CWE-326: Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- sap se nw as java ume user mappingObsolete Encryption Algorithm Used in NW AS Java UME User Mapping3.0 Low
- aqara camera hub g3 firmware, hub m2 firmware, hub m3 firmware +2 moreMultiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027,...8.1 High
- sprecher automation sprecon-e-c, sprecon-e-p, sprecon-e-t3 +3 more +5 moreSprecher Automation: SPRECON-E series prone to weak encryption of update files4.0 Medium
- wolfsslForward Secrecy Violation in WolfSSL TLS 1.36.3 Medium
- google chromeInappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0...5.5 Medium
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreNon-Compliant TLS Configuration10.0 Critical
- apache sparkApache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks6.5 Medium
- microsoft .net, .net framework, .net 8.0 +15 more +17 more.NET, .NET Framework, and Visual Studio Information Disclosure Vulnerability4.8 Medium
- linux, linux kernel +1 moreBluetooth: l2cap: Check encryption key size on incoming connection8.1 High
- dos co., ltd. ss1Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0...8.7 High
- editso fusoeditso fuso mod.rs PenetrateRsaAndAesHandshake inadequate encryption6.3 Medium
- eladminelunez eladmin DES Key EncryptUtils.java EncryptUtils inadequate encryption6.3 Medium
ruby-jwtDebianruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective...9.1 Critical- jsrsasign project jsrsasignjsrsasign v11.1.0 was discovered to contain weak encryption.3.2 Low
- jwt project jwtjwt v5.4.3 was discovered to contain weak encryption.7.0 High
- google firebase php-jwtphp-jwt contains weak encryption6.5 Medium
- ibm cognos analytics mobileIBM Cognos Analytics Mobile (iOS) information disclosure6.5 Medium
- xuxueli xxl-jobXuxueli xxl-job Token Generation IndexController.java makeToken weak password hash6.3 Medium
- broadcom brocade ascg, brocade active support connectivity gateway +1 moreMedium Strength Cipher Suites detected on port on ports 9000 and 80368.6 High
- No product listedAn issue was discovered in Kaseya Rapid Fire Tools Network Detective through 2.0.16.0. A...7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Cryptographic Services Information Disclosure Vulnerability5.9 Medium
- endress meac300-fnade4 firmware, endress+hauser meac300-fnade4 +1 moreCVE-2025-274607.6 High
- acronis cyber protect 16Weak server key used for TLS encryption. The following products are affected: Acronis Cyber...5.9 Medium
- unicomsi focal pointAn issue was discovered in Unicom Focal Point 7.6.1. The database is encrypted with a hardcoded...4.6 Medium
- ibm sterling secure proxyIBM Sterling Secure Proxy information disclosure5.9 Medium
- calmkart django-sso-servercalmkart Django-sso-server crypto.py gen_rsa_keys inadequate encryption6.3 Medium
- hitachi jp1/it desktop management 2 - smart device managerWeak encryption vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager5.3 Medium
- No product listedInadequate encryption strength for some Edge Orchestrator software for Intel(R) Tiber™ Edge...5.1 Medium
- shashikantsingh09 python-progrramesPrograms/P73_SimplePythonEncryption.py has weak cryptographic key4.6 Medium
- mediatek lr12a, lr13, nr15 +4 more +6 moreIn Modem, there is a possible information disclosure due to incorrect error handling. This could...7.5 High
- tenda rx2 pro firmwareReuse of a static AES key and initialization vector for encrypted traffic to the 'ate' management...7.3 High
- hcl software myxalytics, hcltech dryice myxalytics +1 moreHCL MyXalytics is affected by SSL∕TLS Protocol affected with BREACH & LUCKY13 vulnerabilities2.6 Low
- kingsoft wps office, wps office +1 moreUse of a weak cryptographic key in the signature verification process in WPS Office9.5 Critical
- iroad dash cam fx2, iroadau fx2 firmware +1 moreIROAD Dash Cam FX2 Password Hash passwd weak password hash2.3 Low
- siemens apogee pxc series (bacnet), apogee pxc series (p2 ethernet), talon tc series (bacnet) +2 moreA vulnerability has been identified in APOGEE PXC Series (BACnet) (All versions), APOGEE PXC...8.7 High
- google gvisorImproved Seeding and Hashing In gVisor6.3 Medium
- openvpn easy-rsaWeak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more...5.3 Medium
- roche diagnostics algorithm suiteInadequate Encryption Strength Vulnerability in Roche Algo Edge6.1 Medium
magic-cryptcrates.iomagic-crypt uses insecure cryptographic algorithmsNo score- apache answerApache Answer: Predictable Authorization Token Using UUIDv12.6 Low
- apache tomcatApache Tomcat: Incorrect JSP tag recycling leads to XSS6.1 Medium
- apache tomcatApache Tomcat: Request/response mix-up with HTTP/26.5 Medium
- snowflake jdbcSnowflake JDBC Security Advisory5.9 Medium
- litespeed technologies cache, litespeedtech litespeed cache +1 moreWordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability8.1 High
- gl-inet a1300 firmware, ar300m16 firmware, ar300m firmware +23 more +25 moreAn issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800,...6.5 Medium
- nokia sr os (7250 ixr, 7450 ess, 7750 sr, 7950 ixr, vsr), 7705 sar os, 7210 sas osNokia SR OS: BOF File Encryption Vulnerability3.3 Low
- helmholz myrex24 v2, myrex24.virtual, myrex24 v2 virtual server +24 more +26 moreMB connect line/Helmholz: Weak encryption of configuration file8.4 High
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +21 more +23 moreAn issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive...7.5 High
- portainerPortainer improperly uses an encryption algorithm in the AesEncrypt function7.5 High
- planet gs-4210-24p2s firmware, gs-4210-24pl4c firmware, igs-5225-4up1t2s firmware +4 more +6 morePLANET Technology switch devices - Swctrl service exchanges weakly encoded passwords8.1 High
- Show moreLoading…