CWE-325 · 55 records

Missing Cryptographic Step

CVEs in this class

55 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-3938No exploit	Missing Cryptographic Steptridium · niagara · CWE-325 Pre-auth	Critical9.8	—	0.3%	May 22, 2025
36Monitor	CVE-2026-22863No exploit	Deno node:crypto doesn't finalize cipherdeno · deno · CWE-325 Pre-auth	Critical9.2	—	0.2%	Jan 15, 2026
36Monitor	CVE-2026-17666No exploit	Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discgoogle · chrome · CWE-325 Pre-auth	Critical9.1	—	0.1%	Jul 29, 2026
35Monitor	CVE-2026-4601No exploit	Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash prokjur · jsrsasign · CWE-325 Pre-auth	High8.8	—	0.4%	Mar 23, 2026
34Monitor	CVE-2025-30147No exploit	ALTBN128_ADD, ALTBN128_MUL, ALTBN128_PAIRING precompile functions do not check if points are on curvehyperledger · besu-native · CWE-325 Pre-auth	High8.7	—	0.2%	May 7, 2025
34Monitor	CVE-2026-16000No exploit	KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is usedlegion of the bouncy castle inc. · bc-csharp · CWE-325 Pre-auth	High8.7	—	0.2%	Oct 2, 2026
34Monitor	CVE-2026-101294No exploit	IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic stepibm · websphere application server - liberty · CWE-325 Pre-auth	High8.7	—	0.2%	4 days ago
34Monitor	CVE-2026-76784No exploit	Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devicestp-link systems inc. · hs103p3 / hs103p4 v5 · CWE-325 Pre-auth	High8.7	—	0.1%	Aug 26, 2026
32Monitor	CVE-2023-34471No exploit	Missing Cryptographic Stepami · megarac sp-x · CWE-325	High8.1	—	0.3%	Jul 5, 2023
32Monitor	CVE-2026-41395No exploit	OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3openclaw · openclaw · CWE-325 Pre-auth	High8.2	—	0.2%	Apr 28, 2026
32Monitor	CVE-2026-100798No exploit	Cryptography misuse in Storage: Quota Manager componentmozilla · firefox · CWE-325 Pre-auth	High8.1	—	0.2%	Sep 29, 2026
31Monitor	CVE-2021-22946No exploit	A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqhaxx · curl · CWE-325 Pre-auth	High7.5	—	4.5%	Sep 29, 2021
30Monitor	CVE-2026-45445No exploit	AES-OCB IV Ignored on EVP_Cipher() Pathopenssl · openssl · CWE-325 Pre-auth	High7.5	—	0.7%	Jun 9, 2026
30Monitor	CVE-2025-60704No exploit	Windows Kerberos Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-325 Pre-auth	High7.5	—	0.5%	Nov 11, 2025
30Monitor	CVE-2022-1279No exploit	Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloadsebics java project · ebics java · CWE-325 Pre-auth	High7.5	—	0.3%	Apr 14, 2022
30Monitor	CVE-2023-40012No exploit	uthenticode EKU validation bypasstrailofbits · uthenticode · CWE-325 Pre-auth	High7.5	—	0.2%	Aug 9, 2023
29Monitor	CVE-2022-20742No exploit	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerabilitycisco · secure firewall threat defense · CWE-325 Pre-auth	High7.4	—	0.4%	May 3, 2022
29Monitor	CVE-2026-49440No exploit	Deno: Miller-Rabin Primality Test Allows Zero Roundsdeno · deno · CWE-325 Pre-auth	High7.4	—	0.2%	Jun 23, 2026
28Monitor	CVE-2022-29229No exploit	Missing Cryptographic Step in cassprojectcassproject · competency and skills system · CWE-325	High7.2	—	0.3%	May 18, 2022
28Monitor	CVE-2026-55144No exploit	Windows Cryptography API: Next Generation (CNG) Tampering Vulnerabilitymicrosoft · windows 11 24h2 · CWE-325	High7.1	—	0.2%	Jul 14, 2026
28Monitor	CVE-2026-59776No exploit	Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017.sony corporation · felica ic chips · CWE-325	High7.0	—	0.1%	Jul 21, 2026
28Monitor	CVE-2025-47383No exploit	Missing Cryptographic Step in Data Modemqualcomm · 5g fixed wireless access platform firmware · CWE-325	High7.2	—	0.1%	Mar 2, 2026
28Monitor	CVE-2026-9266No exploit	A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and contrmoxa · uc-1200a series · CWE-325	High7.0	—	0.0%	Jun 12, 2026
27Monitor	CVE-2019-3738No exploit	RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability.dell · bsafe cert-j · CWE-325 Pre-auth	Medium6.5	—	1.6%	Sep 18, 2019
27Monitor	CVE-2020-26244No exploit	Cryptographic issues in Python oicpython openid connect project · python openid connect · CWE-325	Medium6.8	—	0.8%	Dec 2, 2020

