CVE-2026-74876Critical· 9.8▾ Midnightopenssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without verifying signatures. Attackers can call from_dict() followed by to_identity() without sign…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Aug 18.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
0.2% → 0.3%
— → 9.8
medium → critical
Last analysed / modified upstream
openssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without verifying signatures. Attackers can call from_dict() followed by to_identity() without signature verification to encrypt data using attacker-controlled public keys, leaking secrets.
openssl_encrypt < 1.4.0Upgrade past the affected range:
openssl_encrypt 1.4.0Affected packages:
openssl-encrypt < 1.4.0Patched in:
openssl-encrypt 1.4.0Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-81680Medium· 4.0openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal
CVE-2026-81717Low· 3.5openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
CVE-2026-81714High· 7.0openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass
CVE-2026-81701Critical· 9.8openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin
CVE-2026-81700Critical· 9.8openssl_encrypt before 1.4.9 GPG Signature Verification Bypass
CVE-2026-74901Critical· 9.8openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback