Skip to content

CWE-337 · weakness in Cryptography

Predictable Seed in Pseudo-Random Number Generator (PRNG)

17 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

  1. CoreDNS Loop Detection Denial of Service VulnerabilityCVE-2026-26018coredns · CVSS 7.5 · 1.2% likely

    Coredns

  2. Authentication Bypass Vulnerability in Web Server Function on MELSEC SeriesCVE-2022-40267Mitsubishi Electric Corporation · CVSS 5.9 · 1.2% likely

    Mitsubishi Electric

  3. Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnera…CVE-2022-26852Dell · CVSS 8.1 · 1.2% likely

    Dell

  4. A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password r…CVE-2020-28597Epignosishq · CVSS 9.8 · 1.1% likely
  5. enigmaX Scrambling Table main.c getSeed prng seedCVE-2016-15006Enigmax Project · CVSS 3.7 · 0.8% likely
  6. Predictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect AdvancedCVE-2025-7770Tigo Energy · CVSS 8.7 · 0.6% likely
  7. JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namesp…CVE-2024-7558Canonical Ltd. · CVSS 8.7 · 0.5% likely

    Canonical

  8. XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer keyCVE-2026-55889flatpak · CVSS 8.3 · 0.3% likely

    Flatpak

  9. AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number GeneratorCVE-2025-55069AutomationDirect · CVSS 8.3 · 0.3% likely

    AutomationDirect

  10. Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible…CVE-2023-49343Ubuntu Budgie · CVSS 6 · 0.3% likely

    Ubuntu Budgie

  11. PEAR Has a Predictable Verification Hash in Election Account RequestsCVE-2026-25235pear · CVSS 8.2 · 0.3% likely

    Pear

  12. Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product LineupsCVE-2026-66372Digital Watchdog · CVSS 6.8 · 0.3% likely

    Digital Watchdog

  13. Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImplCVE-2025-62710sakaiproject · CVSS 5.9 · 0.2% likely

    Sakaiproject

  14. Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some Intel(R) TDX may allow an authenticated user to potentially enable information disclosure via lo…CVE-2025-20613Intel(R) TDX · CVSS 3.3 · 0.2% likely
  15. Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch tokenCVE-2026-18451SMCI · CVSS 3.1 · 0.2% likelycovered by CyberSIXT

    SMCI1 article

  16. HPE NonStop MODULAR NSJ - Vulnerability in Random Number GenerationCVE-2026-73794Hewlett Packard Enterprise · CVSS 4.6 · 0.1% likely

    Hewlett Packard Enterprise

  17. A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive th…CVE-2026-19396ASUS · CVSS 7.7 · 0.1% likelycovered by CyberSIXT

    ASUS1 article

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.