CWE-323 · Cryptography
Reusing a Nonce, Key Pair in Encryption
48CVEs
SortMost likely exploited
48 CVEs with CWE-323 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-49952CheckDiscuz! X5.0 - Authentication BypassDiscuz! · Discuz! X5.0 · CVSS 9.1 · 2026-06-15 | 9.1 | 4.7% | 2026-06-15 |
| CVE-2017-13082Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BSS transmission (FT)…Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2) · 2017-10-17 | – | 4.6% | 2017-10-17 |
| CVE-2017-7902A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B, V…Rockwellautomation · Rockwell Automation Allen-Bradley MicroLogix 1100 and 1400 · 2017-06-30 | – | 2.6% | 2017-06-30 |
| CVE-2017-13080Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frame…Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2) · 2017-10-17 | – | 2.3% | 2017-10-17 |
| CVE-2017-13084Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within rad…Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2) · 2017-10-17 | – | 2.2% | 2017-10-17 |
| CVE-2017-13079Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attack…Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2) · 2017-10-17 | – | 2.1% | 2017-10-17 |
| CVE-2017-13078Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames…Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2) · 2017-10-17 | – | 2.1% | 2017-10-17 |
| CVE-2017-13086Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio ra…Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2) · 2017-10-17 | – | 2.0% | 2017-10-17 |
| CVE-2017-13081Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attac…Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2) · 2017-10-17 | – | 2.0% | 2017-10-17 |
| CVE-2017-13088Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Sle…Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2) · 2017-10-17 | – | 1.8% | 2017-10-17 |
| CVE-2021-32791Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidczmartzone · mod_auth_openidc · CVSS 5.9 · 2021-07-26 | 5.9 | 1.5% | 2021-07-26 |
| CVE-2020-1759A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messeng…The Ceph Project · ceph · CVSS 6.4 · 2020-04-13 | 6.4 | 1.4% | 2020-04-13 |
| CVE-2023-28997Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access filesnextcloud · security-advisories · CVSS 6.7 · 2023-04-04 | 6.7 | 1.1% | 2023-04-04 |
| CVE-2019-7593Metasys use of shared RSA key pairsJohnson Controls · Metasys versions prior to 9.0 · CVSS 6.8 · 2019-08-20 | 6.8 | 0.8% | 2019-08-20 |
| CVE-2026-59099Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosureapereo · cas · CVSS 9.1 · 2026-07-02 | 9.1 | 0.5% | 2026-07-02 |
| CVE-2026-3559Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass VulnerabilityPhilips · Hue Bridge · CVSS 8.1 · 2026-03-13 | 8.1 | 0.5% | 2026-03-13 |
| CVE-2026-50577ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counterfbeta-GmbH · ePA3-Service-OpenSource · CVSS 7.4 · 2026-08-18 | 7.4 | 0.5% | 2026-08-18 |
| CVE-2024-23688Consensys Discovery Nonce ReuseConsensys · tech.pegasys.discovery:discovery · CVSS 5.3 · 2024-01-19 | 5.3 | 0.5% | 2024-01-19 |
| CVE-2023-4680Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent EncryptionHashiCorp · Vault · CVSS 6.8 · 2023-09-14 | 6.8 | 0.4% | 2023-09-14 |
| CVE-2026-3099Libsoup: libsoup: authentication bypass via digest authentication replay attackRed Hat · Red Hat Enterprise Linux 10 · CVSS 5.8 · 2026-03-12 | 5.8 | 0.4% | 2026-03-12 |
| CVE-2024-11022SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attackSICK AG · SICK InspectorP61x · CVSS 5.6 · 2024-12-06 | 5.6 | 0.4% | 2024-12-06 |
| CVE-2026-81020wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordwolfSSL Inc. · wolfEngine · CVSS 7.4 · 2026-08-28 | 7.4 | 0.4% | 2026-08-28 |
| CVE-2026-81019wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordwolfSSL Inc. · wolfProvider · CVSS 7.4 · 2026-08-28 | 7.4 | 0.4% | 2026-08-28 |
