CVE-2025-64647
Medium · 5.9CVSS
5.9
EPSS
0.2%
Published
Mar 25, 2026
CISA due date
—
The record
IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-50303 Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows… CWE-1240
- CVE-2026-46654 Plonky3 is a toolkit for polynomial IOPs (PIOPs). CWE-1240
- CVE-2026-44410 This vulnerability stems from a business logic flaw.Attackers can exploit legitimate… CWE-1240
- GHSA-vj64-rjf3-w3v7 Plonky3 MultiField32Challenger: transcript malleability and challenge entropy loss CWE-1240
- CVE-2026-27017 uTLS is a fork of crypto/tls, created to customize ClientHello for fingerprinting… CWE-1240
- CVE-2025-62514 Parsec is a cloud-based application for cryptographically secure file sharing. CWE-1240
- CVE-2026-22705 RustCrypto: Signatures offers support for digital signatures, which provide… CWE-1240
- GHSA-848j-6mx2-7j84 Elliptic Uses a Cryptographic Primitive with a Risky Implementation CWE-1240