# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [An issue pertaining to CWE-295: Improper Certificate Validation was discovered in jxcore jxm master.](https://agentprime.io/advisories/CVE-2025-70045.md)
  `CVE-2025-70045` · CVE record · CVSS 7.4 High · Not analysed yet · Published 23 Feb 2026 · Tags: Weak cryptography or TLS
- [An issue pertaining to CWE-295: Improper Certificate Validation was discovered in fofolee uTools-quickcommand 5.0.3.](https://agentprime.io/advisories/CVE-2025-70044.md)
  `CVE-2025-70044` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Weak cryptography or TLS
- [An issue pertaining to CWE-295: Improper Certificate Validation was discovered in Ayms node-To master.](https://agentprime.io/advisories/CVE-2025-70043.md)
  `CVE-2025-70043` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Feb 2026 · Tags: Weak cryptography or TLS
- [Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication](https://agentprime.io/advisories/CVE-2026-27134.md)
  `CVE-2026-27134` · CVE record: strimzi strimzi-kafka-operator · CVSS 8.1 High · Not analysed yet · Published 20 Feb 2026 · Tags: Authentication bypass, Weak cryptography or TLS, CWE-296
- [Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters](https://agentprime.io/advisories/CVE-2026-27133.md)
  `CVE-2026-27133` · CVE record: strimzi strimzi-kafka-operator · CVSS 5.9 Medium · Not analysed yet · Published 20 Feb 2026 · Tags: Weak cryptography or TLS, CWE-296
- [Traefik affected by TLS ClientAuth Bypass on HTTP/3](https://agentprime.io/advisories/GHSA-gv8r-9rw9-9697.md)
  `GHSA-gv8r-9rw9-9697`, `CVE-2025-68121`, `GO-2026-4530` · Go `github.com/traefik/traefik` and 2 more: affected `<=1.7.34`, no fixed version yet · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Feb 2026 · Tags: Weak cryptography or TLS, CWE-1395
- [Jinan USR IOT Technology Limited (PUSR) USR-W610 Cleartext Transmission of Sensitive Information](https://agentprime.io/advisories/CVE-2026-24455.md)
  `CVE-2026-24455` · CVE record: Jinan USR IOT Technology Limited (PUSR) USR-W610 · CVSS 7.5 High · Not analysed yet · Published 20 Feb 2026 · Tags: Weak cryptography or TLS
- [Cosign considered signatures valid with expired intermediate certificates when transparency log verification is skipped](https://agentprime.io/advisories/GHSA-wfqv-66vq-46rm.md)
  `GHSA-wfqv-66vq-46rm`, `BIT-cosign-2026-24122`, `CVE-2026-24122`, `GO-2026-4529` · Go `github.com/sigstore/cosign`: affected `<3.0.5`, fixed in `3.0.5` · CVSS 3.7 Low · Not analysed yet · Published 19 Feb 2026 · Tags: Weak cryptography or TLS
- [OpenClaw replaced a deprecated sandbox hash algorithm](https://agentprime.io/advisories/GHSA-fh3f-q9qw-93j9.md)
  `GHSA-fh3f-q9qw-93j9`, `CVE-2026-28479` · npm `openclaw`: affected `<2026.2.15`, fixed in `2026.2.15` · CVSS 8.7 High · Not analysed yet · Published 19 Feb 2026 · Tags: Weak cryptography or TLS
- [Apache Tomcat has an Improper Input Validation vulnerability](https://agentprime.io/advisories/GHSA-mgp5-rv84-w37q.md)
  `GHSA-mgp5-rv84-w37q`, `BIT-tomcat-2026-24734`, `CVE-2026-24734` · Maven `org.apache.tomcat.embed:tomcat-embed-core` and 2 more: affected `>=11.0.0-M1, <11.0.18 || >=10.1.0-M7, <10.1.52 || >=9.0.83, <9.0.115`, fixed in `11.0.18`, `10.1.52`, `9.0.115` · CVSS 7.5 High · Not analysed yet · Published 17 Feb 2026 · Tags: Weak cryptography or TLS, CWE-20
- [Apache Tomcat - Client certificate verification bypass](https://agentprime.io/advisories/GHSA-fpj8-gq4v-p354.md)
  `GHSA-fpj8-gq4v-p354`, `BIT-tomcat-2025-66614`, `CVE-2025-66614` · Maven `org.apache.tomcat.embed:tomcat-embed-core` and 2 more: affected `>=11.0.0-M1, <11.0.15 || >=10.1.0-M1, <10.1.50 || >=9.0.0-M1, <9.0.113 || >=8.5.0, <=8.5.100`, fixed in `11.0.15`, `10.1.50`, `9.0.113` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Feb 2026 · Tags: Weak cryptography or TLS, CWE-20
