# Weak cryptography or TLS.

Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Botan: CLI utility \`ocsp_check\` accepts unauthenticated responses](https://agentprime.io/advisories/CVE-2026-118768.md)
  `CVE-2026-118768` · CVE record: randombit botan · CVSS 5.9 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Weak cryptography or TLS
- [Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags](https://agentprime.io/advisories/CVE-2026-119118.md)
  `CVE-2026-119118` · CVE record: unclecode crawl4ai · CVSS 8.3 High · Not analysed yet · Published 29 Oct 2026 · Tags: Weak cryptography or TLS
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-88078.md)
  `CVE-2026-88078` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 4.3 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Szafir](https://agentprime.io/advisories/CVE-2026-106036.md)
  `CVE-2026-106036` · CVE record: Krajowa Izba Rozliczeniowa Szafir · CVSS 6.9 Medium · Not analysed yet · Published 29 Oct 2026 · Tags: Weak cryptography or TLS
- [Update bundle signature bypass in Guardian/CMC before 26.4.0](https://agentprime.io/advisories/CVE-2026-33923.md)
  `CVE-2026-33923` · CVE record: Nozomi Networks Guardian and 1 more · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2026 · Tags: Weak cryptography or TLS
- [Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.](https://agentprime.io/advisories/CVE-2026-105031.md)
  `CVE-2026-105031` · CVE record: Apache Software Foundation Apache Qpid Proton C · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2026 · Tags: Weak cryptography or TLS
- [Trust of compromised eMudhra root CA in bundled CA stores](https://agentprime.io/advisories/CVE-2026-117611.md)
  `CVE-2026-117611` · CVE record: Checkmk GmbH Checkmk · CVSS 7.1 High · Not analysed yet · Published 29 Oct 2026 · Tags: Weak cryptography or TLS, CWE-1395
- [The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs](https://agentprime.io/advisories/CVE-2026-116641.md)
  `CVE-2026-116641` · CVE record: MongoDB Database Tools · CVSS 7.6 High · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it](https://agentprime.io/advisories/GHSA-6jp4-8v48-cc5v.md)
  `GHSA-6jp4-8v48-cc5v`, `CVE-2026-117601` · PyPI `electrum`: affected `<4.8.3`, fixed in `4.8.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [ClashMi through 1.0.32.1801 Disabled TLS Certificate Validation Enables Update MITM](https://agentprime.io/advisories/CVE-2026-118682.md)
  `CVE-2026-118682` · CVE record: KaringX clashmi · CVSS 7.7 High · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads](https://agentprime.io/advisories/CVE-2026-118684.md)
  `CVE-2026-118684` · CVE record: Project-MONAI MONAI · CVSS 8.2 High · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured](https://agentprime.io/advisories/CVE-2026-110985.md)
  `CVE-2026-110985` · CVE record: Apache Software Foundation Apache Kafka · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS, CWE-345, CWE-636, CWE-1287
- [Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing](https://agentprime.io/advisories/CVE-2026-118040.md)
  `CVE-2026-118040` · CVE record: Progress Software Telerik Document Processing Libraries · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Acronis Cyber Protect 17](https://agentprime.io/advisories/CVE-2026-87879.md)
  `CVE-2026-87879` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 5.9 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Acronis Cyber Protect 17](https://agentprime.io/advisories/CVE-2026-87102.md)
  `CVE-2026-87102` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 7.4 High · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Acronis Cyber Protect 17](https://agentprime.io/advisories/CVE-2026-87880.md)
  `CVE-2026-87880` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 6.8 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Acronis Cyber Protect 17](https://agentprime.io/advisories/CVE-2026-87103.md)
  `CVE-2026-87103` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 7.4 High · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Acronis Cyber Protect 17](https://agentprime.io/advisories/CVE-2026-87101.md)
  `CVE-2026-87101` · CVE record: Acronis Acronis Cyber Protect 17 · CVSS 6.2 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [Weak encryption in Axis Communications AB AXIS Camera Station Pro and others](https://agentprime.io/advisories/CVE-2026-63286.md)
  `CVE-2026-63286` · CVE record: Axis Communications AB AXIS Camera Station Pro and 1 more · CVSS 7.1 High · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()](https://agentprime.io/advisories/CVE-2026-118373.md)
  `CVE-2026-118373` · CVE record: OpenBSD LibreSSL · CVSS 6.3 Medium · Not analysed yet · Published 28 Oct 2026 · Tags: Weak cryptography or TLS
- [CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products](https://agentprime.io/advisories/CVE-2026-22063.md)
  `CVE-2026-22063` · CVE record: NetApp ONTAP 9 and 2 more · CVSS 6.0 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent](https://agentprime.io/advisories/GHSA-2m5v-pch6-74hx.md)
