CWE-325
68 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 68
- Last 12 months
- 32
- Critical
- 5
- Known exploited
- 0
Critical 5High 24Medium 33Low 6Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20183
- 20181
- 20191
- 20204
- 20214
- 20226
- 20237
- 20242
- 20251
- 202629
- 20269
Newest CVEs
- CVE-2026-109839
IBM Db2 Genius Hub Missing Cryptographic Step
IBM · Db2 Genius Hub
Low3.1 - CVE-2026-101294
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step
IBM · WebSphere Application Server - Liberty
High8.7 - CVE-2026-107785
Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated
Sirius Computer, Inc. · Crux Agent
Medium6.3 - CVE-2026-16000
KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used
Legion of the Bouncy Castle Inc. · bc-csharp
High8.7 - CVE-2026-100798
Cryptography misuse in Storage: Quota Manager component
Mozilla · Firefox
High8.1 - CVE-2026-96552
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
sfturing · hosp_order
Low2.3 - CVE-2026-81235
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access…
Dell · Wyse Management Suite
High8.0 - CVE-2026-25250
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."
eazsolution · EazyFix
Medium6.0 - CVE-2026-76784
Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices
TP-Link Systems Inc. · HS103P3 / HS103P4 v5
High8.7 - CVE-2026-17666
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access…
Google · Chrome
Critical9.1