CWE-344 · Cryptography
Use of Invariant Value in Dynamically Changing Context
3CVEs
SortMost likely exploited
3 CVEs with CWE-344 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-22746CKAN is vulnerable to session secret shared across instances using Docker imagesckan · ckan · CVSS 8.6 · 2023-02-03 | 8.6 | 0.7% | 2023-02-03 |
| CVE-2022-36022Some Deeplearning4J packages use unclaimed s3 bucket in tests and exampleseclipse · deeplearning4j · CVSS 5.3 · 2022-11-10 | 5.3 | 0.5% | 2022-11-10 |
| CVE-2026-42961ELECOM wireless LAN access point devices implement CSRF protection mechanism, but with inadequate handling of CSRF tokens. If a user views a malicious page while logged in, the us…ELECOM CO.,LTD. · WAB-BE187-M · CVSS 5.1 · 2026-05-13 | 5.1 | 0.2% | 2026-05-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.