430 matches found
CVE-2026-113572 CAI Content Credentials | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
CAI Content Credentials is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyon...
CVE-2026-113763
Use of a broken or risky cryptographic algorithm in Windows DPAPI Data Protection Application Programming Interface allows an authorized attacker to elevate privileges locally...
CVE-2026-118102
Microsoft SQL Server is affected by a vulnerability involving the use of a broken or risky cryptographic algorithm . This flaw allows an unauthorized attacker to disclose sensitive information over a network. Microsoft has released security updates to address this issue; users are encouraged to i...
EUVD-2026-121928
Use of a broken or risky cryptographic algorithm in Windows DPAPI Data Protection Application Programming Interface allows an authorized attacker to elevate privileges locally...
CVE-2026-113763
CVE-2026-113763 identifies a vulnerability in Windows DPAPI (Data Protection Application Programming Interface) caused by the use of a broken or risky cryptographic algorithm . This security flaw allows an authorized attacker to perform a local privilege escalation . While the documents confirm t...
PT-2026-143594
Use of a broken or risky cryptographic algorithm in Windows DPAPI Data Protection Application Programming Interface allows an authorized attacker to elevate privileges locally...
PT-2026-143691
Use of a broken or risky cryptographic algorithm in SQL Server allows an unauthorized attacker to disclose information over a network...
CLEANSTART-2026-XV94528 : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc
CVE-2025-14813 affects multiple packages. : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. See references for individual vulnerability details...
CVE-2026-108014: Use of a Broken or Risky Cryptographic Algorithm
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server. An unauthenticated network attacker could spoof server certificates to execute a...
CVE-2026-108015: Use of a Broken or Risky Cryptographic Algorithm
Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a ma...
Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Bouncy Castle
Summary IBM App Connect Enterprise Toolkit and Runtime are vulnerable to multiple vulnerabilities due to Bouncy Castle. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on al...
Security Bulletin: Multiple Security Vulnerabilities in Bouncy Castle affect IBM Sterling B2B Integrator and IBM Sterling File Gateway
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed these security vulnerabilities CVE-2026-5588, CVE-2025-8916 , CVE-2025-14813, CVE-2026-5598, CVE-2026-0636, CVE-2026-3505. Vulnerability Details CVEID:CVE-2026-5588 DESCRIPTION: Use of a Broken or Risky Cryptographic...
Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.
Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all core modules. This...
CVE-2026-18153: Use of a Broken or Risky Cryptographic Algorithm
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information and forge authentication tags due to the use of hard-coded cryptographic keys and initialization vectors...
CVE-2024-56344: Use of a Broken or Risky Cryptographic Algorithm
IBM Cognos Analytics 12.0.4 through 12.0.4 FP2, and 12.1.0 through 12.1.3 FP1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using...
CVE-2025-33147: Use of a Broken or Risky Cryptographic Algorithm
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication...
CVE-2026-81438: Use of a Broken or Risky Cryptographic Algorithm
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
PT-2026-94221
Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description The software uses a broken or risky cryptographic algorithm. This allows an unauthenticated remote attacker to potentially exploit the flaw, resulting in information...
CVE-2025-36591: Use of a Broken or Risky Cryptographic Algorithm
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
Security Bulletin: Due to use bcprov-jdk18on-1.79.jar, IBM webMethods Integration Server is affected by multiple vulnerabilities.
Summary Multiple vulnerabilities were addressed in IBM webMethods Integration Server by upgrading the version of the Bouncy Castle BC-Java bcprov jar to 1.84.0 Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the...