Reusing a Nonce, Key Pair in Encryption

Every one of the 48 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Discuz! X5.0 - Authentication BypassCVE-2026-49952Discuz! · CVSS 9.1 · 4.7% likely

   Discuz

2. Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT)…CVE-2017-13082Wi-Fi Alliance · 4.6% likely

   Wi-Fi Alliance1 bounty report

3. A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, V…CVE-2017-7902Rockwellautomation · 2.6% likely

   Rockwell Automation

4. Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frame…CVE-2017-13080Wi-Fi Alliance · 2.3% likely

   Wi-Fi Alliance1 bounty report

5. Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within rad…CVE-2017-13084Wi-Fi Alliance · 2.2% likely

   Wi-Fi Alliance1 bounty report

6. Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attack…CVE-2017-13079Wi-Fi Alliance · 2.1% likely

   Wi-Fi Alliance1 bounty report

7. Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames…CVE-2017-13078Wi-Fi Alliance · 2.1% likely

   Wi-Fi Alliance1 bounty report

8. Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio ra…CVE-2017-13086Wi-Fi Alliance · 2.0% likely

   Wi-Fi Alliance1 bounty report

9. Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attac…CVE-2017-13081Wi-Fi Alliance · 2.0% likely

   Wi-Fi Alliance1 bounty report

10. Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sle…CVE-2017-13088Wi-Fi Alliance · 1.8% likely

    Wi-Fi Alliance1 bounty report

11. Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidcCVE-2021-32791zmartzone · CVSS 5.9 · 1.5% likely

    ZmartZone

12. A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messeng…CVE-2020-1759The Ceph Project · CVSS 6.4 · 1.4% likely

    Ceph

13. Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access filesCVE-2023-28997nextcloud · CVSS 6.7 · 1.1% likely

    Nextcloud

14. Metasys use of shared RSA key pairsCVE-2019-7593Johnson Controls · CVSS 6.8 · 0.8% likely

    Johnson Controls

15. Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information DisclosureCVE-2026-59099apereo · CVSS 9.1 · 0.5% likely

    Apereo

16. Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass VulnerabilityCVE-2026-3559Philips · CVSS 8.1 · 0.5% likely

    Philips

17. ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request CounterCVE-2026-50577fbeta-GmbH · CVSS 7.4 · 0.5% likely
18. Consensys Discovery Nonce ReuseCVE-2024-23688Consensys · CVSS 5.3 · 0.5% likely

    Consensys

19. Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent EncryptionCVE-2023-4680HashiCorp · CVSS 6.8 · 0.4% likely

    HashiCorp

20. Libsoup: libsoup: authentication bypass via digest authentication replay attackCVE-2026-3099Red Hat · CVSS 5.8 · 0.4% likely

    Red Hat

21. SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attackCVE-2024-11022SICK AG · CVSS 5.6 · 0.4% likely

    SICK AG

22. wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordCVE-2026-81020wolfSSL Inc. · CVSS 7.4 · 0.4% likely

    wolfSSL

23. wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordCVE-2026-81019wolfSSL Inc. · CVSS 7.4 · 0.4% likely

    wolfSSL

24. Session takeover vulnerabilityCVE-2026-13602pretix · CVSS 7.7 · 0.4% likelycovered by CyberSIXT

    pretix GmbH

25. In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity usin…CVE-2022-37660W1.fi · CVSS 6.5 · 0.4% likely

    W1.fi

26. Discourse CSP nonce reuse vulnerability for anonymous usersCVE-2023-37467discourse · CVSS 6.8 · 0.4% likely

    Discourse

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.