- [IBM Security QRadar EDR Software has multiple vulnerabilities](https://agentprime.io/advisories/CVE-2025-36379.md)
  `CVE-2025-36379` · CVE record: IBM Security QRadar EDR · CVSS 5.9 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Weak cryptography or TLS
- [Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows](https://agentprime.io/advisories/CVE-2025-27903.md)
  `CVE-2025-27903` · CVE record: IBM DB2 Recovery Expert for LUW · CVSS 5.9 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Weak cryptography or TLS
- [Multiple Vulnerabilities in IBM Concert Software.](https://agentprime.io/advisories/CVE-2024-43178.md)
  `CVE-2024-43178` · CVE record: IBM Concert · CVSS 5.9 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Weak cryptography or TLS
- [OpenClaw Hook Session Key Override Enables Targeted Cross-Session Routing](https://agentprime.io/advisories/GHSA-hv93-r4j3-q65f.md)
  `GHSA-hv93-r4j3-q65f` · npm `openclaw`: affected `>=2.0.0-beta3, <2026.2.12`, fixed in `2026.2.12` · CVSS 7.1 High · Not analysed yet · Published 17 Feb 2026 · Tags: Weak cryptography or TLS, Broken access control
- [Beetel 777VR1 SSH Service risky encryption](https://agentprime.io/advisories/CVE-2026-2618.md)
  `CVE-2026-2618` · CVE record: Beetel 777VR1 · CVSS 6.3 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Weak cryptography or TLS, CWE-310
- [An issue in the TLS certification mechanism of Guardian Gryphon v01.06.0006.22 allows attackers to execute commands as root.](https://agentprime.io/advisories/CVE-2025-65753.md)
  `CVE-2025-65753` · CVE record · CVSS 7.5 High · Not analysed yet · Published 17 Feb 2026 · Tags: Weak cryptography or TLS
- [Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids](https://agentprime.io/advisories/CVE-2026-2439.md)
  `CVE-2026-2439` · CVE record: BVA Concierge::Sessions · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Feb 2026 · Tags: Weak cryptography or TLS, CWE-340
- [Maypole versions from 2.10 through 2.13 for Perl generates session ids insecurely](https://agentprime.io/advisories/CVE-2025-15578.md)
  `CVE-2025-15578` · CVE record: TEEJAY Maypole · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Feb 2026 · Tags: Weak cryptography or TLS
- [Micca KE700 Cleartext transmission of key fob ID](https://agentprime.io/advisories/CVE-2026-2539.md)
  `CVE-2026-2539` · CVE record: Micca Auto Electronics Co., Ltd. Car Alarm System KE700 · CVSS 5.7 Medium · Not analysed yet · Published 15 Feb 2026 · Tags: Weak cryptography or TLS
- [Absence of Kernel Module Signature Verification on Linux System of Infotainment ECU](https://agentprime.io/advisories/CVE-2025-32060.md)
  `CVE-2025-32060` · CVE record: Bosch Infotainment system ECU · CVSS 6.7 Medium · Not analysed yet · Published 15 Feb 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon](https://agentprime.io/advisories/CVE-2026-0872.md)
  `CVE-2026-0872` · CVE record: Thalesgroup SafeNet Agent for Windows Logon · CVSS 2.5 Low · Not analysed yet · Published 13 Feb 2026 · Tags: Weak cryptography or TLS
- [Insufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception](https://agentprime.io/advisories/CVE-2025-9293.md)
  `CVE-2025-9293` · CVE record: TP-Link Systems Inc. Tapo App and 4 more · CVSS 7.7 High · Not analysed yet · Published 13 Feb 2026 · Tags: Weak cryptography or TLS
- [WWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions](https://agentprime.io/advisories/CVE-2025-40905.md)
  `CVE-2025-40905` · CVE record: DBOOK WWW::OAuth · CVSS 7.3 High · Not analysed yet · Published 12 Feb 2026 · Tags: Weak cryptography or TLS
