CWE-1204: IV
The product uses a cryptographic primitive that uses an Initialization Vector (IV), but the product does not generate IVs that are sufficiently unpredictable or unique according to the expected cryptographic requirements for that primitive.
5 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2025-0714 — Insecure storage of sensitive information in MobaXTerm <25.0.
- CVE-2026-5087 — PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely
Recently published
- CVE-2026-5087 — PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely
- CVE-2025-0714 — Insecure storage of sensitive information in MobaXTerm <25.0.
More specific weaknesses
- CWE-329 — Generation of Predictable IV with CBC Mode