CWE-347 · Cryptography
Improper Verification of Cryptographic Signature
912CVEs
7exploited
4with a public check
13likely (EPSS 10%+)
SortMost likely exploited
912 CVEs with CWE-347 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-48558In CISA KEVExploitedSimpleHelp <=5.5.15 - OIDC JWT Authentication BypassSimpleHelp · SimpleHelp · CVSS 10 · 2026-06-12 | 10.0 | 80% | 2026-06-12 |
| CVE-2025-59718In CISA KEVExploitedA improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…Fortinet · FortiSwitchManager · CVSS 9.1 · 2025-12-09 | 9.1 | 68% | 2025-12-09 |
| CVE-2013-3900In CISA KEVExploitedWinVerifyTrust Signature Validation VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 5.5 · 2013-12-11 | 5.5 | 45% | 2013-12-11 |
| CVE-2020-1464In CISA KEVExploitedWindows Spoofing VulnerabilityMicrosoft · Windows 10 Version 1803 · CVSS 7.8 · 2020-08-17 | 7.8 | 39% | 2020-08-17 |
| CVE-2026-5430In CISA KEVExploitedAuthentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account TakeoverWSO2 · WSO2 Universal Gateway · CVSS 10 · 2026-08-06 | 10.0 | 22% | 2026-08-06 |
| CVE-2025-47827In CISA KEVExploitedIn IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be…IGEL · IGEL OS · CVSS 4.6 · 2025-06-05 | 4.6 | 5.2% | 2025-06-05 |
| CVE-2020-2021In CISA KEVExploitedPAN-OS: Authentication Bypass in SAML AuthenticationPalo Alto Networks · PAN-OS · CVSS 10 · 2020-06-29 | 10.0 | 4.4% | 2020-06-29 |
| CVE-2020-9047CheckexacqVision Web Service - Remote Code ExecutionJohnson Controls · exacqVision Web Service versions 20.03.2.0 and prior · CVSS 6.8 · 2020-06-26 | 6.8 | 7.8% | 2020-06-26 |
| CVE-2025-31489CheckMinIO - Incomplete Signature Validation for Unsigned-Trailer Uploadsminio · minio · CVSS 8.7 · 2025-04-03 | 8.7 | 2.5% | 2025-04-03 |
| CVE-2024-8698CheckKeycloak - SAML Core Package Signature Validation FlawRed Hat · Red Hat Build of Keycloak · CVSS 7.7 · 2024-09-19 | 7.7 | 2.0% | 2024-09-19 |
| CVE-2024-47073CheckDataEase v2.10.2 - JWT Signature Verification Bypassdataease · dataease · CVSS 9.3 · 2024-11-07 | 9.3 | 1.3% | 2024-11-07 |
| CVE-2018-16042Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlie…Adobe · Reader · 2019-01-18 | – | 82% | 2019-01-18 |
| CVE-2025-25292Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)SAML-Toolkits · ruby-saml · CVSS 9.3 · 2025-03-12 | 9.3 | 65% | 2025-03-12 |
| CVE-2021-22160Authentication with JWT allows use of “none”-algorithmApache Software Foundation · Apache Pulsar · 2021-05-26 | – | 53% | 2021-05-26 |
| CVE-2018-0114A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the…Cisco · Node-jose Library · 2018-01-04 | – | 43% | 2018-01-04 |
| CVE-2025-59719An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticat…Fortinet · FortiWeb · CVSS 9.1 · 2025-12-09 | 9.1 | 27% | 2025-12-09 |
| CVE-2024-9487An Improper Verification of Cryptographic Signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed when the encrypted…GitHub · Enterprise Server · CVSS 9.5 · 2024-10-10 | 9.5 | 26% | 2024-10-10 |
| CVE-2020-9283golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SS…Golang · Package Ssh · 2020-02-20 | – | 21% | 2020-02-20 |
| CVE-2025-25291ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)SAML-Toolkits · ruby-saml · CVSS 9.3 · 2025-03-12 | 9.3 | 21% | 2025-03-12 |
| CVE-2024-45607whatsapp-api-js fails to validate message's signatureSecreto31126 · whatsapp-api-js · CVSS 5.8 · 2024-09-12 | 5.8 | 14% | 2024-09-12 |
| CVE-2024-45409The Ruby SAML library vulnerable to a SAML authentication bypass via Incorrect XPath selectorSAML-Toolkits · ruby-saml · CVSS 10 · 2024-09-10 | 10.0 | 12% | 2024-09-10 |
| CVE-2026-40372ASP.NET Core Elevation of Privilege VulnerabilityMicrosoft · ASP.NET Core 10.0 · CVSS 9.1 · 2026-04-21 | 9.1 | 11% | 2026-04-21 |
| CVE-2025-29775xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Commentnode-saml · xml-crypto · CVSS 9.3 · 2025-03-14 | 9.3 | 10% | 2025-03-14 |
| CVE-2025-59934Formbricks missing JWT signature verificationformbricks · formbricks · CVSS 9.4 · 2025-09-26 | 9.4 | 10% | 2025-09-26 |
| CVE-2025-29774xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo Referencesnode-saml · xml-crypto · CVSS 9.3 · 2025-03-14 | 9.3 | 9.1% | 2025-03-14 |
| CVE-2026-67276SSH user impersonation possible in Mikrotik RouterOSMikrotik · RouterOS · CVSS 9.2 · 2026-09-05 | 9.2 | 8.9% | 2026-09-05 |
