Cyber Resilience

CWE · MITRE source

CWE-323Reusing a Nonce, Key Pair in Encryption

Abstraction: Base · CVEs in our corpus: 44

Nonces should be used for the present occasion and only once.

Last updated: 20 August 2026 13:14 UTC

OWASP Top 10 for Web (2025)

This weakness contributes to A04:2025 Cryptographic Failures.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-06
  • SC-13 Cryptographic Protection
  • SA-11 Developer Testing and Evaluation
  • SA-8 Security and Privacy Engineering Principles
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)
  • V6.8.3
  • V11.3.4

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2017-7902 7.79.80.02562017-06-30
CVE-2026-499527.49.10.04192026-06-15
CVE-2026-122056.89.10.00292026-06-15
CVE-2026-59099 6.89.10.00362026-07-02
CVE-2017-13082 6.78.10.04572017-10-17
CVE-2025-64767 6.79.10.00212025-11-21
CVE-2022-24401 6.58.80.00342023-10-19
CVE-2026-3559 6.18.10.00402026-03-16
CVE-2026-259985.87.50.00312026-02-19
CVE-2017-13084 5.76.80.02212017-10-17
CVE-2017-13086 5.66.80.02052017-10-17
CVE-2025-47345 5.68.40.00072026-01-07
CVE-2026-505775.67.40.00312026-08-18
CVE-2025-59870 5.57.40.00242026-01-16
CVE-2026-559675.57.50.00112026-06-25
CVE-2019-7593 5.46.80.00822019-08-20
CVE-2020-1759 5.36.40.01582020-04-13
CVE-2023-37467 5.26.80.00372023-07-28
CVE-2023-4680 5.26.80.00372023-09-15
CVE-2023-28997 5.16.70.01112023-04-04
CVE-2023-7003 5.16.80.00282024-03-15
CVE-2022-37660 5.16.50.00372025-02-11
CVE-2025-46632 5.16.50.00302025-05-01
CVE-2021-32791 5.05.90.01502021-07-26
CVE-2026-213835.07.10.00072026-07-06