CWE-1240

CVEs per yearBy the year they were published

1. 20244
2. 20257
3. 202612

Newest CVEs

• CVE-2026-8374

  Misuse and Misconfiguration of Cryptographic Algorithm in Bluetooth Communication

  SwitchBot · SwitchBot Lock

  High8.5
• CVE-2025-68833

  HCL Hive is affected by use of a cryptographic primitive with a risky implementation

  HCLSoftware · HCL Hive

  Medium5.3
• CVE-2026-21751

  HCL Hive is affected by use of a cryptographic primitive with a risky implementation

  HCLSoftware · HCL Hive

  High7.4
• CVE-2026-50303

  Windows Key Guard Security Feature Bypass Vulnerability

  Microsoft · Windows 10 Version 1809

  Medium5.5
• CVE-2026-46654

  Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss

  Plonky3 · Plonky3

  High8.9
• CVE-2026-44410

  Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTE

  ZTE · ZXUniPOS NDS-LTE

  Low3.8
• CVE-2026-29146

  Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default

  Apache Software Foundation · Apache Tomcat

  High7.5
• CVE-2025-64647

  Multiple Vulnerabilities in IBM Concert Software

  IBM · Concert

  Medium5.9
• CVE-2026-27017

  uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch

  refraction-networking · utls

  Low2.3
• CVE-2025-62514

  `libparsec_crypto` does not check for weak order point of curve 25519

  Scille · parsec-cloud

  High8.3

Vendors it comes up for most

1. Dell3
2. Microsoft3
3. Apache Software Foundation2
4. B&R Industrial Automation2
5. HCLSoftware2
6. 0xPolygonZero1
7. DavidOsipov1
8. IBM1
9. Plonky31
10. RustCrypto1