- [authentik has a Signature Verification Bypass via SAML Assertion Wrapping](https://agentprime.io/advisories/CVE-2026-25922.md)
  `CVE-2026-25922` · CVE record: goauthentik authentik · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [newbee-mall Unsalted MD5 Password Hashing Enables Offline Credential Cracking](https://agentprime.io/advisories/CVE-2026-26219.md)
  `CVE-2026-26219` · CVE record: newbee-ltd newbee-mall · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Feb 2026 · Tags: Weak cryptography or TLS
- [Xiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITM](https://agentprime.io/advisories/CVE-2026-26214.md)
  `CVE-2026-26214` · CVE record: Xiaomi Technology Co., Ltd. Galaxy FDS Android SDK · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Feb 2026 · Tags: Weak cryptography or TLS
- [Insecure Credential Generation for Solax Power Pocket WiFi models MQTT Cloud Connection](https://agentprime.io/advisories/CVE-2025-15574.md)
  `CVE-2025-15574` · CVE record: SolaX Power Pocket WiFi 3.0 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Feb 2026 · Tags: Weak cryptography or TLS
- [Missing Certificate Validation for Solax Power Pocket WiFi models MQTT Cloud Connection](https://agentprime.io/advisories/CVE-2025-15573.md)
  `CVE-2025-15573` · CVE record: SolaX Power Pocket WiFi 3.0 and 4 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Feb 2026 · Tags: Weak cryptography or TLS
- [PAN-OS: Improper Validation of Terminal Server Agent Certificate](https://agentprime.io/advisories/CVE-2026-0228.md)
  `CVE-2026-0228` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 1.3 Low · Not analysed yet · Published 11 Feb 2026 · Tags: Weak cryptography or TLS
- [Improper Access Control in Pan Software's PanCafe Pro](https://agentprime.io/advisories/CVE-2025-10174.md)
  `CVE-2025-10174` · CVE record: Pan Software & Information Technologies Ltd. PanCafe Pro · CVSS 8.3 High · Not analysed yet · Published 11 Feb 2026 · Tags: Weak cryptography or TLS
- [An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information.](https://agentprime.io/advisories/CVE-2025-70029.md)
  `CVE-2025-70029` · CVE record · CVSS 7.5 High · Not analysed yet · Published 11 Feb 2026 · Tags: Weak cryptography or TLS
- [Azure Local Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-21228.md)
  `CVE-2026-21228` · CVE record: Microsoft Azure Local · CVSS 8.1 High · Not analysed yet · Published 10 Feb 2026 · Tags: Weak cryptography or TLS
- [XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform](https://agentprime.io/advisories/CVE-2026-23687.md)
  `CVE-2026-23687` · CVE record: SAP_SE SAP NetWeaver AS ABAP and ABAP Platform · CVSS 8.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Weak cryptography or TLS
- [SumatraPDF Update MITM -> Arbitrary Code Execution](https://agentprime.io/advisories/CVE-2026-25961.md)
  `CVE-2026-25961` · CVE record: sumatrapdfreader sumatrapdf · CVSS 7.5 High · Not analysed yet · Published 9 Feb 2026 · Tags: Weak cryptography or TLS, CWE-494
- [Keycloak affected by improper invitation token validation](https://agentprime.io/advisories/GHSA-hcvw-475w-8g7p.md)
  `GHSA-hcvw-475w-8g7p`, `CVE-2026-1529` · Maven `org.keycloak:keycloak-services`: affected `>=26.5.0, <26.5.3 || <26.2.13 || >=26.3.0, <26.4.9`, fixed in `26.5.3`, `26.2.13`, `26.4.9` · CVSS 8.1 High · Not analysed yet · Published 9 Feb 2026 · Tags: Weak cryptography or TLS
- [Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure](https://agentprime.io/advisories/GHSA-68rr-p4fp-j59v.md)
