CWE-322 · weakness in Cryptography
Key Exchange without Entity Authentication
33 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 33 is a mark on the map. Named now: 1 to 26, most at risk first.
- Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication
- Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions
- Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
- Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion
- Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion
- Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions
- matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
- matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions
- Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification
- When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
- When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder
- Foreman: host ssh key not being checked in remote execution
- Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default
- Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)
- SSH Hostkey Misconfiguration Vulnerability in Archer Devices
- Disabled SSH host key verification in Amazon AWS CLI EMR helper commands
- TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
- Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts
- Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability
- Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no
- missing SFTP host verification with wolfSSH
- Apache Airflow SFTP provider: Async SFTP hook disables host-key verification by default
- Backup uploads to ETM subject to man-in-the-middle interception
- Improper host key checking in active check 'Check SFTP Service' and special agent 'VNX quotas and filesystem'
- In Eclipse Californium version 2.0.0 to 2.6.4 and 3.0.0-M1 to 3.0.0-M3, the certificate based (x509 and RPK) DTLS handshakes accidentally succeeds without verifying the server sid…
- Ansible-pylibssh: accepts a changed ssh host key when host_key_auto_add is enabled
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.