Skip to content

CWE-1241 · weakness in Cryptography

Use of Predictable Algorithm in Random Number Generator

9 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2CVE-2021-3689yiisoft · CVSS 8.1 · 1.9% likely

    Yiisoft

  2. Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2CVE-2021-3692yiisoft · CVSS 8.1 · 1.7% likely

    Yiisoft

  3. Use of Predictable Algorithm in Random Number Generator in pkp/pkp-libCVE-2023-4695pkp · CVSS 9.6 · 0.7% likely

    Pkp

  4. Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7CVE-2026-82191j2commerce.com · CVSS 5.3 · 0.4% likely

    J2commerce.com

  5. Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable TokensCVE-2025-13079popupbuilder · CVSS 5.3 · 0.4% likely

    Popup-Builder

  6. In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated…CVE-2026-73576Zimbra · CVSS 6.3 · 0.3% likely

    Zimbra

  7. Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7CVE-2026-82190j2commerce.com · CVSS 6.3 · 0.3% likely

    J2commerce.com

  8. Anti-Theft Bypass for Infotainment ECUCVE-2025-32056Bosch · CVSS 4 · 0.3% likely

    Bosch

  9. Keylime: keylime: security bypass due to hardcoded tpm quote nonceCVE-2026-6420Redhat · CVSS 6.3 · 0.1% likely

    Red Hat

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.