CWE-757 · Input Validation and Logic
Selection of Less-Secure Algorithm During Negotiation
34CVEs
SortMost likely exploited
34 CVEs with CWE-757 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-10135Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacksBluetooth · BR/EDR · CVSS 5.4 · 2020-05-19 | 5.4 | 2.4% | 2020-05-19 |
| CVE-2017-9269lack of keypinning in libzypp could lead to repository switchingSUSE · libzypp · CVSS 7.7 · 2018-03-01 | 7.7 | 2.2% | 2018-03-01 |
| CVE-2021-36326Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface (UI). A remote unauthenticated attacker could potentially exploit…Dell · Dell EMC Streaming Data Platform · CVSS 6.5 · 2021-11-30 | 6.5 | 1.2% | 2021-11-30 |
| CVE-2025-24154An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3…Apple · iOS and iPadOS · CVSS 9.1 · 2025-01-27 | 9.1 | 1.2% | 2025-01-27 |
| CVE-2019-14887A flaw was found when an OpenSSL security provider is used with Wildfly, the 'enabled-protocols' value in the Wildfly configuration isn't honored. An attacker could target the tra…Red Hat · wildfly · CVSS 7.4 · 2020-03-16 | 7.4 | 1.1% | 2020-03-16 |
| CVE-2017-9267eDirectory LDAP peer certificate validation issueNovell · eDirectory · CVSS 6.5 · 2018-03-02 | 6.5 | 1.0% | 2018-03-02 |
| CVE-2024-4995Protocol Downgrade in Wapro ERP DesktopAsseco Business Solutions S.A. · Wapro ERP Desktop · CVSS 9.8 · 2024-12-18 | 9.8 | 0.9% | 2024-12-18 |
| CVE-2023-2974Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocolRed Hat · Red Hat build of Quarkus 2.13.8.Final · CVSS 6.5 · 2023-07-04 | 6.5 | 0.9% | 2023-07-04 |
| CVE-2019-16791downgrade of effective Strict Transport Security (STS) policy in postfix-mta-sts-resolverSnawoot · postfix-mta-sts-resolver · CVSS 6.9 · 2020-01-22 | 6.9 | 0.9% | 2020-01-22 |
| CVE-2026-72887Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_tokenNo vendor recorded · CVSS 9.8 · 2026-08-16 | 9.8 | 0.7% | 2026-08-16 |
| CVE-2020-16200Philips Clinical Collaboration Platform Algorithm DowngradePhilips · Clinical Collaboration Platform · CVSS 6.5 · 2020-09-18 | 6.5 | 0.6% | 2020-09-18 |
| CVE-2018-25029The Z-Wave specification requires that S2 security can be downgraded to S0 or other less secure protocols, allowing an attacker within radio range during pairing to downgrade and…Silicon Labs · Z-Wave · 2022-02-04 | – | 0.6% | 2022-02-04 |
| CVE-2024-20069In modem, there is a possible selection of less-secure algorithm during the VoWiFi IKE due to a missing DH downgrade check. This could lead to remote information disclosure with n…MediaTek, Inc. · MT6833, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6883, MT6885, MT6889… · CVSS 6.5 · 2024-06-03 | 6.5 | 0.6% | 2024-06-03 |
| CVE-2026-2673OpenSSL TLS 1.3 server may choose unexpected key agreement groupOpenSSL · OpenSSL · CVSS 6.5 · 2026-03-13 | 6.5 | 0.5% | 2026-03-13 |
| CVE-2024-8773Protocol Downgrade in SIMPLE.ERPSimple SA · SIMPLE.ERP · CVSS 8.3 · 2025-03-24 | 8.3 | 0.4% | 2025-03-24 |
