CWE-338

CWE-338 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-338, highest CVSS first.

  1. CRITICAL 9.1CVE-2026-94456public PoC2026-09-22

    Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The same helper is used for OAuth access tokens, authorization codes, client secrets, organization API keys, and PKCE verifiers, meaning these c…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.1CVE-2026-94107public PoC2026-09-20

    NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substr(md5(mt_rand()), 0, 10). Attackers who know an administrator's email address can request a password reset a…

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 4.8CVE-2026-92298public PoC2026-09-16

    EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and campaign URLs instead of a cryptographically secure generator. Remote unauthenticated attackers can guess these roughly 31-bit tokens to confirm…

    AI risk analysis on Exploit-DB.ai →