# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [XikeStor SKS8310-8X Predictable Session Identifiers](https://agentprime.io/advisories/CVE-2026-25072.md)
  `CVE-2026-25072` · CVE record: Anhui Seeker Electronic Technology Co., LTD. XikeStor SKS8310-8X · CVSS 8.6 High · Not analysed yet · Published 7 Mar 2026 · Tags: Weak cryptography or TLS
- [Incorrect enforcement of email constraints in crypto/x509](https://agentprime.io/advisories/GO-2026-4599.md)
  `GO-2026-4599`, `BIT-golang-2026-27137`, `CVE-2026-27137` · Go `stdlib`: affected `>=1.26.0-0, <1.26.1`, fixed in `1.26.1` · CVSS 7.5 High · Not analysed yet · Published 6 Mar 2026 · Tags: Weak cryptography or TLS
- [Flowise has Insufficient Password Salt Rounds](https://agentprime.io/advisories/GHSA-x2g5-fvc2-gqvp.md)
  `GHSA-x2g5-fvc2-gqvp`, `CVE-2026-56272` · npm `flowise`: affected `<3.0.13`, fixed in `3.0.13` · CVSS 5.6 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS
- [Nginx-UI Vulnerable to Unauthenticated Backup Download with Encryption Key Disclosure](https://agentprime.io/advisories/GHSA-g9w5-qffc-6762.md)
  `GHSA-g9w5-qffc-6762`, `CVE-2026-27944`, `GO-2026-4614` · Go `github.com/0xJacky/Nginx-UI`: affected `<2.3.3`, fixed in `2.3.3` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.23 · Not analysed yet · Published 5 Mar 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)](https://agentprime.io/advisories/CVE-2026-30785.md)
  `CVE-2026-30785` · CVE record: rustdesk-client RustDesk Client · CVSS 8.2 High · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS, Prototype pollution, CWE-257, CWE-323
- [RustDesk Auth Proof Uses Server-Controlled Salt/Challenge and Fast Double-SHA256, Enabling Offline Brute-Force](https://agentprime.io/advisories/CVE-2026-30789.md)
  `CVE-2026-30789` · CVE record: rustdesk-client RustDesk Client · CVSS 5.7 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS
- [RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure](https://agentprime.io/advisories/CVE-2026-30795.md)
  `CVE-2026-30795` · CVE record: rustdesk-client RustDesk Client · CVSS 8.7 High · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS
- [RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation](https://agentprime.io/advisories/CVE-2026-30791.md)
  `CVE-2026-30791` · CVE record: rustdesk-client RustDesk Client · CVSS 8.7 High · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS, CWE-684
- [RustDesk Server Generates Config Strings Using Reversible Encoding (Base64 + Reverse) Instead of Encryption](https://agentprime.io/advisories/CVE-2026-3598.md)
  `CVE-2026-3598` · CVE record: rustdesk-server-pro RustDesk Server Pro · CVSS 8.7 High · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS, CWE-684
- [Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator](https://agentprime.io/advisories/CVE-2024-57854.md)
  `CVE-2024-57854` · CVE record: DOUGDUDE Net::NSCA::Client · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS
- [Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id](https://agentprime.io/advisories/CVE-2025-40931.md)
  `CVE-2025-40931` · CVE record: CHORNY Apache::Session::Generate::MD5 · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS, CWE-340
- [Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely](https://agentprime.io/advisories/CVE-2025-40926.md)
  `CVE-2025-40926` · CVE record: KAZEBURO Plack::Middleware::Session::Simple · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS, CWE-340
- [pac4j-jwt: JwtAuthenticator Authentication Bypass via JWE-Wrapped PlainJWT](https://agentprime.io/advisories/GHSA-pm7g-w2cf-q238.md)