| CVE-2021-37160A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. There…Swisslog-Healthcare · Hmi-3 Control Panel Firmware · 2021-08-02 | – | 8.2% | 2021-08-02 |
| CVE-2026-29000pac4j-jwt JwtAuthenticator Authentication Bypasspac4j · pac4j-jwt · CVSS 9.1 · 2026-03-04 | 9.1 | 6.2% | 2026-03-04 |
| CVE-2021-33885An Insufficient Verification of Data Authenticity vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote unauthenticated attacker to send the device malicious dat…Bbraun · Spacecom2 · CVSS 10 · 2021-08-25 | 10.0 | 5.6% | 2021-08-25 |
| CVE-2022-39299Signature bypass via multiple root elements in Passport-SAMLnode-saml · passport-saml · CVSS 7.4 · 2022-10-12 | 7.4 | 4.5% | 2022-10-12 |
| CVE-2018-12356An issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2. The signature verification routine parses the output of GnuPG with an incomplete…Simple Password Store Project · Simple Password Store · 2018-06-15 | – | 4.4% | 2018-06-15 |
| CVE-2026-10795UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpcdavidanderson · UpdraftPlus: WP Backup & Migration Plugin · CVSS 8.1 · 2026-06-11 | 8.1 | 4.3% | 2026-06-11 |
| CVE-2018-8955The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitr…Bitdefender · Gravityzone · 2018-10-24 | – | 4.3% | 2018-10-24 |
| CVE-2006-4339Openssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypassRed Hat · Red Hat Enterprise Linux 3 · CVSS 9.1 · 2006-09-05 | 9.1 | 3.9% | 2006-09-05 |
| CVE-2012-2092A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the GPG signature.Ubuntu · Cobbler · 2019-12-06 | – | 3.7% | 2019-12-06 |
| CVE-2018-18689The Portable Document Format (PDF) specification does not provide any information regarding the concrete procedure of how to validate signatures. Consequently, a Signature Wrappin…Pdf-Xchange · Pdf-Xchange Editor · 2021-01-07 | – | 3.6% | 2021-01-07 |
| CVE-2016-8021Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to spoof u…Intel · VirusScan Enterprise Linux (VSEL) · 2017-03-14 | – | 3.3% | 2017-03-14 |
| CVE-2020-24429Acrobat Reader DC for macOS Signature Verification Bypass Could Lead to Privilege EscalationAdobe · Acrobat Reader · CVSS 7.7 · 2020-11-05 | 7.7 | 3.0% | 2020-11-05 |
| CVE-2019-3465Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing a…Simplesamlphp · Rob Richards XmlSecLibs · 2019-11-07 | – | 3.0% | 2019-11-07 |
| CVE-2018-1000076RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk rev…Rubygems · Rubygems · 2018-03-13 | – | 2.9% | 2018-03-13 |
| CVE-2020-12676FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclus…Fusionauth · Samlv2 · 2020-10-02 | – | 2.9% | 2020-10-02 |
| CVE-2019-6318HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Managed printers, HP Officejet Enterprise printers have an insufficient solution bundle signature val…HP · HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet M… · 2019-04-11 | – | 2.6% | 2019-04-11 |
| CVE-2018-5923In HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP OfficeJet Enterprise Printers, solution application signature checking may allow potential execution…HP · HP LaserJet Enterprise, HP PageWide Enterprise, HP LaserJet Managed, and HP Off… · 2019-03-27 | – | 2.6% | 2019-03-27 |
| CVE-2026-15013SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusioncyberlord92 · SAML Single Sign On – SSO Login · CVSS 9.8 · 2026-07-16 | 9.8 | 2.4% | 2026-07-16 |
| CVE-2018-15587GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity…Gnome · Evolution · 2019-02-11 | – | 2.4% | 2019-02-11 |
| CVE-2020-12244An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::…Powerdns · Recursor · 2020-05-19 | – | 2.4% | 2020-05-19 |
| CVE-2020-28042ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature.Servicestack · Servicestack · 2020-11-01 | – | 2.3% | 2020-11-01 |
| CVE-2021-37927Zoho ManageEngine ADManager Plus version 7110 and prior allows account takeover via SSO.Zohocorp · Manageengine Admanager Plus · 2021-09-22 | – | 2.2% | 2021-09-22 |
| CVE-2018-0489Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows…Shibboleth · Shibboleth XMLTooling-C before 1.6.4 · 2018-02-27 | – | 2.1% | 2018-02-27 |
| CVE-2025-23369Improper Verification of Cryptographic Signature in GitHub Enterprise Server Allows Signature Spoofing by Improper ValidationGitHub · Enterprise Server · CVSS 7.6 · 2025-01-21 | 7.6 | 2.1% | 2025-01-21 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.