CVE-2023-2884: Cbot Core

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG), Use of Insufficiently Random Values vulnerability in CBOT Chatbot allows Signature Spoofing by Key Recreation. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected products

• Cbot Cbot Core: before 4.0.3.4 (fixed in 4.0.3.4)
• Cbot Cbot Panel: before 4.0.3.7 (fixed in 4.0.3.7)

Published 2023-05-25. Last modified 2026-06-17.