  `GHSA-pm7g-w2cf-q238`, `CVE-2026-29000` · Maven `org.pac4j:pac4j-jwt`: affected `>=6.0.4.1, <6.3.3 || >=5.0.0-RC1, <5.7.9 || <4.5.9`, fixed in `6.3.3`, `5.7.9`, `4.5.9` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Mar 2026 · Tags: Weak cryptography or TLS
- [Authlib: Setting \`alg: none\` and a blank signature appears to bypass signature verification](https://agentprime.io/advisories/GHSA-7wc2-qxgw-g8gg.md)
  `GHSA-7wc2-qxgw-g8gg`, `CVE-2026-28802`, `PYSEC-2026-2118` · PyPI `authlib`: affected `>=1.6.5, <1.6.7`, fixed in `1.6.7` · CVSS 7.7 High · Not analysed yet · Published 4 Mar 2026 · Tags: Weak cryptography or TLS
- [Insufficiently random values in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and others](https://agentprime.io/advisories/CVE-2026-20101.md)
  `CVE-2026-20101` · CVE record: Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.6 High · Not analysed yet · Published 4 Mar 2026 · Tags: Weak cryptography or TLS
- [Frame Injection via Shared GTK Allows Traffic Spoofing and Client Compromise](https://agentprime.io/advisories/CVE-2026-23601.md)
  `CVE-2026-23601` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS-10 & AOS-8) · CVSS 5.4 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Weak cryptography or TLS
- [Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0](https://agentprime.io/advisories/CVE-2025-40896.md)
  `CVE-2025-40896` · CVE record: Nozomi Networks Arc · CVSS 6.3 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Weak cryptography or TLS
- [S/MIME Certificate Subject Whitespace](https://agentprime.io/advisories/CVE-2026-2748.md)
  `CVE-2026-2748` · CVE record: SEPPmail Secure Email Gateway · CVSS 7.8 High · Not analysed yet · Published 4 Mar 2026 · Tags: Weak cryptography or TLS
- [PGP Signature Reflection](https://agentprime.io/advisories/CVE-2026-27445.md)
  `CVE-2026-27445` · CVE record: SEPPmail Secure Email Gateway · CVSS 6.9 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Weak cryptography or TLS
- [Missing PGP Signature Tag](https://agentprime.io/advisories/CVE-2026-2746.md)
  `CVE-2026-2746` · CVE record: SEPPmail Secure Email Gateway · CVSS 6.9 Medium · Not analysed yet · Published 4 Mar 2026 · Tags: Weak cryptography or TLS
- [A lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer…](https://agentprime.io/advisories/CVE-2025-69969.md)
  `CVE-2025-69969` · CVE record · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Mar 2026 · Tags: Weak cryptography or TLS
- [OpenClaw has an opt-in insecure Control UI auth over plaintext HTTP could allow privileged access](https://agentprime.io/advisories/GHSA-3cvx-236h-m9fj.md)
  `GHSA-3cvx-236h-m9fj`, `CVE-2026-32034` · npm `openclaw`: affected `<2026.2.21`, fixed in `2026.2.21` · CVSS 6.1 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Command injection, Broken access control, Weak cryptography or TLS
- [OpenClaw affected by iMessage remote attachment SCP hardening (strict host-key checks and remoteHost validation)](https://agentprime.io/advisories/GHSA-2mc2-g238-722j.md)
  `GHSA-2mc2-g238-722j` · npm `openclaw`: affected `<2026.2.19`, fixed in `2026.2.19` · CVSS 4.0, no score published · Not analysed yet · Published 3 Mar 2026 · Tags: Command injection, Weak cryptography or TLS
- [Improper certificate validation in Devolutions Remote Desktop Manager](https://agentprime.io/advisories/CVE-2026-2590.md)
  `CVE-2026-2590` · CVE record: Devolutions Remote Desktop Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS
- [IBM MQ Appliance uses weaker than expected cryptographic algorithms](https://agentprime.io/advisories/CVE-2025-14456.md)