| CVE-2026-4942IBM i is Affected by Algorithm Downgrade in Transport Layer Security []IBM · i · CVSS 5.9 · 2026-07-17 | 5.9 | 0.4% | 2026-07-17 |
| CVE-2026-6092Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configuredwolfSSL · wolfSSL · CVSS 2.1 · 2026-06-25 | 2.1 | 0.4% | 2026-06-25 |
| CVE-2026-89177Howyar｜WeenyGenius - Use of Insecure ProtocolHowyar · WeenyGenius · CVSS 8.8 · 2026-09-11 | 8.8 | 0.4% | 2026-09-11 |
| CVE-2026-18691Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential ExposureMongoDB · MongoDB Server · CVSS 8.8 · 2026-08-11 | 8.8 | 0.4% | 2026-08-11 |
| CVE-2024-38883An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Drop Encryption Level attac…Horizoncloud · Caterease · CVSS 9.1 · 2024-08-02 | 9.1 | 0.4% | 2024-08-02 |
| CVE-2026-109952FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation ResponseFreeRDP · FreeRDP · CVSS 5.3 · 2026-10-13 | 5.3 | 0.3% | 2026-10-13 |
| CVE-2025-10693Silicon Labs Z-Wave PIR Sensor Joins Network as Non-Securesilabs.com · Silicon Labs Z-Wave SDK · CVSS 7.6 · 2025-10-31 | 7.6 | 0.3% | 2025-10-31 |
| CVE-2022-33160IBM Security Directory Suite information disclosureIBM · Security Directory Suite · CVSS 3.7 · 2023-10-06 | 3.7 | 0.3% | 2023-10-06 |
| CVE-2023-7005CVE-2023-7005Sciener · TTLock App · CVSS 7.5 · 2024-12-19 | 7.5 | 0.3% | 2024-12-19 |
| CVE-2025-36582Dell NetWorker, versions 19.12.0.1 and prior, contains a Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade') vulnerability. An unauthenticated attacker w…Dell · NetWorker · CVSS 4.8 · 2025-07-01 | 4.8 | 0.3% | 2025-07-01 |
| CVE-2026-1677net: TLS 1.2 connections allowed on TLS 1.3 socketszephyrproject-rtos · Zephyr · CVSS 5.3 · 2026-05-11 | 5.3 | 0.2% | 2026-05-11 |
| CVE-2026-59293SMB minimum protocol dialect defaults to SMB1Spring · Spring Integration · CVSS 6.6 · 2026-08-27 | 6.6 | 0.2% | 2026-08-27 |
| CVE-2025-59270psPAS does not enforce TLS 1.2 within Get-PASSAMLResponsepspete · psPAS · CVSS 3.1 · 2025-09-16 | 3.1 | 0.2% | 2025-09-16 |
| CVE-2026-55953TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authenticationErlang · OTP · CVSS 9.1 · 2026-07-27 | 9.1 | 0.2% | 2026-07-27 |
| CVE-2026-32650Anviz CrossChex Standard Algorithm DowngradeAnviz · Anviz CrossChex Standard · CVSS 7.5 · 2026-04-17 | 7.5 | 0.2% | 2026-04-17 |
| CVE-2026-20578In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base…MediaTek, Inc. · MediaTek chipset · CVSS 5.3 · 2026-11-02 | 5.3 | 0.2% | 2026-11-02 |
| CVE-2022-23000Weak Default SSL use in Port Forwarding ServiceWestern Digital · My Cloud · CVSS 7.3 · 2022-07-25 | 7.3 | 0.2% | 2022-07-25 |
| CVE-2026-123611rustls before 0.23.46 Key Exchange Downgrade via Unauthenticated ServerHellorustls · rustls · CVSS 3.7 · 2026-11-08 | 3.7 | 0.2% | 2026-11-08 |
| CVE-2026-6550Key commitment policy bypass via shared key cache in AWS Encryption SDK for PythonAWS · AWS Encryption SDK for Python · CVSS 4.7 · 2026-04-20 | 4.7 | 0.1% | 2026-04-20 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.