CWE-331

149 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 29High 56Medium 56Low 8Not scored 0

CVEs per yearBy the year they were published

CVE-2026-92209
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
NoMachine · NoMachine
High7.8
CVE-2026-112041
diem-project diem dmString.php random weak prng
diem-project · diem
Medium6.3
CVE-2026-13639
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075…
Synology · DiskStation Manager (DSM)
Critical9.8
CVE-2026-90562
LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key
langbot-app · LangBot
Critical9.2
CVE-2026-80171
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG…
Dell · Secure Connect Gateway 5.0 - Application
Medium4.7
CVE-2026-62646
A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is generated using an algorithm with insufficient randomness,…
Siemens · Reyrolle 7SR5
Critical9.1
CVE-2026-27490
Combodo iTop: Weak secret generation for inline image
Combodo · iTop
High7.5
CVE-2026-4936
Power System Insufficient Entropy
IBM · PowerVM Hypervisor
Medium5.1
CVE-2026-4937
Power System Insufficient Entropy
IBM · PowerVM Hypervisor
Medium5.3
CVE-2026-19906
pkp pkp-lib API Key Generation APIProfileForm.php setData entropy
pkp · pkp-lib
Medium6.3