Skip to content
OpenAdvisories

Weakness (CWE)

CWE-326: Inadequate Encryption Strength

Class Draft

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Use an encryption scheme that is currently considered to be strong by experts in the field.

Source: MITRE CWE-326

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-44351 Public exploit

    fast-jwt: Empty HMAC secret accepted via async key resolver - JWT auth bypass

    fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.2.4, a critical authentication-bypass vulnerability in fast-jwt's async key-resolver flow allows any unauthenticated attacker to forge arbitrary JWTs that are accepted as authentic. When t…

    nearform fast-jwt fast-jwt npm
  • Critical 9.8
    CVE-2017-1000486 Exploited Public exploit EPSS 94%

    Inadequate Encryption Strength

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

    org.primefaces:primefaces Maven
    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2017-11317 Exploited Public exploit EPSS 84%

    Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUploa…

    KEV Apr 11, 2022