Skip to content
OpenAdvisories

Weakness (CWE)

CWE-323: Reusing a Nonce, Key Pair in Encryption

Base Incomplete

Nonces should be used for the present occasion and only once.

How to prevent it (2 mitigations)

  1. Implementation

    Refuse to reuse nonce values.

  2. Implementation

    Use techniques such as requiring incrementing, time based and/or challenge response to assure uniqueness of nonces.

Source: MITRE CWE-323

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-59099

    Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure

    Apereo CAS 7.3.0 before 8.0.0-RC6 contains a cryptographic vulnerability that allows remote unauthenticated attackers to recover plaintext conversation state by exploiting AES-GCM initialization vector reuse across the server lifetime. Attackers can collect m…

    Apereo cas
  • Critical 9.1
    CVE-2026-12205

    Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery

    Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. Crypt::DSA::sign caches the per-signature nonce material in the Key object without ever clearing it. The first sign() on a Key object picks a nonce, …

    TIMLEGGE Crypt::DSA libcrypt-dsa-perl libcrypt-dsa-perl Debian Ubuntu
  • Critical 9.1
    CVE-2026-49952 Public exploit Scanner template

    Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

    Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to database backup and restore functionality by exploiting a shared cryptographic key betw…

    Discuz! Discuz! X5.0
  • Critical 9.3
    CVE-2025-14813

    GOSTCTR implementation unable to process more than 255 blocks correctly

    : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects BC-JAVA: from 1.59 before 1.…

    Legion of the Bouncy Castle BC-JAVA logstash-9.3-iamguarded-compat logstash-9.3 Ubuntu Wolfi Maven
  • Critical 9.1
    CVE-2025-64767

    hpke-js reuses AEAD nonces

    hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This c…

    dajiaji hpke-js @hpke/core npm