CWE-323

50 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 5High 15Medium 27Low 3Not scored 0

CVEs per yearBy the year they were published

CVE-2026-109140
Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token
NLnet Labs · Krill
High8.4
CVE-2026-71884
Packet CTR reports a full success length after the counter is exhausted
Legion of the Bouncy Castle Inc. · BC-LTS-JAVA
High8.2
CVE-2026-15890
AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization
zephyrproject · zephyr
Medium5.3
CVE-2026-81341
wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records
wolfSSL Inc. · wolfEngine
Medium6.5
CVE-2026-81020
wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
wolfSSL Inc. · wolfEngine
High7.4
CVE-2026-81019
wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
wolfSSL Inc. · wolfProvider
High7.4
CVE-2026-50577
ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter
fbeta-GmbH · ePA3-Service-OpenSource
High7.4
CVE-2026-17578
Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement
Kong · Kong Event Gateway
Low2.3
CVE-2026-21383
Reusing a Nonce, Key Pair in Encryption in HLOS
Qualcomm, Inc. · Snapdragon
High7.1
CVE-2026-59099
Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure
apereo · cas
Critical9.3