| CVE-2026-13602Session takeover vulnerabilitypretix · pretix · CVSS 7.7 · 2026-07-01 | 7.7 | 0.4% | 2026-07-01 |
| CVE-2022-37660In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity usin…W1.fi · Hostapd · CVSS 6.5 · 2025-02-11 | 6.5 | 0.4% | 2025-02-11 |
| CVE-2023-37467Discourse CSP nonce reuse vulnerability for anonymous usersdiscourse · discourse · CVSS 6.8 · 2023-07-28 | 6.8 | 0.4% | 2023-07-28 |
| CVE-2026-25998strongMan vulnerable to private credential recovery due to key and counter reusestrongswan · strongMan · CVSS 8.7 · 2026-02-19 | 8.7 | 0.3% | 2026-02-19 |
| CVE-2026-5446wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reusewolfSSL · wolfSSL · CVSS 6 · 2026-04-09 | 6.0 | 0.3% | 2026-04-09 |
| CVE-2022-24401Keystream recovery for arbitrary frames in TETRAETSI · TETRA Standard · CVSS 8.8 · 2023-10-19 | 8.8 | 0.3% | 2023-10-19 |
| CVE-2025-46632Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted…Tenda · Rx2 Pro Firmware · CVSS 6.5 · 2025-05-01 | 6.5 | 0.3% | 2025-05-01 |
| CVE-2026-81341wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 recordswolfSSL Inc. · wolfEngine · CVSS 6.5 · 2026-08-28 | 6.5 | 0.3% | 2026-08-28 |
| CVE-2026-109140Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" tokenNLnet Labs · Krill · CVSS 8.4 · 2026-11-02 | 8.4 | 0.3% | 2026-11-02 |
| CVE-2026-12205Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recoveryTIMLEGGE · Crypt::DSA · CVSS 9.1 · 2026-06-15 | 9.1 | 0.3% | 2026-06-15 |
| CVE-2023-7003CVE-2023-7003Sciener · Kontrol Lux · CVSS 6.8 · 2024-03-15 | 6.8 | 0.3% | 2024-03-15 |
| CVE-2025-59870Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security riskHCL Software · MyXalytics · CVSS 7.4 · 2026-01-16 | 7.4 | 0.3% | 2026-01-16 |
| CVE-2026-71884Packet CTR reports a full success length after the counter is exhaustedLegion of the Bouncy Castle Inc. · BC-LTS-JAVA · CVSS 8.2 · 2026-10-09 | 8.2 | 0.3% | 2026-10-09 |
| CVE-2026-17578Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcementKong · Kong Event Gateway · CVSS 2.3 · 2026-08-05 | 2.3 | 0.2% | 2026-08-05 |
| CVE-2024-36289Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the cont…FreeFrom K.K. · "FreeFrom - the nostr client" App for Android · CVSS 5.3 · 2024-06-17 | 5.3 | 0.2% | 2024-06-17 |
| CVE-2026-56369ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImageImageMagick · ImageMagick · CVSS 3.7 · 2026-06-30 | 3.7 | 0.2% | 2026-06-30 |
| CVE-2025-64767hpke-js reuses AEAD noncesdajiaji · hpke-js · CVSS 9.1 · 2025-11-21 | 9.1 | 0.2% | 2025-11-21 |
| CVE-2025-61739Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryptionJohnson Controls · IQ Panels2, 2+, IQHub, IQPanel 4, PowerG · CVSS 7.2 · 2025-12-22 | 7.2 | 0.2% | 2025-12-22 |
| CVE-2026-55967AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reusewolfSSL · wolfSSL · CVSS 2 · 2026-06-25 | 2.0 | 0.2% | 2026-06-25 |
| CVE-2024-41951PheonixAppAPI has visible Encoding MapsAkshuDev · PheonixAppAPI · CVSS 4.4 · 2024-07-31 | 4.4 | 0.2% | 2024-07-31 |
| CVE-2026-45028Astro: Server island encrypted parameters vulnerable to cross-component replaywithastro · astro · CVSS 2.9 · 2026-05-13 | 2.9 | 0.1% | 2026-05-13 |
| CVE-2024-21530Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryption when the encrypt, wrap, and dump functions are sequentially called. An attack…cocoon · CVSS 4.5 · 2024-10-02 | 4.5 | 0.1% | 2024-10-02 |
| CVE-2026-21383Reusing a Nonce, Key Pair in Encryption in HLOSQualcomm, Inc. · Snapdragon · CVSS 7.1 · 2026-07-06 | 7.1 | 0.1% | 2026-07-06 |
| CVE-2025-47345Reusing a Nonce, Key Pair in Encryption in Automotive PlatformQualcomm, Inc. · Snapdragon · CVSS 8.4 · 2026-01-06 | 8.4 | 0.1% | 2026-01-06 |
| CVE-2026-15890AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronizationzephyrproject · zephyr · CVSS 5.3 · 2026-09-21 | 5.3 | 0.1% | 2026-09-21 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.