` · RubyGems `aws-sdk-s3`: affected `<1.208.0`, fixed in `1.208.0` · CVSS 6.0 Medium · Not analysed yet · Published 18 Dec 2025 · Tags: Weak cryptography or TLS - [Amazon S3 Encryption Client for Java has a Key Commitment Issue](https://agentprime.io/advisories/GHSA-x44p-gvrj-pj2r.md) `GHSA-x44p-gvrj-pj2r`, `CVE-2025-14763` · Maven `software.amazon.encryption.s3:amazon-s3-encryption-client-java`: affected `<4.0.0`, fixed in `4.0.0` · CVSS 6.0 Medium · Not analysed yet · Published 18 Dec 2025 · Tags: Weak cryptography or TLS - [Amazon S3 Encryption Client for .NET has a Key Commitment Issue](https://agentprime.io/advisories/GHSA-4v42-65r3-3gjx.md) `GHSA-4v42-65r3-3gjx`, `CVE-2025-14759` · NuGet `Amazon.Extensions.S3.Encryption`: affected `<3.2.0`, fixed in `3.2.0` · CVSS 6.0 Medium · Not analysed yet · Published 18 Dec 2025 · Tags: Weak cryptography or TLS - [Broken or risky cryptographic algorithm in AWS SDK for C++](https://agentprime.io/advisories/CVE-2025-14760.md) `CVE-2025-14760` · CVE record: AWS AWS SDK for C++ · CVSS 6.0 Medium · Not analysed yet · Published 17 Dec 2025 · Tags: Weak cryptography or TLS - [RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.](https://agentprime.io/advisories/CVE-2025-67168.md) `CVE-2025-67168` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 17 Dec 2025 · Tags: Weak cryptography or TLS - [The OTA firmware update mechanism in Netun Solutions HelpFlash IoT (firmware v18_178_221102_ASCII_PRO_1R5_50) uses hard-coded WiFi credentials identical across all devices and does not authenticate u…](https://agentprime.io/advisories/CVE-2025-65855.md) `CVE-2025-65855` · CVE record · CVSS 6.6 Medium · Not analysed yet · Published 17 Dec 2025 · Tags: Weak cryptography or TLS, Hard-coded credentials, CWE-494 - [Weak Password Hash in Core Privileged Access Manager (BoKS)](https://agentprime.io/advisories/CVE-2025-13532.md) `CVE-2025-13532` · CVE record: Fortra Core Privileged Access Manager (BoKS) · CVSS 6.2 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Weak cryptography or TLS - [HCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information](https://agentprime.io/advisories/CVE-2025-62330.md) `CVE-2025-62330` · CVE record: HCL Software DevOps Deploy · CVSS 5.9 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Weak cryptography or TLS - [ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay](https://agentprime.io/advisories/GHSA-6gvq-jcmp-8959.md) `GHSA-6gvq-jcmp-8959`, `CVE-2025-68113`, `GO-2025-4239`, `PKSA-5rb8-j658-qvzz`, `PYSEC-2026-1115` · Go `github.com/altcha-org/altcha-lib-go` and 6 more: affected `<1.0.0`, fixed in `1.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: Weak cryptography or TLS, CWE-115 - [ReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMP](https://agentprime.io/advisories/CVE-2023-53881.md) `CVE-2023-53881` · CVE record: Ruijie ReyeeOS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Dec 2025 · Tags: Weak cryptography or TLS - [GOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component](https://agentprime.io/advisories/CVE-2023-53875.md) `CVE-2023-53875` · CVE record: Gomlab GOM Player · CVSS 7.5 High · Not analysed yet · Published 15 Dec 2025 · Tags: Weak cryptography or TLS - [IBM DevOps Deploy is susceptible to a Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2025-13489.md) `CVE-2025-13489` · CVE record: IBM UCD - IBM DevOps Deploy · CVSS 5.9 Medium · Not analysed yet · Published 15 Dec 2025 · Tags: Weak cryptography or TLS - [Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values in github.com/gofiber/utils](https://agentprime.io/advisories/GHSA-m98w-cqp3-qcqr.md) `GHSA-m98w-cqp3-qcqr`, `CVE-2025-66565`, `GO-2025-4208` · Go `github.com/gofiber/utils` and 1 more: affected `<1.2.0`, fixed in `1.2.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Dec 2025 · Tags: Weak cryptography or TLS, CWE-252, CWE-331 - [Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client Certificates](https://agentprime.io/advisories/GHSA-m9gh-789g-q5pv.md) `GHSA-m9gh-789g-q5pv`, `BIT-elasticsearch-2025-37731`, `CVE-2025-37731` · Maven `org.elasticsearch.plugin:x-pack-core` and 1 more: affected `>=7.0.0-alpha1, <8.19.8 || >=9.0.0-beta1, <9.1.8 || >=9.2.0, <9.2.2`, fixed in `8.19.8`, `9.1.8`, `9.2.2` · CVSS 6.8 Medium · Not analysed yet · Published 15 Dec 2025 · Tags: Authentication bypass, Weak cryptography or TLS - [Improper certificate validation in LINE Corporation LINE client for iOS](https://agentprime.io/advisories/CVE-2025-14022.md) `CVE-2025-14022` · CVE record: LINE Corporation LINE client for iOS · CVSS 7.7 High · Not analysed yet · Published 15 Dec 2025 · Tags: Weak cryptography or TLS - [Tenda AX9 httpd image_check weak hash](https://agentprime.io/advisories/CVE-2025-14636.md) `CVE-2025-14636` · CVE record: Tenda AX9 · CVSS 6.3 Medium · Not analysed yet · Published 13 Dec 2025 · Tags: Weak cryptography or TLS - [Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X](https://agentprime.io/advisories/CVE-2025-36751.md) `CVE-2025-36751` · CVE record: Growatt ShineLan-X · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Dec 2025 · Tags: Weak cryptography or TLS - [Login Lockdown & Protection <= 2.14 - IP Block Bypass](https://agentprime.io/advisories/CVE-2025-11707.md) `CVE-2025-11707` · CVE record: webfactory Login Lockdown & Protection · CVSS 5.3 Medium · Not analysed yet · Published 13 Dec 2025 · Tags: Weak cryptography or TLS - [Improper signature verification in Apple macOS](https://agentprime.io/advisories/CVE-2025-43522.md) `CVE-2025-43522` · CVE record: Apple macOS · CVSS 3.3 Low · Not analysed yet · Published 12 Dec 2025 · Tags: Weak cryptography or TLS - [Improper signature verification in Apple macOS](https://agentprime.io/advisories/CVE-2025-43521.md) `CVE-2025-43521` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 12 Dec 2025 · Tags: Weak cryptography or TLS - [NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM)](https://agentprime.io/advisories/GHSA-4jj9-cgqc-x9h5.md) `GHSA-4jj9-cgqc-x9h5`, `CVE-2025-66001`, `GO-2025-4235` · Go `github.com/neuvector/neuvector`: affected `>=5.3.0, <5.4.8`, fixed in `5.4.8` · CVSS 8.8 High · Not analysed yet · Published 12 Dec 2025 · Tags: Weak cryptography or TLS - [Apache StreamPark uses a Weak Encryption Algorithm](https://agentprime.io/advisories/GHSA-749j-2hp6-8cxm.md) `GHSA-749j-2hp6-8cxm`, `CVE-2025-54981` · Maven `org.apache.streampark:streampark`: affected `>=2.0.0, <2.1.7`, fixed in `2.1.7` · CVSS 7.5 High · Not analysed yet · Published 12 Dec 2025 · Tags: Weak cryptography or TLS - [A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM](https://agentprime.io/advisories/CVE-2025-13053.md) `CVE-2025-13053` · CVE record: ASUSTOR ADM · CVSS 7.0 High · Not analysed yet · Published 12 Dec 2025 · Tags: Weak cryptography or TLS - [An improper certificates validation vulnerability was found in the Notification settings of ADM](https://agentprime.io/advisories/CVE-2025-13052.md) `CVE-2025-13052` · CVE record: ASUSTOR ADM · CVSS 7.0 High · Not analysed yet · Published 12 Dec 2025 · Tags: Weak cryptography or TLS - [Foxit PDF Editor and Reader before 2025.2.1 allow signature spoofing via triggers.](https://agentprime.io/advisories/CVE-2025-59803.md) `CVE-2025-59803` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Weak cryptography or TLS - [An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.](https://agentprime.io/advisories/CVE-2025-55311.md) `CVE-2025-55311` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Weak cryptography or TLS - [Predictable Default Wi-Fi Password in EZCast Pro II Dongle](https://agentprime.io/advisories/CVE-2025-13955.md) `CVE-2025-13955` · CVE record: EZCast EZCast Pro II · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Dec 2025 · Tags: Weak cryptography or TLS - [The application uses an insecure hashing algorithm (MD5) to hash passwords.](https://agentprime.io/advisories/CVE-2025-65831.md) `CVE-2025-65831` · CVE record · CVSS 7.5 High · Not analysed yet · Published 10 Dec 2025 · Tags: Weak cryptography or TLS - [Due to a lack of certificate validation, all traffic from the mobile application can be intercepted.](https://agentprime.io/advisories/CVE-2025-65830.md) `CVE-2025-65830` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Dec 2025 · Tags: Weak cryptography or TLS - [The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP.](https://agentprime.io/advisories/CVE-2025-65827.md) `CVE-2025-65827` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Dec 2025 · Tags: Weak cryptography or TLS - [The firmware on the basestation of the Meatmeet is not encrypted.](https://agentprime.io/advisories/CVE-2025-65825.md) `CVE-2025-65825` · CVE record · CVSS 4.6 Medium · Not analysed yet · Published 10 Dec 2025 · Tags: Weak cryptography or TLS - [Multiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 devices, allow attackers to install malicious firmware without…](https://agentprime.io/advisories/CVE-2025-65295.md) `CVE-2025-65295` · CVE record · CVSS 8.1 High · Not analysed yet · Published 10 Dec 2025 · Tags: Weak cryptography or TLS, Memory corruption - [Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail to validate server certificates in TLS connections for discovery services and CoAP gateway communicatio…](https://agentprime.io/advisories/CVE-2025-65291.md) `CVE-2025-65291` · CVE record · CVSS 7.4 High · Not analysed yet · Published 10 Dec 2025 · Tags: Weak cryptography or TLS - [Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 fail to validate server certificates during HTTPS firmware downloads, allowing man-in-the-middle attacke…](https://agentprime.io/advisories/CVE-2025-65290.md) `CVE-2025-65290` · CVE record · CVSS 7.4 High · Not analysed yet · Published 10 Dec 2025 · Tags: Weak cryptography or TLS - [Acrobat Reader | Improper Verification of Cryptographic Signature (CWE-347)](https://agentprime.io/advisories/CVE-2025-64786.md) `CVE-2025-64786` · CVE record: Adobe Acrobat Reader · CVSS 3.3 Low · Not analysed yet · Published 9 Dec 2025 · Tags: Weak cryptography or TLS Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .