CVE-2016-6485

creationtimestamp| type| source ---|---|--- 2026-05-13 05:24:56+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlpktnmk6f2e...

CVE-2016-6485

The CVE-2016-6485 entry concerns Magento 2’s Framework/Encryption/Crypt.php, where the __construct uses PHP rand to generate the initialization vector. This weak RNG undermines cryptographic protection, making it easier for remote attackers to guess IV values. Documents consistently describe inse...