Monthly
IBM i versions 7.3 through 7.6 expose encryption key material to high-privileged local users due to hardcoded cryptographic constants used in the key-obfuscation layer. An attacker with elevated local privileges can leverage knowledge of these constants to reverse the obfuscation and recover plaintext encryption keys, gaining access to data that was assumed to be cryptographically protected. No public exploit has been identified at time of analysis, and IBM has released a patch via its support portal.
Sensitive information disclosure in IBM Enterprise Records (a component of IBM Cloud Pak for Business Automation) allows a local attacker to recover protected data due to the use of a broken or risky cryptographic algorithm (CWE-327). Affected versions span CP4BA releases 24.0.0 through 26.0.0 up to specific interim fix levels. No public exploit code has been identified at time of analysis, and IBM has released interim fixes addressing the cryptographic weakness.
Authentication weakness in Ebyte NE2-D11 firmware stems from use of a deprecated hashing algorithm in an authentication-related operation, letting an attacker who can observe, manipulate, or predict the authentication exchange defeat the login mechanism and gain unauthorized access to the industrial serial-to-Ethernet device. The flaw was reported through CISA ICS-CERT (advisory ICSA-26-237-06) and carries a CVSS 4.0 base score of 9.3, but there is no public exploit identified at time of analysis and it is not listed in CISA KEV. Compromise of these edge/OT gateway devices can expose the serial equipment behind them, so despite the niche footprint the impact per device is high.
Unsalted MD5 password hashing in Ech0's `MD5Encrypt` function (`internal/util/crypto/crypto.go`) stores credentials in a format trivially crackable via rainbow tables or GPU-accelerated brute force. Versions 5.4.0 and 5.4.1 are confirmed affected; the migration comment in the fix explicitly labels the stored values as 'historical bare MD5' (历史裸 MD5), confirming no per-user salt was applied. Ech0 5.4.2 resolves this by backfilling existing hashes to a dedicated `user_local_auth` table and enabling lazy bcrypt upgrade on next login. No public exploit exists and no active exploitation has been confirmed.
Broken cryptography in Ceph's CephX authentication subsystem enables credential scope escalation and plaintext inference for any network-adjacent attacker holding a compromised Ceph account. CephX employed AES-CBC with a hardcoded initialization vector and no message authentication code, making encrypted authentication traffic both deterministic (identical plaintexts yield identical ciphertexts) and malleable (bit-flip attacks alter decrypted credential payloads undetected). Fixed in Ceph Tentacle 20.2.4 and Squid 19.2.6 by replacing the scheme with AES-256-CTS-HMAC-SHA384-192; no public exploit has been identified at time of analysis.
Remote privilege escalation in Ceph RADOS Gateway (RGW) allows any holder of a valid STS session token - regardless of privilege level - to forge administrative credentials by exploiting unauthenticated AES-128-CBC encryption. By applying a deterministic CBC bit-flip to the acct_type, perm_type, and is_admin fields of their own token, an attacker can trigger a global authorization override that bypasses all RGW capability checks, yielding full administrative control over all objects and buckets in the cluster. No public exploit has been identified at time of analysis; however, the attack is self-contained, requires no encryption oracle, and is reachable over the standard RGW S3 endpoint, making it highly accessible to any user with STS access. Fixed versions 19.2.6 and 20.2.4 are confirmed released.
HTTP Digest authentication in http4k-security-digest silently degraded to MD5 for all credential verification, regardless of the configured algorithm. Applications on any v4.x, v5.x, or v6.x release prior to the fixes believed they were enforcing SHA-256 Digest auth but were actually operating under MD5's weaker collision resistance since the component's introduction in 2021. No public exploit has been identified and this vulnerability is not in CISA KEV, but the long exposure window and algorithmic downgrade create a meaningful authentication integrity risk for affected deployments.
Weak key derivation in openssl_encrypt versions prior to 1.4.0 enables accelerated offline password cracking against files encrypted by the library. The jahlives/openssl_encrypt PHP library implements PBKDF2 in a non-standard construction - using iterations=1 per inner call within an outer application loop - a design whose formal security properties have not been analyzed and whose brute-force resistance is materially lower than a correctly parameterized PBKDF2 implementation. No public exploit code has been identified at time of analysis, and the library has not been listed in CISA KEV; exploitation is bounded to attackers who have already obtained the encrypted artifacts.
Broken or risky cryptographic algorithm use in Johnson Controls TL280 communicator firmware exposes device communications to cryptanalytic attack, affecting all versions before 5.63. An unauthenticated network attacker who can satisfy specific attack prerequisites - most likely a man-in-the-middle network position - can achieve limited confidentiality, integrity, and availability impact against communications to and from the device. No active exploitation is confirmed (CISA KEV absent, SSVC exploitation status: none), and automatable exploitation is assessed as unlikely due to the AT:P requirement in the CVSS 4.0 vector.
Sensitive memory disclosure in Adobe ColdFusion 2023 and 2025 stems from the server's use of a broken or risky cryptographic algorithm (CWE-327), enabling a remote unauthenticated attacker to retrieve confidential data - such as session tokens, credentials, or application secrets - that transit or reside in vulnerable cryptographic operations. Both the 2023 and 2025 product lines are confirmed affected per Adobe's own CPE data. No user interaction is required, and the CVSS vector confirms full network exploitability against default deployments. No public exploit code or CISA KEV listing has been identified at time of analysis.
