Skip to content
OpenAdvisories

Weakness (CWE)

CWE-326: Inadequate Encryption Strength

Class Draft

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Use an encryption scheme that is currently considered to be strong by experts in the field.

Source: MITRE CWE-326

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.1
    CVE-2026-63286 Public exploit

    Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are st…

    Axis Communications AB AXIS Camera Station Pro AXIS Camera Station 5
  • High 7.5
    CVE-2025-63579 Public exploit

    Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The sec…

  • High 7.5
    CVE-2024-36823 Public exploit

    Weak encryption in Ninja Core

    The encrypt() function of Ninja Core v7.0.0 was discovered to use a weak cryptographic algorithm, leading to a possible leakage of sensitive information.

    org.ninjaframework:ninja-core Maven
  • High 7.8
    CVE-2023-21109 Public exploit

    In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error …

    Android
  • High 7.5
    CVE-2022-35513 Public exploit

    Blink1Control2 uses weak password encryption

    The Blink1Control2 application <= 2.2.7 uses weak password encryption and an insecure method of storage.

    Blink1Control2 npm
  • High 7.5
    CVE-2022-2097 Public exploit

    AES OCB fails to encrypt some bytes

    AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that wasn't written. In the…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Alpine crates.io
  • High 7.5
    CVE-2018-18325 Exploited Public exploit EPSS 74%

    Inadequate Encryption Strength in DotNetNuke

    DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.

    DotNetNuke.Core NuGet
    KEV Nov 3, 2021
  • High 7.5
    CVE-2018-15811 Exploited Public exploit EPSS 76%

    Inadequate Encryption Strength in DotNetNuke

    DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

    DotNetNuke.Core NuGet
    KEV Nov 3, 2021
  • High 7.8
    CVE-2001-1546 Public exploit

    Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by…