  `GHSA-68rr-p4fp-j59v`, `CVE-2025-66630`, `GO-2026-4471` · Go `github.com/gofiber/fiber/v2`: affected `<2.52.11`, fixed in `2.52.11` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Feb 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Eaton Network M3](https://agentprime.io/advisories/CVE-2026-22613.md)
  `CVE-2026-22613` · CVE record: Eaton Network M3 · CVSS 5.7 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Yokogawa Electric Corporation FAST/TOOLS](https://agentprime.io/advisories/CVE-2025-66597.md)
  `CVE-2025-66597` · CVE record: Yokogawa Electric Corporation FAST/TOOLS · CVSS 8.8 High · Not analysed yet · Published 9 Feb 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Yokogawa Electric Corporation FAST/TOOLS](https://agentprime.io/advisories/CVE-2025-66598.md)
  `CVE-2025-66598` · CVE record: Yokogawa Electric Corporation FAST/TOOLS · CVSS 7.1 High · Not analysed yet · Published 9 Feb 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Yokogawa Electric Corporation FAST/TOOLS](https://agentprime.io/advisories/CVE-2025-66604.md)
  `CVE-2025-66604` · CVE record: Yokogawa Electric Corporation FAST/TOOLS · CVSS 2.1 Low · Not analysed yet · Published 9 Feb 2026 · Tags: Weak cryptography or TLS
- [DataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgrade](https://agentprime.io/advisories/CVE-2026-25644.md)
  `CVE-2026-25644` · CVE record: datahub-project datahub · CVSS 7.5 High · Not analysed yet · Published 6 Feb 2026 · Tags: Weak cryptography or TLS
- [Blocklist Bypass possible via ECDSA Signature Malleability](https://agentprime.io/advisories/GHSA-69x3-g4r3-p962.md)
  `GHSA-69x3-g4r3-p962`, `CVE-2026-25793`, `GO-2026-4458` · Go `github.com/slackhq/nebula`: affected `>=1.7.0, <1.10.3`, fixed in `1.10.3` · CVSS 7.6 High · Not analysed yet · Published 6 Feb 2026 · Tags: Weak cryptography or TLS
- [Tanium addressed an improper certificate validation vulnerability in Tanium Appliance.](https://agentprime.io/advisories/CVE-2025-15323.md)
  `CVE-2025-15323` · CVE record: Tanium Tanium Appliance · CVSS 3.7 Low · Not analysed yet · Published 5 Feb 2026 · Tags: Weak cryptography or TLS
- [Improper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle Attack](https://agentprime.io/advisories/CVE-2025-15557.md)
  `CVE-2025-15557` · CVE record: TP-Link Systems Inc. Tapo H100 v1 and 1 more · CVSS 7.5 High · Not analysed yet · Published 5 Feb 2026 · Tags: Weak cryptography or TLS
- [Unexpected session resumption in crypto/tls](https://agentprime.io/advisories/GO-2026-4337.md)
  `GO-2026-4337`, `BIT-golang-2025-68121`, `CVE-2025-68121` · Go `stdlib`: affected `<1.24.13 || >=1.25.0-0, <1.25.7 || >=1.26.0-rc.1, <1.26.0-rc.3`, fixed in `1.24.13`, `1.25.7`, `1.26.0-rc.3` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Feb 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Moxa UC-1200A Series](https://agentprime.io/advisories/CVE-2026-0714.md)
  `CVE-2026-0714` · CVE record: Moxa UC-1200A Series · CVSS 7.0 High · Not analysed yet · Published 5 Feb 2026 · Tags: Weak cryptography or TLS
- [EVE Seals Vault Key With SHA1 PCRs](https://agentprime.io/advisories/GHSA-4jvr-vj2c-8q37.md)
  `GHSA-4jvr-vj2c-8q37`, `CVE-2023-43635`, `GO-2026-4434` · Go `github.com/lf-edge/eve`: affected `<0.0.0-20230519072751-977f42b07fa9`, fixed in `0.0.0-20230519072751-977f42b07fa9` · CVSS 8.8 High · Not analysed yet · Published 4 Feb 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [EVE Doesn't Measure Config Partition From 2 Fronts](https://agentprime.io/advisories/GHSA-phcg-h58r-gmcq.md)
  `GHSA-phcg-h58r-gmcq`, `CVE-2023-43630`, `GO-2026-4430` · Go `github.com/lf-edge/eve`: affected `<0.0.0-20230126065759-d9383a7ee4e1`, fixed in `0.0.0-20230126065759-d9383a7ee4e1` · CVSS 8.8 High · Not analysed yet · Published 4 Feb 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials, Information disclosure
