CWE-323— Reusing a Nonce, Key Pair in Encryption
Nonces should be used for the present occasion and only once.— MITRE CWE catalog
53 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-323page 2 of 2
- CVE-2024-41951MEDIUMCVSS 4.4EG 4.42024-07-31
Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are visible in code. The Problem was patched in 0.2.4.
- CVE-2026-56369LOWCVSS 3.7EG 3.72026-07-01
ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the cipher implementation to recover plaintext information fro…
- CVE-2026-17578LOWCVSS 2.3EG 2.32026-08-05
Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recommended usage limit for AES-GCM encryption keys with random nonces when the AWS IAM encryption feature is enabled. …
Map vulnerabilities like CWE-323 to your infrastructure
EchelonGraph correlates every CVE — across CWE-323 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →