CVE-2026-74891

Kritik

Teknik Veri (Otomatik)

CVSS Skoru: 9.8
EPSS: 0.3%
CWE: CWE-798
KEV Durumu: Hayır

Yayım tarihi: 17 Ağustos 2026

Etkilenen: jahlives openssl_encrypt

openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data.

Referanslar

https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-v4vm-4xf2-fhqj
https://www.vulncheck.com/advisories/openssl-encrypt-before-hardcoded-database-credentials

NVD kaydı ↗CVE.org ↗

Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.