  `GHSA-2m5v-pch6-74hx`, `CVE-2026-109383` · npm `undici`: affected `>=4.0.0, <6.29.1 || >=7.0.0, <7.30.1 || >=8.0.0, <8.12.2`, fixed in `6.29.1`, `7.30.1`, `8.12.2` · CVSS 7.4 High · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305](https://agentprime.io/advisories/CVE-2026-102813.md)
  `CVE-2026-102813` · CVE record: TP-Link Systems Inc. RE305 v3 · CVSS 6.1 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.](https://agentprime.io/advisories/CVE-2026-108326.md)
  `CVE-2026-108326` · CVE record: Tanium Endpoint Configuration Toolset Solution and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [eMudhra Compromised Certificate vulnerability impacts HCL Notes Client](https://agentprime.io/advisories/CVE-2026-108015.md)
  `CVE-2026-108015` · CVE record: HCLSoftware Notes Client · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [eMudhra Compromised Certificate vulnerability impacts HCL Domino Server](https://agentprime.io/advisories/CVE-2026-108014.md)
  `CVE-2026-108014` · CVE record: HCLSoftware Domino Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Veeam Backup for Microsoft 365](https://agentprime.io/advisories/CVE-2026-106078.md)
  `CVE-2026-106078` · CVE record: Veeam Backup for Microsoft 365 · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)](https://agentprime.io/advisories/GHSA-8m4g-j4wp-wgcg.md)
  `GHSA-8m4g-j4wp-wgcg`, `CVE-2026-114616`, `PYSEC-2026-4356` · PyPI `authlib`: affected `<1.9.1`, fixed in `1.9.1` · CVSS 7.4 High · Not analysed yet · Published 27 Oct 2026 · Tags: Authentication bypass, Weak cryptography or TLS, Hard-coded credentials
- [Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket](https://agentprime.io/advisories/CVE-2026-115495.md)
  `CVE-2026-115495` · CVE record: WatchGuard Mobile VPN with SSL Client · CVSS 5.7 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys](https://agentprime.io/advisories/GHSA-7vr2-2fgp-9w7p.md)
  `GHSA-7vr2-2fgp-9w7p`, `CVE-2026-114615`, `PYSEC-2026-4355` · PyPI `authlib`: affected `>=1.3.1, <1.9.0`, fixed in `1.9.0` · CVSS 7.4 High · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS, CWE-184
- [Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts](https://agentprime.io/advisories/GHSA-jj7h-c3hg-m23x.md)
  `GHSA-jj7h-c3hg-m23x`, `CVE-2026-114614`, `PYSEC-2026-4354` · PyPI `authlib`: affected `<1.8.0`, fixed in `1.8.0` · CVSS 2.6 Low · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS, Open redirect, CWE-693
- [Authlib: empty signatures validation in JWS JSON deserialization](https://agentprime.io/advisories/GHSA-6v38-4h7w-rj9h.md)
  `GHSA-6v38-4h7w-rj9h`, `CVE-2026-96760` · PyPI `authlib`: affected `<1.9.0`, fixed in `1.9.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS, CWE-20, CWE-358, CWE-670
- [Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution](https://agentprime.io/advisories/CVE-2026-117602.md)
  `CVE-2026-117602` · CVE record: spesmilo electrum · CVSS 8.6 High · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials](https://agentprime.io/advisories/CVE-2026-115216.md)
  `CVE-2026-115216` · CVE record: Eclipse Foundation Eclipse ioFog · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Eaton easySoft](https://agentprime.io/advisories/CVE-2026-41022.md)
  `CVE-2026-41022` · CVE record: Eaton easySoft · CVSS 5.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)](https://agentprime.io/advisories/CVE-2026-111459.md)
  `CVE-2026-111459` · CVE record: Moxa Moxa Remote Connect Suite (MRC Client) · CVSS 7.6 High · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypass](https://agentprime.io/advisories/CVE-2026-103325.md)
  `CVE-2026-103325` · CVE record: Unknown TiendaCrypto para WooCommerce · CVSS 3.7 Low · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P](https://agentprime.io/advisories/CVE-2026-116844.md)
  `CVE-2026-116844` · CVE record: fclairamb ftpserverlib and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper signature verification in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-112518.md)
  `CVE-2026-112518` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper certificate validation in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-112652.md)
  `CVE-2026-112652` · CVE record: Apple iOS and iPadOS and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution](https://agentprime.io/advisories/CVE-2025-13833.md)
  `CVE-2025-13833` · CVE record: Forescout Technologies SecureConnector · CVSS 7.7 High · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [ECDSA signature length is not validated in jose, allowing signature malleability](https://agentprime.io/advisories/GHSA-44hw-rpw9-mwg4.md)
  `GHSA-44hw-rpw9-mwg4`, `CVE-2026-65632`, `EEF-CVE-2026-65632` · Hex `jose`: affected `>=1.0.0, <1.11.13`, fixed in `1.11.13` · CVSS 5.1 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [Weak PBKDF2 parameters for password-encrypted private-key export in jose](https://agentprime.io/advisories/GHSA-h4gx-8jq2-mfhc.md)
