Skip to content
CVE Tracker

CWE-325

68 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
68
Last 12 months
32
Critical
5
Known exploited
0

Critical 5High 24Medium 33Low 6Not scored 0

CVEs per yearBy the year they were published

  1. 20181
  2. 20183
  3. 20181
  4. 20191
  5. 20204
  6. 20214
  7. 20226
  8. 20237
  9. 20242
  10. 20251
  11. 202629
  12. 20269

Newest CVEs

  • CVE-2026-109839

    IBM Db2 Genius Hub Missing Cryptographic Step

    IBM · Db2 Genius Hub

    Low3.1
  • CVE-2026-101294

    IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step

    IBM · WebSphere Application Server - Liberty

    High8.7
  • CVE-2026-107785

    Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated

    Sirius Computer, Inc. · Crux Agent

    Medium6.3
  • CVE-2026-16000

    KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used

    Legion of the Bouncy Castle Inc. · bc-csharp

    High8.7
  • CVE-2026-100798

    Cryptography misuse in Storage: Quota Manager component

    Mozilla · Firefox

    High8.1
  • CVE-2026-96552

    sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt

    sfturing · hosp_order

    Low2.3
  • CVE-2026-81235

    Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access…

    Dell · Wyse Management Suite

    High8.0
  • CVE-2026-25250

    EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."

    eazsolution · EazyFix

    Medium6.0
  • CVE-2026-76784

    Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices

    TP-Link Systems Inc. · HS103P3 / HS103P4 v5

    High8.7
  • CVE-2026-17666

    Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access…

    Google · Chrome

    Critical9.1

Vendors it comes up for most

  1. Microsoft4
  2. OpenSSL4
  3. [UNKNOWN]4
  4. Cisco2
  5. Dell2
  6. IBM2
  7. Zoom Video Communications, Inc.2
  8. denoland2
  9. nextcloud2
  10. AMI1