Skip to content

CWE-332 · weakness in Cryptography

Insufficient Entropy in PRNG

11 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

  1. Jitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash parameter. By inspecting the token value provided…CVE-2017-18486Jitbit · 4.8% likely
  2. hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call.CVE-2016-10743W1.fi · 2.4% likely

    W1.fi

  3. stunnel before 5.00, when using fork threading, does not properly update the state of the OpenSSL pseudo-random number generator (PRNG), which causes subsequent children with the…CVE-2014-0016Stunnel · 2.2% likely

    Stunnel

  4. aws/resource_aws_iam_user_login_profile.go in the HashiCorp Terraform Amazon Web Services (AWS) provider through v1.12.0 has an inappropriate PRNG algorithm and seeding, which mak…CVE-2018-9057Hashicorp · 1.9% likely

    HashiCorp

  5. Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys VulnerabilityCVE-2019-1715Cisco · CVSS 5.3 · 1.7% likely

    Cisco

  6. Siemens Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 for Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D (All firmware versions < V6.00.046) an…CVE-2016-9154Siemens · 1.5% likely

    Siemens

  7. kapetan dns Request.cs entropyCVE-2021-4248kapetan · CVSS 5.6 · 0.8% likely
  8. Huawei home gateways WS318 with software V100R001C01B022 and earlier versions are affected by the PIN offline brute force cracking vulnerability of the WPS protocol because the ra…CVE-2014-9690Huawei · 0.8% likely

    Huawei

  9. In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an…CVE-2017-9371BlackBerry · CVSS 2.6 · 0.8% likely

    BlackBerry

  10. Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Low-Entropy Keys VulnerabilityCVE-2023-20107Cisco · CVSS 5.3 · 0.7% likely

    Cisco

  11. Timing limitations of the HRNG in RS9116 when power save mode is enabled results in predictable valuesCVE-2026-3290Silicon Labs · CVSS 7.4 · 0.2% likely

    Silicon Labs

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.