IBM i versions 7.3 through 7.6 expose encryption key material to high-privileged local users due to hardcoded cryptographic constants used in the key-obfuscation layer. An attacker with elevated local privileges can leverage knowledge of these constants to reverse the obfuscation and recover plaintext encryption keys, gaining access to data that was assumed to be cryptographically protected. No public exploit has been identified at time of analysis, and IBM has released a patch via its support portal.
Sensitive information disclosure in IBM Enterprise Records (a component of IBM Cloud Pak for Business Automation) allows a local attacker to recover protected data due to the use of a broken or risky cryptographic algorithm (CWE-327). Affected versions span CP4BA releases 24.0.0 through 26.0.0 up to specific interim fix levels. No public exploit code has been identified at time of analysis, and IBM has released interim fixes addressing the cryptographic weakness.
Authentication weakness in Ebyte NE2-D11 firmware stems from use of a deprecated hashing algorithm in an authentication-related operation, letting an attacker who can observe, manipulate, or predict the authentication exchange defeat the login mechanism and gain unauthorized access to the industrial serial-to-Ethernet device. The flaw was reported through CISA ICS-CERT (advisory ICSA-26-237-06) and carries a CVSS 4.0 base score of 9.3, but there is no public exploit identified at time of analysis and it is not listed in CISA KEV. Compromise of these edge/OT gateway devices can expose the serial equipment behind them, so despite the niche footprint the impact per device is high.
Unsalted MD5 password hashing in Ech0's `MD5Encrypt` function (`internal/util/crypto/crypto.go`) stores credentials in a format trivially crackable via rainbow tables or GPU-accelerated brute force. Versions 5.4.0 and 5.4.1 are confirmed affected; the migration comment in the fix explicitly labels the stored values as 'historical bare MD5' (历史裸 MD5), confirming no per-user salt was applied. Ech0 5.4.2 resolves this by backfilling existing hashes to a dedicated `user_local_auth` table and enabling lazy bcrypt upgrade on next login. No public exploit exists and no active exploitation has been confirmed.
Broken cryptography in Ceph's CephX authentication subsystem enables credential scope escalation and plaintext inference for any network-adjacent attacker holding a compromised Ceph account. CephX employed AES-CBC with a hardcoded initialization vector and no message authentication code, making encrypted authentication traffic both deterministic (identical plaintexts yield identical ciphertexts) and malleable (bit-flip attacks alter decrypted credential payloads undetected). Fixed in Ceph Tentacle 20.2.4 and Squid 19.2.6 by replacing the scheme with AES-256-CTS-HMAC-SHA384-192; no public exploit has been identified at time of analysis.
Remote privilege escalation in Ceph RADOS Gateway (RGW) allows any holder of a valid STS session token - regardless of privilege level - to forge administrative credentials by exploiting unauthenticated AES-128-CBC encryption. By applying a deterministic CBC bit-flip to the acct_type, perm_type, and is_admin fields of their own token, an attacker can trigger a global authorization override that bypasses all RGW capability checks, yielding full administrative control over all objects and buckets in the cluster. No public exploit has been identified at time of analysis; however, the attack is self-contained, requires no encryption oracle, and is reachable over the standard RGW S3 endpoint, making it highly accessible to any user with STS access. Fixed versions 19.2.6 and 20.2.4 are confirmed released.
HTTP Digest authentication in http4k-security-digest silently degraded to MD5 for all credential verification, regardless of the configured algorithm. Applications on any v4.x, v5.x, or v6.x release prior to the fixes believed they were enforcing SHA-256 Digest auth but were actually operating under MD5's weaker collision resistance since the component's introduction in 2021. No public exploit has been identified and this vulnerability is not in CISA KEV, but the long exposure window and algorithmic downgrade create a meaningful authentication integrity risk for affected deployments.
Weak key derivation in openssl_encrypt versions prior to 1.4.0 enables accelerated offline password cracking against files encrypted by the library. The jahlives/openssl_encrypt PHP library implements PBKDF2 in a non-standard construction - using iterations=1 per inner call within an outer application loop - a design whose formal security properties have not been analyzed and whose brute-force resistance is materially lower than a correctly parameterized PBKDF2 implementation. No public exploit code has been identified at time of analysis, and the library has not been listed in CISA KEV; exploitation is bounded to attackers who have already obtained the encrypted artifacts.
Broken or risky cryptographic algorithm use in Johnson Controls TL280 communicator firmware exposes device communications to cryptanalytic attack, affecting all versions before 5.63. An unauthenticated network attacker who can satisfy specific attack prerequisites - most likely a man-in-the-middle network position - can achieve limited confidentiality, integrity, and availability impact against communications to and from the device. No active exploitation is confirmed (CISA KEV absent, SSVC exploitation status: none), and automatable exploitation is assessed as unlikely due to the AT:P requirement in the CVSS 4.0 vector.
Sensitive memory disclosure in Adobe ColdFusion 2023 and 2025 stems from the server's use of a broken or risky cryptographic algorithm (CWE-327), enabling a remote unauthenticated attacker to retrieve confidential data - such as session tokens, credentials, or application secrets - that transit or reside in vulnerable cryptographic operations. Both the 2023 and 2025 product lines are confirmed affected per Adobe's own CPE data. No user interaction is required, and the CVSS vector confirms full network exploitability against default deployments. No public exploit code or CISA KEV listing has been identified at time of analysis.