Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-337

18 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
18
Last 12 months
7
Critical
1
Known exploited
0

Critical 1High 9Medium 4Low 4Not scored 0

CVEs per yearBy the year they were published

  1. 20211
  2. 20221
  3. 20233
  4. 20242
  5. 20254
  6. 20267

Newest CVEs

  • CVE-2026-18451

    Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token

    SMCI · MBD-X12SPI

    Low3.1
  • CVE-2026-55889

    XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer key

    flatpak · xdg-desktop-portal

    High8.3
  • CVE-2026-73794

    HPE NonStop MODULAR NSJ - Vulnerability in Random Number Generation

    Hewlett Packard Enterprise · HPE NonStop MODULAR NSJ

    Medium4.6
  • CVE-2026-19396

    A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated…

    ASUS · Router

    High7.7
  • CVE-2026-66372

    Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups

    Digital Watchdog · VMAX A1 G4 DVR

    High7.6
  • CVE-2026-26018

    CoreDNS Loop Detection Denial of Service Vulnerability

    coredns · coredns

    High7.5
  • CVE-2026-25235

    PEAR Has a Predictable Verification Hash in Election Account Requests

    pear · pearweb

    High8.2
  • CVE-2025-62710

    Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl

    sakaiproject · sakai

    Medium5.9
  • CVE-2025-55069

    AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number Generator

    AutomationDirect · CLICK PLUS C0-0x CPU firmware

    High8.7
  • CVE-2025-20613

    Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some Intel(R) TDX may allow an authenticated user to potentially enable…

    Intel(R) TDX

    Low2.0

Vendors it comes up for most

  1. ASUS1
  2. AutomationDirect1
  3. Canonical Ltd.1
  4. Cyber-Domain-Ontology1
  5. Dell1
  6. Digital Watchdog1
  7. Hewlett Packard Enterprise1
  8. Mitsubishi Electric Corporation1
  9. SMCI1
  10. Tigo Energy1