CVE-2025-3938
39Monitor
Missing Cryptographic Step
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
tridium · niagaraMay 22, 2025
CVE-2026-22863
36Monitor
Deno node:crypto doesn't finalize cipher
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
deno · denoJan 15, 2026
CVE-2026-17666
36Monitor
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass disc
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
google · chromeJul 29, 2026
CVE-2026-4601
35Monitor
Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash pro
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
kjur · jsrsasignMar 23, 2026
CVE-2025-30147
34Monitor
ALTBN128_ADD, ALTBN128_MUL, ALTBN128_PAIRING precompile functions do not check if points are on curve
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
hyperledger · besu-nativeMay 7, 2025
CVE-2026-16000
34Monitor
KCcmBlockCipher (DSTU 7624 CCM) tag not bound to nonce when no associated data is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
legion of the bouncy castle inc. · bc-csharpOct 2, 2026
CVE-2026-101294
34Monitor
IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a missing cryptographic step
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
ibm · websphere application server - liberty4 days ago
CVE-2026-76784
34Monitor
Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
tp-link systems inc. · hs103p3 / hs103p4 v5Aug 26, 2026
CVE-2023-34471
32Monitor
Missing Cryptographic Step
HighCVSS 8.1No exploitEPSS 0%
ami · megarac sp-xJul 5, 2023
CVE-2026-41395
32Monitor
OpenClaw < 2026.3.28 - Webhook Replay via Query Parameter Reordering in Plivo V3
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
openclaw · openclawApr 28, 2026
CVE-2026-100798
32Monitor
Cryptography misuse in Storage: Quota Manager component
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 29, 2026
CVE-2021-22946
31Monitor
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-req
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
haxx · curlSep 29, 2021
CVE-2026-45445
30Monitor
AES-OCB IV Ignored on EVP_Cipher() Path
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
openssl · opensslJun 9, 2026
CVE-2025-60704
30Monitor
Windows Kerberos Elevation of Privilege Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
microsoft · windows 10 1607Nov 11, 2025
CVE-2022-1279
30Monitor
Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ebics java project · ebics javaApr 14, 2022
CVE-2023-40012
30Monitor
uthenticode EKU validation bypass
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
trailofbits · uthenticodeAug 9, 2023
CVE-2022-20742
29Monitor
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
cisco · secure firewall threat defenseMay 3, 2022
CVE-2026-49440
29Monitor
Deno: Miller-Rabin Primality Test Allows Zero Rounds
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
deno · denoJun 23, 2026
CVE-2022-29229
28Monitor
Missing Cryptographic Step in cassproject
HighCVSS 7.2No exploitEPSS 0%
cassproject · competency and skills systemMay 18, 2022
CVE-2026-55144
28Monitor
Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
HighCVSS 7.1No exploitEPSS 0%
microsoft · windows 11 24h2Jul 14, 2026
CVE-2026-59776
28Monitor
Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips shipped in or before 2017.
HighCVSS 7.0No exploitEPSS 0%
sony corporation · felica ic chipsJul 21, 2026
CVE-2025-47383
28Monitor
Missing Cryptographic Step in Data Modem
HighCVSS 7.2No exploitEPSS 0%
qualcomm · 5g fixed wireless access platform firmwareMar 2, 2026
CVE-2026-9266
28Monitor
A Missing Required Cryptographic Step vulnerability has been identified in Moxa's embedded Linux firmware for industrial computers and contr
HighCVSS 7.0No exploitEPSS 0%
moxa · uc-1200a seriesJun 12, 2026
CVE-2019-3738
27Monitor
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability.
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
dell · bsafe cert-jSep 18, 2019
CVE-2020-26244
27Monitor
Cryptographic issues in Python oic
MediumCVSS 6.8No exploitEPSS 0%
python openid connect project · python openid connectDec 2, 2020

All vulnerability classes