  `GHSA-h4gx-8jq2-mfhc`, `CVE-2026-65629`, `EEF-CVE-2026-65629` · Hex `jose`: affected `>=1.10.0, <1.11.13`, fixed in `1.11.13` · CVSS 7.4 High · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [Unauthorized Access to vSolution Matrix RTSP](https://agentprime.io/advisories/CVE-2026-70379.md)
  `CVE-2026-70379` · CVE record: WolfVision Cynap Pro, Cynap Core Pro · CVSS 7.1 High · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [IPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret key](https://agentprime.io/advisories/CVE-2026-19742.md)
  `CVE-2026-19742` · CVE record: zephyrproject zephyr · CVSS 3.7 Low · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAs](https://agentprime.io/advisories/CVE-2026-115930.md)
  `CVE-2026-115930` · CVE record: MongoDB, Inc. mongosh · CVSS 7.6 High · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney](https://agentprime.io/advisories/EEF-CVE-2026-115693.md)
  `EEF-CVE-2026-115693`, `CVE-2026-115693` · Hex `hackney`: affected `>=1.24.0, <4.9.0`, fixed in `4.9.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS
- [Yoosee GM8135S Camera Secure Boot signature verification](https://agentprime.io/advisories/CVE-2026-116116.md)
  `CVE-2026-116116` · CVE record: Yoosee GM8135S Camera · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS, CWE-345
- [Yoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission](https://agentprime.io/advisories/CVE-2026-116114.md)
  `CVE-2026-116114` · CVE record: Yoosee GM8135S Camera · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS, CWE-310
- [HeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission](https://agentprime.io/advisories/CVE-2026-116105.md)
  `CVE-2026-116105` · CVE record: HeyCyan App · CVSS 6.3 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Weak cryptography or TLS, CWE-310
- [SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash](https://agentprime.io/advisories/CVE-2026-116054.md)
  `CVE-2026-116054` · CVE record: SH3 · CVSS 2.1 Low · Not analysed yet · Published 25 Oct 2026 · Tags: Weak cryptography or TLS
- [Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap()](https://agentprime.io/advisories/CVE-2026-116200.md)
  `CVE-2026-116200` · CVE record: grokability snipe-it · CVSS 8.2 High · Not analysed yet · Published 25 Oct 2026 · Tags: Weak cryptography or TLS
- [Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store](https://agentprime.io/advisories/CVE-2026-116198.md)
  `CVE-2026-116198` · CVE record: grokability snipe-it · CVSS 5.3 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Weak cryptography or TLS
- [Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url](https://agentprime.io/advisories/CVE-2026-116196.md)
  `CVE-2026-116196` · CVE record: rclone rclone · CVSS 6.0 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Weak cryptography or TLS
- [rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS](https://agentprime.io/advisories/CVE-2026-116189.md)
  `CVE-2026-116189` · CVE record: rclone rclone · CVSS 7.7 High · Not analysed yet · Published 25 Oct 2026 · Tags: Weak cryptography or TLS
- [SiYuan 3.6.0 before 3.8.7 Cleartext Transmission via Unenforced networkServeTLS Setting](https://agentprime.io/advisories/CVE-2026-116166.md)
  `CVE-2026-116166` · CVE record: siyuan-note siyuan · CVSS 7.6 High · Not analysed yet · Published 25 Oct 2026 · Tags: Weak cryptography or TLS
- [rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption](https://agentprime.io/advisories/CVE-2026-116071.md)
  `CVE-2026-116071` · CVE record: rotki rotki · CVSS 8.2 High · Not analysed yet · Published 25 Oct 2026 · Tags: Weak cryptography or TLS
- [Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation](https://agentprime.io/advisories/CVE-2026-115996.md)
  `CVE-2026-115996` · CVE record: Unitree Robotics Unitree Go2 · CVSS 6.3 Medium · Not analysed yet · Published 24 Oct 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Broken or risky cryptographic algorithm in Oracle Corporation Oracle Java SE and others](https://agentprime.io/advisories/CVE-2026-114820.md)
  `CVE-2026-114820` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Oct 2026 · Tags: Weak cryptography or TLS
- [HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)](https://agentprime.io/advisories/CVE-2026-108013.md)
  `CVE-2026-108013` · CVE record: HCL Software BigFix Platform · CVSS 6.8 Medium · Not analysed yet · Published 24 Oct 2026 · Tags: Weak cryptography or TLS

Newest: <https://agentprime.io/advisories/tag/weak-crypto.md>
Older: <https://agentprime.io/advisories/tag/weak-crypto.md?cursor=WyIyMDI2LTEwLTI0VDA2OjIzOjExLjkzMDAwMFoiLCJDVkUtMjAyNi0xMDgwMTMiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=weak-crypto&cursor=WyIyMDI2LTEwLTI5VDE4OjMzOjQ2LjM5OTAwMFoiLCJDVkUtMjAyNi0xMTg3NzQiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/weak-crypto/?cursor=WyIyMDI2LTEwLTI5VDE4OjMzOjQ2LjM5OTAwMFoiLCJDVkUtMjAyNi0xMTg3NzQiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.