{"vulnerability": "CVE-2026-74877", "sightings": [{"uuid": "9aa6262b-ff66-431b-9963-16dba98224eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74877", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdfkp6uiu23", "content": "CVE-2026-74877 - openssl-encrypt\nAny client can revoke another client's key, potentially disrupting communication. This can happen because the OpenSSL software doesn't check who is trying to revoke a key\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:40:03.977288Z"}, {"uuid": "48ad064d-5c50-4c38-a8b4-a5bcfecca47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74877", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtrldopdh32v", "content": "HIGH severity CVE just published in OpenSSL:\n\nCVE-2026-74877. openssl_encrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revoke_key method that allows authenticated clients to revoke any other client's key.\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74877", "creation_timestamp": "2026-08-23T20:00:47.183466Z"}]}