  `CVE-2025-14456` · CVE record: IBM MQ Appliance · CVSS 5.9 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS
- [IBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptographic algorithms](https://agentprime.io/advisories/CVE-2025-14480.md)
  `CVE-2025-14480` · CVE record: IBM Aspera faspio Gateway · CVSS 5.1 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS
- [IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentiality](https://agentprime.io/advisories/CVE-2025-13490.md)
  `CVE-2025-13490` · CVE record: IBM App Connect Operator and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS
- [Rancher's weave CNI password is not configured when a cluster is created from an RKE template](https://agentprime.io/advisories/GHSA-vrph-m5jj-c46c.md)
  `GHSA-vrph-m5jj-c46c`, `CVE-2022-21951` · Go `github.com/rancher/rancher`: affected `>=2.5.0, <2.5.14 || >=2.6.0, <2.6.5`, fixed in `2.5.14`, `2.6.5` · CVSS 6.8 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS
- [Apache Ranger Vulnerable to Improper Validation of Certificate with Host Mismatch](https://agentprime.io/advisories/GHSA-5fvg-qwcp-r325.md)
  `GHSA-5fvg-qwcp-r325`, `CVE-2025-59060` · Maven `org.apache.ranger:ranger-nifi-registry-plugin`: affected `<2.8.0`, fixed in `2.8.0` · CVSS 5.3 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS
- [Dataease SQLBot JWT Token auth.py validateEmbedded signature verification](https://agentprime.io/advisories/CVE-2025-15598.md)
  `CVE-2025-15598` · CVE record: Dataease SQLBot · CVSS 6.3 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Cleartext transmission of sensitive information in Gallagher NxWitness VMS and Hanwha VMS Integrations](https://agentprime.io/advisories/CVE-2026-20801.md)
  `CVE-2026-20801` · CVE record: Gallagher NxWitness VMS and Hanwha VMS Integrations · CVSS 5.6 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS
- [Cohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowing attackers to trivially reverse the encyption and expose…](https://agentprime.io/advisories/CVE-2025-63912.md)
  `CVE-2025-63912` · CVE record · CVSS 5.5 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Weak cryptography or TLS
- [@keep-network/tbtc-v2 revealing P2PKH deposit with a wrapped P2SH script](https://agentprime.io/advisories/GHSA-8986-v76q-8vr2.md)
  `GHSA-8986-v76q-8vr2` · npm `@keep-network/tbtc-v2`: affected `<1.8.2`, fixed in `1.8.2` · CVSS 7.5 High · Not analysed yet · Published 2 Mar 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission of sensitive information in Google Android](https://agentprime.io/advisories/CVE-2024-43766.md)
  `CVE-2024-43766` · CVE record: Google Android · CVSS 6.5 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Weak cryptography or TLS
- [PKCS7_verify Certificate Chain Validation Bypass in AWS-LC](https://agentprime.io/advisories/GHSA-vw5v-4f2q-w9xf.md)
  `GHSA-vw5v-4f2q-w9xf`, `CVE-2026-3336`, `GHSA-cfwj-9wp5-wqvp`, `RUSTSEC-2026-0046` · crates.io `aws-lc-sys`: affected `>=0.24.0, <0.38.0`, fixed in `0.38.0` · CVSS 8.7 High · Not analysed yet · Published 2 Mar 2026 · Tags: Weak cryptography or TLS
- [PKCS7_verify Signature Validation Bypass in AWS-LC](https://agentprime.io/advisories/GHSA-hfpc-8r3f-gw53.md)
  `GHSA-hfpc-8r3f-gw53`, `CVE-2026-3338`, `GHSA-jchq-39cv-q4wj`, `RUSTSEC-2026-0047` · crates.io `aws-lc-sys`: affected `>=0.24.0, <0.38.0`, fixed in `0.38.0` · CVSS 8.7 High · Not analysed yet · Published 2 Mar 2026 · Tags: Weak cryptography or TLS
- [In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-…](https://agentprime.io/advisories/CVE-2025-58107.md)
