CWE-5 · Misconfiguration and Insecure Design
J2EE Misconfiguration: Data Transmission Without Encryption
2CVEs
SortMost likely exploited
2 CVEs with CWE-5 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-52435Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controllerApache Software Foundation · Apache Mynewt NimBLE · CVSS 7.5 · 2026-01-10 | 7.5 | 0.2% | 2026-01-10 |
| CVE-2025-65297Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 automatically collect and upload unencrypted sensitive information. Note that this o…Aqara · Hub M2 Firmware · CVSS 7.5 · 2025-12-10 | 7.5 | 0.2% | 2025-12-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.