CWE-337 · Cryptography
Predictable Seed in Pseudo-Random Number Generator (PRNG)
17CVEs
SortMost likely exploited
17 CVEs with CWE-337 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-26018CoreDNS Loop Detection Denial of Service Vulnerabilitycoredns · coredns · CVSS 7.5 · 2026-03-06 | 7.5 | 1.2% | 2026-03-06 |
| CVE-2022-40267Authentication Bypass Vulnerability in Web Server Function on MELSEC SeriesMitsubishi Electric Corporation · MELSEC iQ-F Series FX5U-32MT/ES · CVSS 5.9 · 2023-01-20 | 5.9 | 1.2% | 2023-01-20 |
| CVE-2022-26852Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnera…Dell · PowerScale OneFS · CVSS 8.1 · 2022-04-08 | 8.1 | 1.2% | 2022-04-08 |
| CVE-2020-28597A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password r…Epignosishq · Epignosis · CVSS 9.8 · 2021-03-03 | 9.8 | 1.1% | 2021-03-03 |
| CVE-2016-15006enigmaX Scrambling Table main.c getSeed prng seedEnigmax Project · enigmaX · CVSS 3.7 · 2023-01-02 | 3.7 | 0.8% | 2023-01-02 |
| CVE-2025-7770Predictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect AdvancedTigo Energy · Cloud Connect Advanced · CVSS 8.7 · 2025-08-06 | 8.7 | 0.6% | 2025-08-06 |
| CVE-2024-7558JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namesp…Canonical Ltd. · Juju · CVSS 8.7 · 2024-10-02 | 8.7 | 0.5% | 2024-10-02 |
| CVE-2026-55889XDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer keyflatpak · xdg-desktop-portal · CVSS 8.3 · 2026-10-23 | 8.3 | 0.3% | 2026-10-23 |
| CVE-2025-55069AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number GeneratorAutomationDirect · CLICK PLUS C0-0x CPU firmware · CVSS 8.3 · 2025-09-23 | 8.3 | 0.3% | 2025-09-23 |
| CVE-2023-49343Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible…Ubuntu Budgie · Budgie Extras · CVSS 6 · 2023-12-14 | 6.0 | 0.3% | 2023-12-14 |
| CVE-2026-25235PEAR Has a Predictable Verification Hash in Election Account Requestspear · pearweb · CVSS 8.2 · 2026-02-03 | 8.2 | 0.3% | 2026-02-03 |
| CVE-2026-66372Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product LineupsDigital Watchdog · VMAX A1 G4 DVR · CVSS 6.8 · 2026-09-15 | 6.8 | 0.3% | 2026-09-15 |
| CVE-2025-62710Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImplsakaiproject · sakai · CVSS 5.9 · 2025-10-22 | 5.9 | 0.2% | 2025-10-22 |
| CVE-2025-20613Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some Intel(R) TDX may allow an authenticated user to potentially enable information disclosure via lo…Intel(R) TDX · CVSS 3.3 · 2025-08-12 | 3.3 | 0.2% | 2025-08-12 |
| CVE-2026-18451Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch tokenSMCI · MBD-X12SPI · CVSS 3.1 · 2026-10-27 | 3.1 | 0.2% | 2026-10-27 |
| CVE-2026-73794HPE NonStop MODULAR NSJ - Vulnerability in Random Number GenerationHewlett Packard Enterprise · HPE NonStop MODULAR NSJ · CVSS 4.6 · 2026-10-14 | 4.6 | 0.1% | 2026-10-14 |
| CVE-2026-19396A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive th…ASUS · Router · CVSS 7.7 · 2026-10-07 | 7.7 | 0.1% | 2026-10-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.