← Back

CVE-2025-45766

nvd nist
Published: Aug 6, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.0
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Exploitability: 2.2 / Impact: 4.7
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.

Affected (1)

Products: Pocoproject: Poco
Pocoproject
1 product
Poco
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Poco
Version 1.14.1

Related CWEs

CWE-327
Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.

References (3)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Product
Source: cve@mitre.org
Product

Timeline

No history available yet.