Skip to content

CWE-1241 · Cryptography

Use of Predictable Algorithm in Random Number Generator

9CVEs

9 CVEs with CWE-1241 as their weakness

CVEs with CWE-1241, Most likely exploited
CVE · most likely exploitedCVSSEPSSPublished
CVE-2021-3689Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2yiisoft · yiisoft/yii2 · CVSS 8.1 · 2021-08-108.11.9%2021-08-10
CVE-2021-3692Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2yiisoft · yiisoft/yii2 · CVSS 8.1 · 2021-08-108.11.7%2021-08-10
CVE-2023-4695Use of Predictable Algorithm in Random Number Generator in pkp/pkp-libpkp · pkp/pkp-lib · CVSS 9.6 · 2023-09-019.60.7%2023-09-01
CVE-2026-82191Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal notify redirect in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · J2Store extension for Joomla · CVSS 5.3 · 2026-09-155.30.4%2026-09-15
CVE-2025-13079Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokenspopupbuilder · Popup Builder – Create highly converting, mobile friendly marketing popups. · CVSS 5.3 · 2026-02-195.30.4%2026-02-19
CVE-2026-73576In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration. The zimbraDocumentEditingJwtSecret is generated…Zimbra · Collaboration · CVSS 6.3 · 2026-08-136.30.3%2026-08-13
CVE-2026-82190Joomla Extension - j2commerce.com - Predictable/forgeable order access token in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7j2commerce.com · J2Store extension for Joomla · CVSS 6.3 · 2026-09-156.30.3%2026-09-15
CVE-2025-32056Anti-Theft Bypass for Infotainment ECUBosch · Infotainment system ECU · CVSS 4 · 2026-01-224.00.3%2026-01-22
CVE-2026-6420Keylime: keylime: security bypass due to hardcoded tpm quote nonceRedhat · keylime · CVSS 6.3 · 2026-05-066.30.1%2026-05-06

EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.

Updated AboutDevelopersSign in