CWE-757 · 30 records
Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
CVEs in this class
31 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2017-9269No exploit | lack of keypinning in libzypp could lead to repository switchingopensuse · libzypp · CWE-757 | Critical9.8 | — | 2.2% | Mar 1, 2018 |
39Monitor | CVE-2026-72887No exploit | Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_tokenCWE-757 | Critical9.8 | — | 0.7% | Aug 16, 2026 |
36Monitor | CVE-2019-14887No exploit | A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't horedhat · jboss data grid · CWE-757 | Critical9.1 | — | 1.1% | Mar 16, 2020 |
36Monitor | CVE-2024-4995No exploit | Protocol Downgrade in Wapro ERP Desktopasseco business solutions s.a. · wapro erp desktop · CWE-757 | Critical9.1 | — | 0.9% | Dec 18, 2024 |
36Monitor | CVE-2026-18691No exploit | Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposuremongodb · mongodb · CWE-757 | Critical9.0 | — | 0.4% | Aug 11, 2026 |
36Monitor | CVE-2024-38883No exploit | An issue in Horizon Business Services Inc.horizoncloud · caterease · CWE-757 | Critical9.1 | — | 0.4% | Aug 2, 2024 |
36Monitor | CVE-2026-55953No exploit | TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authenticationerlang · erlang\/otp · CWE-757 | Critical9.1 | — | 0.2% | Jul 27, 2026 |
34Monitor | CVE-2026-89177No exploit | Howyar｜WeenyGenius - Use of Insecure Protocolhowyar · weenygenius · CWE-757 | High8.7 | — | 0.4% | Sep 11, 2026 |
33Monitor | CVE-2024-8773No exploit | Protocol Downgrade in SIMPLE.ERPsimple sa · simple.erp · CWE-757 | High8.3 | — | 0.4% | Mar 24, 2025 |
32Monitor | CVE-2023-2974No exploit | Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocolredhat · build of quarkus · CWE-757 | High8.1 | — | 0.9% | Jul 4, 2023 |
32Monitor | CVE-2018-25029No exploit | The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radiosilabs · zgm130s037hgn firmware · CWE-757 | High8.1 | — | 0.6% | Feb 4, 2022 |
31Monitor | CVE-2022-23000No exploit | Weak Default SSL use in Port Forwarding Servicewesterndigital · my cloud pr2100 firmware · CWE-757 | High7.8 | — | 0.2% | Jul 25, 2022 |
30Monitor | CVE-2017-9267No exploit | eDirectory LDAP peer certificate validation issuenovell · edirectory · CWE-757 | High7.5 | — | 1.0% | Mar 2, 2018 |
30Monitor | CVE-2026-4942No exploit | IBM i is Affected by Algorithm Downgrade in Transport Layer Security []ibm · i · CWE-757 | High7.5 | — | 0.4% | Jul 17, 2026 |
30Monitor | CVE-2026-32650No exploit | Anviz CrossChex Standard Algorithm Downgradeanviz · crosschex standard · CWE-757 | High7.5 | — | 0.3% | Apr 17, 2026 |
30Monitor | CVE-2022-33160No exploit | IBM Security Directory Suite information disclosureibm · security directory suite va · CWE-757 | High7.5 | — | 0.3% | Oct 6, 2023 |
30Monitor | CVE-2025-10693No exploit | Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Securesilabs.com · silicon labs z-wave sdk · CWE-757 | High7.6 | — | 0.3% | Oct 31, 2025 |
30Monitor | CVE-2023-7005No exploit | A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilizesciener · ttlock app · CWE-757 | High7.5 | — | 0.3% | Dec 19, 2024 |
30Monitor | CVE-2025-36582No exploit | Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') vulnedell · networker · CWE-757 | High7.5 | — | 0.3% | Jul 1, 2025 |
26Monitor | CVE-2021-36326No exploit | Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI).dell · emc streaming data platform · CWE-757 | Medium6.5 | — | 1.2% | Nov 30, 2021 |
26Monitor | CVE-2020-16200No exploit | Philips Clinical Collaboration Platform Algorithm Downgradephilips · clinical collaboration platform · CWE-757 | Medium6.5 | — | 0.6% | Sep 18, 2020 |
26Monitor | CVE-2024-20069No exploit | In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check.mediatek · nr15 · CWE-757 | Medium6.5 | — | 0.6% | Jun 2, 2024 |
26Monitor | CVE-2026-2673No exploit | OpenSSL TLS 1.3 server may choose unexpected key agreement groupopenssl · openssl · CWE-757 | Medium6.5 | — | 0.5% | Mar 13, 2026 |
26Monitor | CVE-2026-59293No exploit | SMB minimum protocol dialect defaults to SMB1vmware · spring integration · CWE-757 | Medium6.6 | — | 0.2% | Aug 27, 2026 |
24Monitor | CVE-2026-109952No exploit | FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Responsefreerdp · freerdp · CWE-757 | Medium6.0 | — | — | Today |
- CVE-2017-926940Plan
lack of keypinning in libzypp could lead to repository switching
CriticalCVSS 9.8No exploitEPSS 2%opensuse · libzyppMar 1, 2018
- CVE-2026-7288739Monitor
Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token
CriticalCVSS 9.8No exploitEPSS 1%Aug 16, 2026
- CVE-2019-1488736Monitor
A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't ho
CriticalCVSS 9.1No exploitEPSS 1%redhat · jboss data gridMar 16, 2020
- CVE-2024-499536Monitor
Protocol Downgrade in Wapro ERP Desktop
CriticalCVSS 9.1No exploitEPSS 1%asseco business solutions s.a. · wapro erp desktopDec 18, 2024
- CVE-2026-1869136Monitor
Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure
CriticalCVSS 9.0No exploitEPSS 0%mongodb · mongodbAug 11, 2026
- CVE-2024-3888336Monitor
An issue in Horizon Business Services Inc.