- [Alist has Insecure TLS Config](https://agentprime.io/advisories/GHSA-8jmm-3xwx-w974.md)
  `GHSA-8jmm-3xwx-w974`, `CVE-2026-25160`, `GO-2026-4414` · Go `github.com/alist-org/alist/v3`: affected `<3.57.0`, fixed in `3.57.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Feb 2026 · Tags: Weak cryptography or TLS
- [Tenda AC7 Transmits Admin Credentials Without HTTPS Protection](https://agentprime.io/advisories/CVE-2026-24441.md)
  `CVE-2026-24441` · CVE record: Shenzhen Tenda Technology Co., Ltd. Tenda AC7 · CVSS 8.2 High · Not analysed yet · Published 3 Feb 2026 · Tags: Weak cryptography or TLS
- [Rapid7 InsightVM Signature Validation Vulnerability](https://agentprime.io/advisories/CVE-2026-1568.md)
  `CVE-2026-1568` · CVE record: Rapid7 Vulnerability Management · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [An improper certificate validation vulnerability was found in a third-party NAT traversal module.](https://agentprime.io/advisories/CVE-2026-24935.md)
  `CVE-2026-24935` · CVE record: ASUSTOR ADM · CVSS 6.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Weak cryptography or TLS
- [An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.](https://agentprime.io/advisories/CVE-2026-24934.md)
  `CVE-2026-24934` · CVE record: ASUSTOR ADM · CVSS 6.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: Weak cryptography or TLS
- [An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.](https://agentprime.io/advisories/CVE-2026-24933.md)
  `CVE-2026-24933` · CVE record: ASUSTOR ADM · CVSS 8.9 High · Not analysed yet · Published 3 Feb 2026 · Tags: Weak cryptography or TLS
- [An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.](https://agentprime.io/advisories/CVE-2026-24932.md)
  `CVE-2026-24932` · CVE record: ASUSTOR ADM · CVSS 8.9 High · Not analysed yet · Published 3 Feb 2026 · Tags: Weak cryptography or TLS
- [SageMaker Python SDK has Exposed HMAC](https://agentprime.io/advisories/GHSA-rjrp-m2jw-pv9c.md)
  `GHSA-rjrp-m2jw-pv9c`, `CVE-2026-1777`, `PYSEC-2026-1888` · PyPI `sagemaker`: affected `<2.256.0 || >=3.0, <3.2.0`, fixed in `2.256.0`, `3.2.0` · CVSS 8.5 High · Not analysed yet · Published 2 Feb 2026 · Tags: Information disclosure, Weak cryptography or TLS
- [SageMaker Python SDK has Insecure TLS Configuration](https://agentprime.io/advisories/GHSA-62rc-f4v9-h543.md)
  `GHSA-62rc-f4v9-h543`, `CVE-2026-1778`, `PYSEC-2026-1886` · PyPI `sagemaker`: affected `<2.256.0 || >=3.0, <3.1.1`, fixed in `2.256.0`, `3.1.1` · CVSS 8.2 High · Not analysed yet · Published 2 Feb 2026 · Tags: Weak cryptography or TLS, CWE-599
- [Juju has broken CMR authorization in github.com/juju/juju](https://agentprime.io/advisories/GHSA-j477-6vpg-6c8x.md)
  `GHSA-j477-6vpg-6c8x`, `CVE-2026-1237`, `GO-2026-4388` · Go `github.com/juju/juju`: affected `*`, no fixed version yet · CVSS 2.1 Low · Not analysed yet · Published 2 Feb 2026 · Tags: Weak cryptography or TLS, CWE-672
- [fog-kubevirt allows remote attacker to perform MITM attack due to disabled certificate validation](https://agentprime.io/advisories/GHSA-m3hq-3qj8-c5fm.md)
  `GHSA-m3hq-3qj8-c5fm`, `CVE-2026-1530` · RubyGems `fog-kubevirt`: affected `<1.5.1`, fixed in `1.5.1` · CVSS 8.1 High · Not analysed yet · Published 2 Feb 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTAyLTAyVDA2OjMwOjUzLjAwMDAwMFoiLCJHSFNBLW0zaHEtM3FqOC1jNWZtIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTAyLTIzVDAyOjAyOjA4LjIwMjAwMFoiLCJDVkUtMjAyNi0yOTY2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTAyLTIzVDAyOjAyOjA4LjIwMjAwMFoiLCJDVkUtMjAyNi0yOTY2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.