{"vulnerability": "CVE-2026-7490", "sightings": [{"uuid": "e4614a61-b844-4404-aae6-956898c0dc9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7490", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html", "content": "", "creation_timestamp": "2026-04-30T02:20:00.000000Z"}, {"uuid": "f64ccb56-1eec-487b-bc02-8c3fe2770ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74902", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mted6k6gqq2m", "content": "CVE-2026-74902 - siyuan\nSiYuan versions before 3.7.4 are affected by a security issue that allows attackers to upload files that can execute malicious code when a user interacts with them in the editor.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-18T13:30:07.952368Z"}, {"uuid": "d5b14059-65a5-4e45-bcfc-b26e6b4bf493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74902", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefawmtjc2t", "content": "\ud83d\udea8 CVE-2026-74902 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74902\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:07:15.670512Z"}, {"uuid": "8d18d765-4160-4732-b227-1cdcc48d8a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbociaww725", "content": "\ud83d\udea8 CVE-2026-74900 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation fa...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74900\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:11:12.167465Z"}, {"uuid": "a3db0bfc-29d9-4f0f-9025-68be4fd4f311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74901", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbocqolvy2f", "content": "\ud83d\udea8 CVE-2026-74901 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GC...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74901\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:11:21.161169Z"}, {"uuid": "c4041286-7a82-4bc0-b7a0-836bb9eff08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74901", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i5xvfncqfarns", "content": "CVE-2026-74901 - openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback\nCVE ID : CVE-2026-74901\n \n Published : Aug. 17, 2026, 11:16 a.m. | 56\u00a0minutes ago\n \n Description : openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in p...", "creation_timestamp": "2026-08-17T12:53:59.819756Z"}, {"uuid": "b523fb29-a2f7-4de1-90fd-ceedb5ea4336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4xbvc346d3ke4", "content": "CVE-2026-74900 - openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode\nCVE ID : CVE-2026-74900\n \n Published : Aug. 17, 2026, 11:16 a.m. | 56\u00a0minutes ago\n \n Description : openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KE...", "creation_timestamp": "2026-08-17T12:55:59.967904Z"}, {"uuid": "222dba05-c833-4b5e-ac88-adb77266be84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtbtqn42ra2c", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-74900](https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-p3gq-pcg9-q...\nhttps://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-p3gq-pcg9-qvfv #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-08-17T13:48:35.762153Z"}, {"uuid": "c23d1461-6fd9-4a56-9ecc-d21e9655e581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74901", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcgbfrcf624", "content": "CVE-2026-74901 - openssl_encrypt\nA security issue affects old versions of a popular encryption function used in some software. This means that attackers could modify data in transit without being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T19:20:05.728279Z"}, {"uuid": "2bdfddcb-c5e6-4d00-b676-ecbeab1fc95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcgtbtaed2t", "content": "CVE-2026-74900 - openssl_encrypt\nOld versions of OpenSSL's encryption feature can be tricked into using a weak secret. This allows attackers to decrypt data if they have a small part of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T19:30:06.710245Z"}, {"uuid": "ba418fb2-c287-4fb2-a901-35f2a8895671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtqd4z63tp2n", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74900. openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74900", "creation_timestamp": "2026-08-23T08:01:13.840550Z"}, {"uuid": "9a6ab41d-cd4d-40cd-b57d-6671218785f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74901", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtqqmvkhfl2t", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74901. openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74901", "creation_timestamp": "2026-08-23T12:02:45.362601Z"}]}