  `CVE-2025-58107` · CVE record · CVSS 7.5 High · Not analysed yet · Published 2 Mar 2026 · Tags: Weak cryptography or TLS
- [Gradio has an Open Redirect in its OAuth Flow](https://agentprime.io/advisories/GHSA-pfjf-5gxr-995x.md)
  `GHSA-pfjf-5gxr-995x`, `CVE-2026-28415`, `PYSEC-2026-65` · PyPI `gradio`: affected `<6.6.0`, fixed in `6.6.0` · CVSS 4.3 Medium · Not analysed yet · Published 1 Mar 2026 · Tags: Information disclosure, Broken access control, Weak cryptography or TLS, Open redirect
- [HTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() function](https://agentprime.io/advisories/CVE-2026-3255.md)
  `CVE-2026-3255` · CVE record: TOKUHIROM HTTP::Session2 · CVSS 6.5 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Weak cryptography or TLS, CWE-340
- [SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID](https://agentprime.io/advisories/CVE-2026-27755.md)
  `CVE-2026-27755` · CVE record: Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Feb 2026 · Tags: Weak cryptography or TLS
- [SODOLA SL902-SWTGW124AS <= 200.1.20 MD5 Session Token Generation](https://agentprime.io/advisories/CVE-2026-27754.md)
  `CVE-2026-27754` · CVE record: Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS · CVSS 6.9 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Weak cryptography or TLS
- [SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission](https://agentprime.io/advisories/CVE-2026-27752.md)
  `CVE-2026-27752` · CVE record: Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS · CVSS 8.2 High · Not analysed yet · Published 27 Feb 2026 · Tags: Weak cryptography or TLS
- [Keycloak REST Services has a WebAuthn Attestation Statement Verification Bypass](https://agentprime.io/advisories/GHSA-7g5x-9c4v-4w5r.md)
  `GHSA-7g5x-9c4v-4w5r`, `BIT-keycloak-2025-12150`, `CVE-2025-12150` · Maven `org.keycloak:keycloak-services`: affected `<26.4.4`, fixed in `26.4.4` · CVSS 3.1 Low · Not analysed yet · Published 27 Feb 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in SICK AG SICK LMS1000 and others](https://agentprime.io/advisories/CVE-2026-1627.md)
  `CVE-2026-1627` · CVE record: SICK AG SICK LMS1000 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in SICK AG SICK LMS1000 and others](https://agentprime.io/advisories/CVE-2026-1626.md)
  `CVE-2026-1626` · CVE record: SICK AG SICK LMS1000 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Weak cryptography or TLS
- [Copeland XWEB and XWEB Pro Use of a Broken or Risky Cryptographic Algorithm](https://agentprime.io/advisories/CVE-2026-21718.md)
  `CVE-2026-21718` · CVE record: Copeland Copeland XWEB 300D PRO and 2 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Feb 2026 · Tags: Weak cryptography or TLS
- [Apache::SessionX versions through 2.01 for Perl create insecure session id](https://agentprime.io/advisories/CVE-2025-40932.md)
  `CVE-2025-40932` · CVE record: GRICHTER Apache::SessionX · CVSS 8.2 High · Not analysed yet · Published 26 Feb 2026 · Tags: Weak cryptography or TLS, CWE-340
- [Fleet: Device lock PIN can be predicted if lock time is known](https://agentprime.io/advisories/GHSA-ppwx-5jq7-px2w.md)
  `GHSA-ppwx-5jq7-px2w`, `CVE-2026-23999`, `GO-2026-4564` · Go `github.com/fleetdm/fleet/v4`: affected `<4.80.1`, fixed in `4.80.1` · CVSS 0.6 Low · Not analysed yet · Published 26 Feb 2026 · Tags: Weak cryptography or TLS
- [Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter](https://agentprime.io/advisories/GHSA-4q3h-vp4r-prv2.md)
  `GHSA-4q3h-vp4r-prv2`, `BIT-parse-2026-27804`, `CVE-2026-27804` · npm `parse-server`: affected `<8.6.3 || >=9.0.0, <9.3.1-alpha.4`, fixed in `8.6.3`, `9.3.1-alpha.4` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Feb 2026 · Tags: Weak cryptography or TLS, CWE-345
