CWE-325

70 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 5High 25Medium 34Low 6Not scored 0

CVEs per yearBy the year they were published

CVE-2026-108910
Multiple vulnerabilities that affects IBM Db2 Genius Hub
IBM · Db2 Genius Hub
Medium4.3
CVE-2026-117957
Cryptographic issue in the WebRTC: Networking component
Mozilla · Firefox
High8.1
CVE-2026-109839
IBM Db2 Genius Hub Missing Cryptographic Step
IBM · Db2 Genius Hub
Low3.1
CVE-2026-101294
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step
IBM · WebSphere Application Server - Liberty
High8.7
CVE-2026-107785
Crux Agent silently fails SKA preshared key rotation when SHA-512 peering is negotiated
Sirius Computer, Inc. · Crux Agent
Medium6.3
CVE-2026-16000
KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used
Legion of the Bouncy Castle Inc. · bc-csharp
High8.7
CVE-2026-100798
Cryptography misuse in Storage: Quota Manager component
Mozilla · Firefox
High8.1
CVE-2026-96552
sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt
sfturing · hosp_order
Low2.3
CVE-2026-81235
Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Cryptographic Step vulnerability. A high privileged attacker with remote access…
Dell · Wyse Management Suite
High8.0
CVE-2026-25250
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."
eazsolution · EazyFix
Medium6.0