CVE-2004-2761: IETF MD5

Critical severity, CVSS 9.8. EPSS: 9.9% chance of exploitation in the next 30 days.

The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm of an X.509 certificate.

Affected products

• IETF MD5: affected versions not specified

Published 2009-01-05. Last modified 2026-06-16.