CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- project-monai monai MONAI before 1.6.1 Missing Integrity Verification via check_hash in Downloads 8.2 High
- netapp e-series santricity os controller software, ontap 9, storagegrid (formerly storagegrid webscale) +2 more CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products 6.0 Medium
- hclsoftware notes client eMudhra Compromised Certificate vulnerability impacts HCL Notes Client 9.1 Critical
- hcl software domino server eMudhra Compromised Certificate vulnerability impacts HCL Domino Server 9.1 Critical
- oracle corporation graalvm enterprise edition, graalvm for jdk, java se +2 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... 9.1 Critical
- oracle corporation graalvm enterprise edition, graalvm for jdk, java se +2 more Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition... 9.1 Critical
- ibm cloud pak system IBM Cloud Pak System Risky Cryptographic Algorithm 5.9 Medium
- ibm concert IBM Concert Software Risky Cryptographic Algorithm 3.7 Low
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 more Windows Remote Desktop Security Feature Bypass Vulnerability 6.8 Medium
- eugeny russh Russh: Missing X25519 zero-point validation in hybrid ML-KEM key exchange 4.3 Medium
- ibm db2 mirror for i IBM Db2 Mirror for i is vulnerable to obtain sensitive information [] 3.3 Low
- imprivata enterprise access management Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production 7.5 High
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 more IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities 5.4 Medium
- ibm concert Multiple Vulnerabilities in IBM Concert Software 5.9 Medium
- ibm cognos analytics IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities 5.9 Medium
- ibm cognos analytics IBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilities 5.9 Medium
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 more Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or... 3.7 Low
- dell elastic cloud storage (ecs) Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0,... 4.4 Medium
- delinea secret server (on-prem) Cryptographic Padding Oracle 9.1 Critical
- ibm security verify access, verify identity access, security verify access container +1 more +3 more Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access 7.5 High
- ibm cloud pak for data system (yosemite 1.0) Vulnerabilities exists in IBM Cloud Pak for Data System 8.2 High
- aveva pipeline integrity monitor AVEVA Pipeline Integrity Monitor Use of a Broken or Risky Cryptographic Algorithm 8.3 High
- microsoft exchange server, exchange server subscription edition, exchange server 2016 cumulative update 23 +3 more +5 more Microsoft Exchange Server Information Disclosure Vulnerability 5.9 Medium
- ibm i IBM i is Affected By Cryptographic Algorithm Weakness in DCM [] 4.4 Medium
- ibm cloud pak for business automation Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. 6.2 Medium
- ebyte na111-m firmware Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm 9.3 Critical
- ceph Ceph: CephX AES Authentication error 8.8 High
- admin by request (abr) by request (abr) Insecure PIN derivation mechanism in Admin By Request (ABR) 8.8 High
- lin-snow ech0 lin-snow Ech0 crypto.go MD5Encrypt risky encryption 6.3 Medium
- http4k http4k: `DigestAuthProvider.verify` ignored configured algorithm and did not bind to request URI 6.5 Medium
- jahlives openssl encrypt openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation 8.7 High
- johnson controls tl280 TL280 2.9 Low
- oberon microsystems ag ocrypto Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto 5.9 Medium
- oberon microsystems ag psa crypto Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto 5.9 Medium
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 more ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327) 7.5 High
- ecovacs robotics deebot pro k1vac, deebot pro m1 +1 more DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication... 7.7 High
- ibm langflow oss, langflow +1 more Langflow is affected by weaknesses in secret handling and sensitive configuration access 7.4 High
- hcl software icontrol HCL iControl is affected by multiple security vulnerabilities(CVE-2026-56608 and CVE-2026-56609). 4.8 Medium
- andritz 250 scala, hipase-250 +1 more Storage of passwords in a reversible format 7.5 High
- hcl software mycloud, hcltech dryice mycloud +1 more HCL MyCloud was affected with SSL/TLS Protocol Affected with LUCKY13 Vulnerability. 3.1 Low
- hcl dfxanalytics HCL DFXAnalytics is affected by a Deprecated Protocol vulnerability due to the use of TLS 1.0 and TLS 1.1. 5.9 Medium
- No product listed wandb Artifact Integrity Validation hashutil.py ArtifactManifestEntry.download weak hash 2.3 Low
- better-auth better-auth before 1.6.11 Insecure Cryptographic Defaults via oidcProvider 9.4 Critical
- langchain-ai langgraph langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash 2.3 Low
- exo-explore exo exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash 6.3 Medium
- forceinjection ai-fundermentals ForceInjection AI-fundermentals Memory Recall smart_customer_service.py get_conversation_history weak hash 2.3 Low
- surrealdb SurrealDB before 3.1.0 Algorithm Downgrade via ES512 5.3 Medium
- strapi Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configuration 6.3 Medium
- simstudioai sim SimStudioAI sim Password Protection deployment.ts weak hash 6.3 Medium
- skypilot-org skypilot skypilot-org skypilot User ID server.py username.encode weak hash 6.3 Medium
- Show olderLoading…