CVE-2026-34871

ADVISORY - nist

Summary

An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number Generator (PRNG).

EPSS Score⁠: 0.00192 (0.090)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-338⁠

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Impacted images

Advisories

NIST

CREATED

3 months ago

UPDATED

1 month ago

ADVISORY IDCVE-2026-34871⁠

EXPLOITABILITY SCORE

1.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-338⁠

CVSS SCORE

6.7medium

Debian

CREATED

3 months ago

UPDATED

1 month ago

ADVISORY IDCVE-2026-34871⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

3 months ago

UPDATED

3 months ago

ADVISORY IDCVE-2026-34871⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium