CWE-284 (2634) CWE-79 (1848) CWE-416 (1298) CWE-862 (1184) CWE-89 (1097) CWE-22 (1024) CWE-125 (884) CWE-200 (847) CWE-306 (838) CWE-122 (831) CWE-20 (798) CWE-78 (711) CWE-918 (690) CWE-787 (686) CWE-863 (643) CWE-94 (642) CWE-74 (600) CWE-639 (543) CWE-400 (530) CWE-119 (503) CWE-269 (501) CWE-502 (471) CWE-770 (441) CWE-287 (432) CWE-121 (408) CWE-77 (373) CWE-190 (370) CWE-362 (323) CWE-352 (281) CWE-285 (243)

CWE-323

9 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-49952 critical 9.3 0.0472 2026-06-15 Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that
CVE-2026-59099 critical 9.3 0.0055 2026-07-02 Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthen
CVE-2026-12205 critical 9.1 0.0029 2026-06-15 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key
CVE-2026-50577 high 7.4 0.0051 2026-08-18 ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to
CVE-2026-21383 high 7.1 0.0010 2026-07-06 Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requir
CVE-2026-56369 medium 6.3 0.0023 2026-06-30 ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherI
CVE-2026-45028 low 2.9 0.0014 2026-05-13 Astro is a web framework. Astro versions prior to 6.1.10 used AES-GCM encryption to protect the conf
CVE-2026-17578 low 2.3 0.0024 2026-08-05 Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reachin
CVE-2026-55967 low 2.0 0.0018 2026-06-25 AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were no