CVE-2025-52578

The record

Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical access, to compromise internal device communications. This issue affects Command Centre Server: 9.30 prior to vCR9.30.251028a (distributed in 9.30.2881 (MR3)), 9.20 prior to vCR9.20.251028a (distributed in 9.20.3265 (MR5)), 9.10 prior to vCR9.10.251028a (distributed in 9.10.4135 (MR8)), all versions of 9.00 and prior.

Affected packages

Related vulnerabilities

• CVE-2026-11625 Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked… CWE-335
• CVE-2026-11702 Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across… CWE-335
• CVE-2026-41564 CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after… CWE-335
• CVE-2026-25835 Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random… CWE-335
• CVE-2026-3503 Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and… CWE-335
• CVE-2024-55566 ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with… CWE-335
• CVE-2024-36048 QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x… CWE-335