- [ENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation](https://agentprime.io/advisories/GHSA-c6rr-7pmc-73wc.md)
  `GHSA-c6rr-7pmc-73wc`, `CVE-2026-22866` · npm `@ensdomains/ens-contracts`: affected `<=1.6.2`, no fixed version yet · CVSS 2.7 Low · Not analysed yet · Published 25 Feb 2026 · Tags: Weak cryptography or TLS
- [An improper certificate validation vulnerability was found in the FTP Backup on the ADM.](https://agentprime.io/advisories/CVE-2026-3100.md)
  `CVE-2026-3100` · CVE record: ASUSTOR ADM · CVSS 8.3 High · Not analysed yet · Published 25 Feb 2026 · Tags: Weak cryptography or TLS
- [FreeScout's Predictable Authentication Token Enables Account Takeover](https://agentprime.io/advisories/CVE-2026-27637.md)
  `CVE-2026-27637` · CVE record: freescout-help-desk freescout · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Feb 2026 · Tags: Weak cryptography or TLS
- [OpenEMR Has Disabled SSL Certificate Verification in HTTP Client](https://agentprime.io/advisories/CVE-2025-67752.md)
  `CVE-2025-67752` · CVE record: openemr openemr · CVSS 8.1 High · Not analysed yet · Published 25 Feb 2026 · Tags: Weak cryptography or TLS
- [Piwigo's secret key can be brute forced](https://agentprime.io/advisories/CVE-2024-48928.md)
  `CVE-2024-48928` · CVE record: Piwigo Piwigo · CVSS 2.7 Low · Not analysed yet · Published 24 Feb 2026 · Tags: Weak cryptography or TLS
- [Binardat 10G08-0800GSM Network Switch Hard-coded RC4 Encryption Key](https://agentprime.io/advisories/CVE-2026-27519.md)
  `CVE-2026-27519` · CVE record: Binardat Ltd. 10G08-0800GSM Network Switch · CVSS 8.7 High · Not analysed yet · Published 24 Feb 2026 · Tags: Hard-coded credentials, Weak cryptography or TLS
- [Binardat 10G08-0800GSM Network Switch Predictable Session Identifiers](https://agentprime.io/advisories/CVE-2026-27515.md)
  `CVE-2026-27515` · CVE record: Binardat Ltd. 10G08-0800GSM Network Switch · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: Weak cryptography or TLS
- [Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions](https://agentprime.io/advisories/CVE-2024-58041.md)
  `CVE-2024-58041` · CVE record: WONKO Smolder · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Feb 2026 · Tags: Weak cryptography or TLS
- [yapi disables TLS/SSL certificate validation via rejectUnauthorized: false in Axios HTTPS agent](https://agentprime.io/advisories/GHSA-663h-2vr3-ghrj.md)
  `GHSA-663h-2vr3-ghrj`, `CVE-2025-70058` · npm `yapi-vendor`: affected `<=1.12.0`, no fixed version yet · CVSS 7.4 High · Not analysed yet · Published 23 Feb 2026 · Tags: Weak cryptography or TLS
- [Cesanta Mongoose Poly1305 Authentication Tag tls_chacha20.c mg_chacha20_poly1305_decrypt signature verification](https://agentprime.io/advisories/CVE-2026-2968.md)
  `CVE-2026-2968` · CVE record: Cesanta Mongoose · CVSS 6.3 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Cesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values](https://agentprime.io/advisories/CVE-2026-2966.md)
  `CVE-2026-2966` · CVE record: Cesanta Mongoose · CVSS 6.3 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Weak cryptography or TLS, CWE-310

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTAyLTIzVDAyOjAyOjA4LjIwMjAwMFoiLCJDVkUtMjAyNi0yOTY2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTAzLTA3VDA1OjM5OjQwLjg1NDAwMFoiLCJDVkUtMjAyNi0zMDg0MCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTAzLTA3VDA1OjM5OjQwLjg1NDAwMFoiLCJDVkUtMjAyNi0zMDg0MCJd>. Everything for agents: <https://agentprime.io/llms.txt>.