CWE-326: Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

A weak encryption scheme can be subjected to brute force attacks that have a reasonable chance of succeeding using current attack methods and resources.

Consequences

• Access Control, Confidentiality: Bypass Protection Mechanism, Read Application Data

How to prevent it

• Architecture and Design: Use an encryption scheme that is currently considered to be strong by experts in the field.

Recent advisories

• PYSEC-2026-3765 — openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and…
• GHSA-mwjc-5j4x-r686 — AVideo has an unauthenticated decrypt oracle leaking any ciphertext
• GHSA-6m5f-j7w2-w953 — AVideo has a PGP 2FA Bypass via Cryptographically Broken 512-bit RSA Key Generation in LoginControl Plugin
• GHSA-gwq6-fmvp-qp68 — Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
• GHSA-f632-9449-3j4w — Apache Tomcat - XSS in generated JSPs
• GHSA-qvf5-hvjx-wm27 — Apache Tomcat Request and/or response mix-up
• GHSA-r82w-3phg-qvr4 — Moodle uses the same key for QR login and auto-login
• GHSA-pwqm-x5x6-5586 — Cilium has insecure IPsec transport encryption
• GHSA-hgv6-w7r3-w4qw — Kyverno vulnerable due to usage of insecure cipher
• GHSA-fv42-mx39-6fpw — Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions
• GHSA-9g3v-v24q-jj5p — rdiffweb does not have a rate limit on incorrect password attempts to prevent brute force attacks
• GHSA-3wx7-46ch-7rq2 — AES OCB fails to encrypt some bytes
• GHSA-98vc-98q7-57qf — Dolibarr ERP and CRM Insecure Encryption
• GHSA-cqm6-hrgq-6869 — Apache OpenMeetings has Inadequate Encryption Strength
• GHSA-r9q2-3r6x-qmgp — Inadequate Encryption Strength in Jenkins

All advisories for CWE-326