CriticalCVSS 9.1No exploitEPSS 0%horizoncloud · catereaseAug 2, 2024
- CVE-2026-5595336Monitor
TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
CriticalCVSS 9.1No exploitEPSS 0%erlang · erlang\/otpJul 27, 2026
- CVE-2026-8917734Monitor
Howyar｜WeenyGenius - Use of Insecure Protocol
HighCVSS 8.7No exploitEPSS 0%howyar · weenygeniusSep 11, 2026
- CVE-2024-877333Monitor
Protocol Downgrade in SIMPLE.ERP
HighCVSS 8.3No exploitEPSS 0%simple sa · simple.erpMar 24, 2025
- CVE-2023-297432Monitor
Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol
HighCVSS 8.1No exploitEPSS 1%redhat · build of quarkusJul 4, 2023
- CVE-2018-2502932Monitor
The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio
HighCVSS 8.1No exploitEPSS 1%silabs · zgm130s037hgn firmwareFeb 4, 2022
- CVE-2022-2300031Monitor
Weak Default SSL use in Port Forwarding Service
HighCVSS 7.8No exploitEPSS 0%westerndigital · my cloud pr2100 firmwareJul 25, 2022
- CVE-2017-926730Monitor
eDirectory LDAP peer certificate validation issue
HighCVSS 7.5No exploitEPSS 1%novell · edirectoryMar 2, 2018
- CVE-2026-494230Monitor
IBM i is Affected by Algorithm Downgrade in Transport Layer Security []
HighCVSS 7.5No exploitEPSS 0%ibm · iJul 17, 2026
- CVE-2026-3265030Monitor
Anviz CrossChex Standard Algorithm Downgrade
HighCVSS 7.5No exploitEPSS 0%anviz · crosschex standardApr 17, 2026
- CVE-2022-3316030Monitor
IBM Security Directory Suite information disclosure
HighCVSS 7.5No exploitEPSS 0%ibm · security directory suite vaOct 6, 2023
- CVE-2025-1069330Monitor
Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Secure
HighCVSS 7.6No exploitEPSS 0%silabs.com · silicon labs z-wave sdkOct 31, 2025
- CVE-2023-700530Monitor
A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication, and can be utilize
HighCVSS 7.5No exploitEPSS 0%sciener · ttlock appDec 19, 2024
- CVE-2025-3658230Monitor
Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') vulne
HighCVSS 7.5No exploitEPSS 0%dell · networkerJul 1, 2025
- CVE-2021-3632626Monitor
Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI).
MediumCVSS 6.5No exploitEPSS 1%dell · emc streaming data platformNov 30, 2021
- CVE-2020-1620026Monitor
Philips Clinical Collaboration Platform Algorithm Downgrade
MediumCVSS 6.5No exploitEPSS 1%philips · clinical collaboration platformSep 18, 2020
- CVE-2024-2006926Monitor
In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check.
MediumCVSS 6.5No exploitEPSS 1%mediatek · nr15Jun 2, 2024
- CVE-2026-267326Monitor
OpenSSL TLS 1.3 server may choose unexpected key agreement group
MediumCVSS 6.5No exploitEPSS 1%openssl · opensslMar 13, 2026
- CVE-2026-5929326Monitor
SMB minimum protocol dialect defaults to SMB1
MediumCVSS 6.6No exploitEPSS 0%vmware · spring integrationAug 27, 2026
- CVE-2026-10995224Monitor
FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
MediumCVSS 6.0No exploitfreerdp · freerdpToday