{"vulnerability": "cve-2026-7488", "sightings": [{"uuid": "903eb124-5702-43b3-bbb9-f1035e603ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74886", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtnff7atrt2x", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74886. openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set.\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74886", "creation_timestamp": "2026-08-22T04:03:36.752841Z"}, {"uuid": "6e09dca8-0e01-4668-b049-d4a9667d8ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtlccup23w2n", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T08:03:17.799178Z"}, {"uuid": "9124e28d-e36c-45cf-8bed-84f0b9bcf03d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74887", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo75g7bn2j", "content": "\ud83d\udea8 CVE-2026-74887 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt before 1.4.0 imports Python's non-cryptographic 'random' module (Mersenne Twister PRNG) at ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74887\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:09:20.077900Z"}, {"uuid": "09d323e7-9b5a-433a-9ab8-08f4d65f0605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo5ecwnl2p", "content": "\ud83d\udea8 CVE-2026-74880 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and teleme...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74880\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:20.377070Z"}, {"uuid": "904c6d02-e0e9-40bc-8980-bf1e8648eaa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74885", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo64gbaf2j", "content": "\ud83d\udea8 CVE-2026-74885 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain a logging bug in restore_hidden_modules() that logs module co...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74885\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:45.583191Z"}, {"uuid": "92a9bf05-3433-4591-b0d4-64740eb7c8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74886", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo6ubuuc2u", "content": "\ud83d\udea8 CVE-2026-74886 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportG...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74886\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:09:10.651582Z"}, {"uuid": "8cce8bdc-981c-4234-8d89-00de902c453a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74889", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo7frpbx2t", "content": "\ud83d\udea8 CVE-2026-74889 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74889\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:09:28.862578Z"}, {"uuid": "079775b5-5823-4abe-9b98-c868c7b754f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74889", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtnsnvrmah2s", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74889. openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predicta\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74889", "creation_timestamp": "2026-08-22T08:01:07.528857Z"}, {"uuid": "22fb0357-43c1-4cd1-88a9-01296a287b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtjmnvifjp2t", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-20T16:03:05.867495Z"}, {"uuid": "86253f42-0330-4653-8d87-e6776c2d15a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcdhz5ina25", "content": "CVE-2026-74880 - openssl_encrypt\nOld versions of the OpenSSL Encrypt library in certain routes allow attackers to extract refresh tokens from server logs, potentially giving them unauthorized access.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:30:06.968093Z"}, {"uuid": "cbd876b4-f61e-4832-ac83-9b2cde8edea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74885", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcdzt6zi52p", "content": "CVE-2026-74885 - openssl_encrypt\nA bug in OpenSSL's encryption function affects logging and security in versions before 1.4.0. This could lead to inaccurate audit trails and potential security\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:40:04.157520Z"}, {"uuid": "fa0eed40-4a38-4105-85c5-366323a29a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74886", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcdzujxzl2u", "content": "CVE-2026-74886 - openssl_encrypt\nOld versions of OpenSSL's encryption plugin are vulnerable to attacks that allow malicious code to run. This is a security risk because attackers can bypass security\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:40:05.333805Z"}, {"uuid": "1fd3f12d-3f42-4ee3-b8b7-27993e0f23dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74886", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtlpp3n4cg2x", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74886. openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set.\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74886", "creation_timestamp": "2026-08-21T12:02:46.385105Z"}, {"uuid": "d859b3bb-1e61-4764-87e6-925082278d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74887", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcelpsinc25", "content": "CVE-2026-74887 - openssl_encrypt\nOpenSSL's encryption module before version 1.4.0 uses a non-secure random number generator. This could potentially lead to predictable numbers being generated in the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:50:05.016839Z"}, {"uuid": "4bdecc11-2cb5-4d55-963f-529d2a08c395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74889", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcelr3j5c25", "content": "CVE-2026-74889 - openssl_encrypt\nOpenSSL encryption versions before 1.4.0 have a weakness that can be exploited by attackers. This means that if an attacker knows how the encryption keys are\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:50:06.095954Z"}, {"uuid": "b744b612-2e99-4f41-8aac-1090806fb0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74889", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtczbzbnrb2l", "content": "CVE-2026-74889 - Critical crypto weakness in openssl_encrypt <1.4.0. HKDF with no salt/static info weakens key derivation, enabling multi-target attacks. CVSS 9.8. Update immediately. #CVE #cryptography #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-74889/", "creation_timestamp": "2026-08-18T01:00:27.532530Z"}, {"uuid": "42ccda1f-b483-4e76-9442-f0d3531f2310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74889", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtm52dzdlz2q", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74889. openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and determinism. Attackers can exploit predicta\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74889", "creation_timestamp": "2026-08-21T16:01:42.825858Z"}, {"uuid": "de775adc-2948-41aa-8c11-0454807e0c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdg4lqyb52f", "content": "CVE-2026-74880 - openssl-encrypt\nOpenSSL's keyserver and telemetry servers accept refresh tokens in URLs, making them visible in server logs, browser history, and other places. This puts sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:50:04.295540Z"}, {"uuid": "a279fc94-179b-4984-8a7f-34dd7216a4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtkhk56rki25", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T00:04:10.916596Z"}, {"uuid": "8745fff5-475e-4b0b-b287-278957b5b157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7488", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqtwx7rdsf24", "content": "CVE-2026-7488 - Sensitive Data Exposure in IKAS Technologies' E-Commerce\nCVE ID : CVE-2026-7488\n \n Published : July 17, 2026, 1:07 p.m. | 29\u00a0minutes ago\n \n Description : Insertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerce allows R...", "creation_timestamp": "2026-07-17T14:18:26.910591Z"}, {"uuid": "beed38a8-b441-4ce6-8de0-2cc2b0dbf0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7488", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqymt5k3yy2l", "content": "\ud83d\udfe0 CVE-2026-7488 - High (7.5)\n\nInsertion of sensitive information into sent data vulnerability in IKAS Technology Inc. E-Commerc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-7488/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T11:00:24.157754Z"}, {"uuid": "9a66c77a-b270-4d8d-81ff-56de852c0048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74884", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtsrwtbp6o2j", "content": "HIGH severity CVE just published in OpenSSL:\n\nCVE-2026-74884. openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitized before constructing the plugin con\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74884", "creation_timestamp": "2026-08-24T07:31:31.844549Z"}, {"uuid": "b6b26d56-464f-4c30-b0d9-9e50345a2d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74888", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtstnqzyxz2x", "content": "New HIGH CVE for OpenSSL: CVE-2026-74888\n\nopenssl_encrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KDF whose security properties have not been formally\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-74888", "creation_timestamp": "2026-08-24T08:02:15.114807Z"}]}