CWE-327

High likelihood

Use of a Broken or Risky Cryptographic Algorithm

Parent: CWE-693 - Protection Mechanism Failure

The product uses a broken or risky cryptographic algorithm or protocol.

669 vulnerabilities with CWE-327
CVE-2026-6411 HIGH
MAXHUB Pivot Client Application Use of a Broken or Risky Cryptographic Algorithm
CVSS 7.3
CVE-2026-44405 LOW
Paramiko < 4.0.0 - Use of a Broken or Risky Cryptographic Algorithm
CVSS 3.4
CVE-2026-7845 LOW
chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash
CVSS 2.6
CVE-2026-7103 LOW
code-projects Chat System MD5 Hash update_user.php weak hash
CVSS 3.7
CVE-2026-5926 MEDIUM
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
CVSS 6.5
CVE-2026-32959 MEDIUM
silex technology SD-330AC <= 1.42 - Man-in-the-Middle Information Disclosure
CVSS 5.9
CVE-2026-5588 MEDIUM
PKIX draft CompositeVerifier accepts empty signature sequence as valid.
CVE-2026-29129 HIGH
Apache Tomcat: TLS cipher order is not preserved
CVSS 7.5
CVE-2026-5682 LOW
Meesho Online Shopping App com.meesho.supply endpoint risky encryption
CVSS 3.7
CVE-2026-34950 CRITICAL
fast-jwt <=6.1.0 - JWT Algorithm Confusion
CVSS 9.1
CVE-2026-25834 MEDIUM
Mbed TLS 3.3.0-3.6.5, 4.0.0 - Algorithm Downgrade
CVSS 6.5
CVE-2026-33512 HIGH
WWBN AVideo <=26.0 - Info Disclosure
CVSS 7.5
CVE-2026-28490 MEDIUM
Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle
CVSS 6.5
CVE-2026-20996 MEDIUM
Samsung Mobile Smart Switch <3.7.69.15 - Auth Bypass
CVSS 5.3
CVE-2026-28252 CRITICAL
Trane Tracer SC/SC+/Concierge - Auth Bypass
CVSS 9.8
CVE-2026-28479 HIGH
OpenClaw <2026.2.15 - Cache Poisoning
CVSS 7.5
CVE-2026-3598 HIGH
RustDesk Server Pro <=1.7.5 - Info Disclosure
CVSS 7.5
CVE-2026-30791 HIGH
RustDesk Client <1.4.5 - Info Disclosure
CVSS 7.5
CVE-2026-23601 MEDIUM
Wi-Fi Encryption - Auth Bypass
CVSS 5.4
CVE-2026-1627 MEDIUM
Device SSH Service - Memory Corruption
CVSS 6.5
CVE-2026-1626 MEDIUM
Device SSH Service - Memory Corruption
CVSS 6.5
CVE-2026-21718 CRITICAL
Copeland XWEB Pro <1.12.1 - Auth Bypass
CVSS 10.0
CVE-2026-27804 CRITICAL
Parse Server <8.6.3/9.1.1-alpha.4 - Auth Bypass
CVSS 9.1
CVE-2026-27519 HIGH
Binardat 10G08-0800GSM <V300SP10260209 - Info Disclosure
CVSS 7.5
CVE-2026-2618 LOW
Beetel 777VR1 <01.00.09 - Weak Cryptography
CVSS 3.7
Details
Vulnerabilities 669
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits