CWE-324 · Cryptography
Use of a Key Past its Expiration Date
23CVEs
SortMost likely exploited
23 CVEs with CWE-324 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-35401An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230. A specially-crafted HTTP request can lead to fu…Asus · RT-AX82U · CVSS 9 · 2023-01-10 | 9.0 | 21% | 2023-01-10 |
| CVE-2024-36031keys: Fix overwrite of key expiration on instantiationLinux · Linux · CVSS 9.8 · 2024-05-30 | 9.8 | 0.7% | 2024-05-30 |
| CVE-2022-2447A flaw was found in Keystone. There is a time lag (up to one hour in a default configuration) between when security policy says a token should be revoked from when it is actually…Openstack · openstack-keystone · 2022-09-01 | – | 0.7% | 2022-09-01 |
| CVE-2019-3790Ops Manager uaa client issues tokens after refresh token expirationPivotal · Pivotal Ops Manager · CVSS 6.1 · 2019-06-06 | 6.1 | 0.7% | 2019-06-06 |
| CVE-2021-33020Philips Vue PACS Use of a Key Past its Expiration DatePhilips · Vue PACS · CVSS 8.2 · 2022-04-01 | 8.2 | 0.6% | 2022-04-01 |
| CVE-2026-39923Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /resetFlarum · Flarum Framework · CVSS 8.1 · 2026-08-05 | 8.1 | 0.4% | 2026-08-05 |
| CVE-2022-24732Maddy Mail Server does not implement account expiryfoxcpp · maddy · CVSS 6.3 · 2022-03-09 | 6.3 | 0.4% | 2022-03-09 |
| CVE-2025-31123Zitadel Expired JWT Keys Usable for Authorization Grantszitadel · zitadel · CVSS 8.7 · 2025-03-31 | 8.7 | 0.4% | 2025-03-31 |
| CVE-2024-7318Keycloak-core: one time passcode (otp) is valid longer than expiration timeseverityRed Hat · Red Hat Build of Keycloak · CVSS 4.8 · 2024-09-09 | 4.8 | 0.4% | 2024-09-09 |
| CVE-2025-2291PgBouncer default auth_query does not take Postgres password expiry into accountPgbouncer · PgBouncer · CVSS 8.1 · 2025-04-16 | 8.1 | 0.4% | 2025-04-16 |
| CVE-2024-31895IBM App Connect Enterprise information disclosureIBM · App Connect Enterprise · CVSS 4.3 · 2024-05-22 | 4.3 | 0.3% | 2024-05-22 |
| CVE-2024-31894IBM App Connect Enterprise information disclosureIBM · App Connect Enterprise · CVSS 4.3 · 2024-05-22 | 4.3 | 0.3% | 2024-05-22 |
| CVE-2024-31893IBM App Connect Enterprise information disclosureIBM · App Connect Enterprise · CVSS 4.3 · 2024-05-22 | 4.3 | 0.3% | 2024-05-22 |
| CVE-2025-48813Virtual Secure Mode Spoofing VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.3 · 2025-10-14 | 6.3 | 0.3% | 2025-10-14 |
| CVE-2024-25679In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION_CLOSE frame that is…Pquic · Pquic · CVSS 6.5 · 2024-02-09 | 6.5 | 0.3% | 2024-02-09 |
| CVE-2023-6960CVE-2023-6960Sciener · TTLock App · CVSS 7.5 · 2024-03-15 | 7.5 | 0.3% | 2024-03-15 |
| CVE-2024-38277moodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keysMoodle · Moodle · CVSS 5.4 · 2024-06-18 | 5.4 | 0.2% | 2024-06-18 |
| CVE-2025-13723IBM Sterling Partner Engagement Manager Information DisclosureIBM · Sterling Partner Engagement Manager · CVSS 5.3 · 2026-03-13 | 5.3 | 0.2% | 2026-03-13 |
| CVE-2026-52809Gogs: Password-reset tokens use account-activation lifetime, ignoring RESET_PASSWORD_CODE_LIVESgogs · gogs · CVSS 6.8 · 2026-06-24 | 6.8 | 0.2% | 2026-06-24 |
| CVE-2025-33012IBM Db2 improper account lockoutIBM · Db2 · CVSS 6.3 · 2025-11-07 | 6.3 | 0.2% | 2025-11-07 |
| CVE-2024-6299Use of a Key Past its Expiration Date in ConduitThe Conduit Contributors · Conduit · CVSS 4.8 · 2024-06-25 | 4.8 | 0.2% | 2024-06-25 |
| CVE-2026-54787sigstore-go fails to check signature timestamps against a signing key's validity periodsigstore · sigstore-go · CVSS 3.1 · 2026-07-31 | 3.1 | 0.1% | 2026-07-31 |
| CVE-2023-5342Shim: expired secure boot certificateRed Hat · Red Hat Enterprise Linux 10 · CVSS 4.1 · 2025-08-15 | 4.1 | 0.1% | 2025-08-15 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.