Advisories · Weakness
Weak cryptography or TLS.
Weak algorithms, randomness, signatures or certificate checks. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 6.0 Medium
Improper certificate validation in Malcolm
- CISA Malcolm
- Weak cryptography or TLS
- CVSS 6.5 Medium
Doco-CD has an OCI Trust Policy Bypass via Artifact-Contained Configuration
- kimdre doco-cd
- Weak cryptography or TLS
- CWE-501
- CVSS 8.3 High
CVE-2026-80469
- SICK AG Sentio Creator Extension 'Device Manager'
- Weak cryptography or TLS
- CVSS 8.8 High
HPE IceWall products, Remote Bypass of Security Restrictions
- Hewlett Packard Enterprise HPE IceWall products
- Weak cryptography or TLS
- CVSS 4.1 Medium
Improper signature verification in Debian live-boot
- Debian live-boot
- Weak cryptography or TLS
- CVSS 3.7 Low
rclone: http backend forwards custom/auth headers to a different host on redirect
- Information disclosure
- Weak cryptography or TLS
>=1.49.0, <1.75.1 · fixed in 1.75.1
GHSA-486v-q2wf-fp2r · CVE-2026-88013 - CVSS 6.3 Medium
n8n: GitHub Trigger 422 Reuse Path Skips Webhook Secret Storage, Causing Signature Verification to Fail-Open
- Weak cryptography or TLS
<1.123.76 || >=2.0.0, <2.37.7 || >=2.38.0, <2.38.2 · fixed in 1.123.76, 2.37.7, 2.38.2
GHSA-5m98-cgcr-xx3q · CVE-2026-86080 - CVSS 9.1 CriticalCritical · CVSS 9+
Improper signature verification in OCaml jose
- OCaml jose
- Weak cryptography or TLS
- CVSS 9.1 CriticalCritical · CVSS 9+
passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending
- krakenjs passport-saml-encrypted
- Weak cryptography or TLS
- CVSS 9.3 CriticalCritical · CVSS 9+
passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification
- krakenjs passport-saml-encrypted
- Weak cryptography or TLS
- CVSS 6.8 Medium
Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure
- Red Hat Ceph Storage 5
- Red Hat Ceph Storage 9
- Weak cryptography or TLS
- CVSS 7.1 High
Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
- Softish EarVision Android application
- Softish C6 Ear Camera
- Weak cryptography or TLS
- CVSS 3.7 Low
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 3.7 Low
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 3.7 Low
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 3.7 Low
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 5.9 Medium
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Improper Certificate Validation in Quantum Security Gateway
- checkpoint Quantum Security Gateway
- Weak cryptography or TLS
- CVSS 5.6 Medium
Improper signature verification in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 5.9 Medium
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 7.4 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 7.7 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Impala: SAML authentication bypass via forged bearer token
- Apache Software Foundation Apache Impala
- Weak cryptography or TLS
- CVSS 5.6 Medium
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 8.2 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 7.3 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 7.4 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 7.0 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 6.2 Medium
Improper certificate validation in OCaml mirage-crypto-ec
- OCaml mirage-crypto-ec
- Weak cryptography or TLS
- CVSS 6.2 Medium
Improper signature verification in OCaml mirage-crypto
- OCaml mirage-crypto
- Weak cryptography or TLS
- CVSS 7.5 High
Improper certificate validation in Google Chrome
- Google Chrome
- Weak cryptography or TLS
- CVSS 4.3 Medium
Improper certificate validation in Google Chrome
- Google Chrome
- Weak cryptography or TLS
- CVSS 5.4 Medium
Improper certificate validation in Google Chrome
- Google Chrome
- Weak cryptography or TLS
- CVSS 5.9 Medium
Cleartext transmission of sensitive information in Google Chrome
- Google Chrome
- Weak cryptography or TLS
- CVSS 9.1 CriticalCritical · CVSS 9+
OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption
- OpenIDC cjose
- Hard-coded credentials
- Weak cryptography or TLS
- CVSS 8.1 High
HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies
- Weak cryptography or TLS
<2.10.0 · fixed in 2.10.0
GHSA-7mj9-2mp8-4m2p · CVE-2026-84381 - CVSS 9.2 CriticalCritical · CVSS 9+
Improper certificate validation in Eclipse Foundation Eclipse Ditto
- Eclipse Foundation Eclipse Ditto
- Weak cryptography or TLS
- CWE-300
- CVSS 8.3 High
Skype for Business Spoofing Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Weak cryptography or TLS
- CVSS 7.8 High
Improper signature verification in Google Android
- Google Android
- Weak cryptography or TLS
- CVSS 8.3 High
AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm
- AVEVA Pipeline Integrity Monitor
- Weak cryptography or TLS
- CVSS 6.3 Medium
aircheng-org iWebShop-5 Authentication Storage admin.php weak password hash
- aircheng-org iWebShop-5
- Weak cryptography or TLS
- CVSS 5.9 Medium
Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 14
- Weak cryptography or TLS
- CVSS 7.5 High
Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
- Microsoft Remote Desktop client for Windows Desktop
- Weak cryptography or TLS
- CVSS 7.3 High
Improper certificate validation in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiProxy
- Weak cryptography or TLS
- CVSS 8.7 High
CommServe Privilege Escalation
- Commvault Cloud
- Weak cryptography or TLS
- CVSS 9.9 CriticalCritical · CVSS 9+
Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificate issuance to namespace edit users
- Red Hat build of Apache Camel - HawtIO 4
- Weak cryptography or TLS
- CVSS 4.3 Medium
U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP.
- Weak cryptography or TLS
- CVSS 7.5 High
The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack.
- Weak cryptography or TLS
- CVSS 6.6 Medium
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module
- Weak cryptography or TLS
- CVSS 7.6 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 5.9 Medium
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 5.5 Medium
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 5.6 Medium
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 4.8 Medium
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 7.3 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 7.4 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 5.9 Medium
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 7.4 High
Improper certificate validation in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- Weak cryptography or TLS
- CVSS 7.5 High
nRF54H20: MCUBoot can be tricked to executing unauthenticated code
- Nordic Semiconductor ASA nRF54H20
- Weak cryptography or TLS
- CVSS 5.0 Medium
Improper certificate validation in MediaTek, Inc. MediaTek chipset
- MediaTek, Inc. MediaTek chipset
- Weak cryptography or TLS