{"vulnerability": "cve-2026-7489", "sightings": [{"uuid": "245fc17e-ae9e-4a3a-bcb2-aad887486b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7489", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html", "content": "", "creation_timestamp": "2026-04-30T02:20:00.000000Z"}, {"uuid": "6dae1f2b-3f41-431b-9ab3-0fa96b66bb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74891", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtmki3fzgl2q", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74891. openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-k\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74891", "creation_timestamp": "2026-08-21T20:02:02.504729Z"}, {"uuid": "8d7eb3f4-4943-4027-82d6-2a9f0a8b2a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74891", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtoa2i5jux2x", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74891. openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-k\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74891", "creation_timestamp": "2026-08-22T12:00:47.888127Z"}, {"uuid": "058c5478-a68c-4164-932b-ed2626640bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74890", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo7q42kt2p", "content": "\ud83d\udea8 CVE-2026-74890 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74890\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:09:39.870374Z"}, {"uuid": "15456636-ec55-4d6c-9147-68e77a14f9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74894", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtboaancnv2j", "content": "\ud83d\udea8 CVE-2026-74894 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify_api_token functi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74894\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:09:57.182917Z"}, {"uuid": "91402096-837f-4039-8d7e-9e012f2002cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74895", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtboauu7st2b", "content": "\ud83d\udea8 CVE-2026-74895 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation m...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74895\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:10:19.426402Z"}, {"uuid": "7c86cc81-505a-4811-8fed-fc50e869b7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74899", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtboc6pfix2e", "content": "\ud83d\udea8 CVE-2026-74899 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74899\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:11:03.935641Z"}, {"uuid": "51d800d1-85b5-4470-a6a6-e447af8b7677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74896", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbobkf3yx25", "content": "\ud83d\udea8 CVE-2026-74896 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74896\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:10:40.787758Z"}, {"uuid": "5374e78b-8fe9-41f0-92b1-06bb8c082c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6sh3u5ltovdjh", "content": "CVE-2026-74899 - openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy\nCVE ID : CVE-2026-74899\n \n Published : Aug. 17, 2026, 11:16 a.m. | 56\u00a0minutes ago\n \n Description : openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExec...", "creation_timestamp": "2026-08-17T12:35:59.292914Z"}, {"uuid": "e35599e2-7859-420a-9b3d-7232638f6c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74896", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cjllc6nt5ulq6", "content": "CVE-2026-74896 - openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal\nCVE ID : CVE-2026-74896\n \n Published : Aug. 17, 2026, 11:16 a.m. | 56\u00a0minutes ago\n \n Description : openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the Da...", "creation_timestamp": "2026-08-17T12:41:59.569445Z"}, {"uuid": "f9b89545-de51-4507-857b-d43dde688037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74895", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5wvod3x3ygyvu", "content": "CVE-2026-74895 - openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation\nCVE ID : CVE-2026-74895\n \n Published : Aug. 17, 2026, 11:16 a.m. | 56\u00a0minutes ago\n \n Description : openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default ...", "creation_timestamp": "2026-08-17T12:48:05.168947Z"}, {"uuid": "a576fcfa-8423-4044-b53f-fce7dce9616d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74890", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcf5morgb2u", "content": "CVE-2026-74890 - openssl_encrypt\nOld versions of the OpenSSL Encrypt function in certain applications may allow attackers to tamper with encrypted data by setting a specific environment variable.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T19:00:05.496231Z"}, {"uuid": "0771973f-93b8-48c4-a63d-7de5f56ac239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74894", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcf5nyxfn2e", "content": "CVE-2026-74894 - openssl_encrypt\nOld versions of OpenSSL Encrypt allow attackers to pretend to be any user by providing a fake token. This could let attackers access or change data they shouldn't be\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T19:00:06.685780Z"}, {"uuid": "37d86d04-9e34-4a33-93ac-0c22167b7419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74895", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcfphumxz2b", "content": "CVE-2026-74895 - openssl_encrypt\nOld versions of the OpenSSL encryption plugin in certain software fail to properly isolate plugins, allowing malicious plugins to access sensitive areas of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T19:10:04.124770Z"}, {"uuid": "15ca2842-424d-4190-864c-a3f6e3a91d49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74896", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcfpjaokb2t", "content": "CVE-2026-74896 - openssl_encrypt\nVersions of OpenSSL before 1.4.0 have a security issue that could allow hackers to trick the software into executing commands on your system. This is a concern for\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T19:10:05.565406Z"}, {"uuid": "27f31d9b-f13b-4c98-8c8d-70393a2628d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74899", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcgbebhqu25", "content": "CVE-2026-74899 - openssl_encrypt\nOld versions of OpenSSL's encryption library can be exploited by attackers to access system functions and run arbitrary commands on a server. This is a concern for\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T19:20:04.454102Z"}, {"uuid": "66d6dd68-0e8a-4a5b-9037-31431c382bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74894", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtmxvgwnha2b", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74894. openssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify_api_token function that accepts any non-empty Bearer token string without validation. Attackers can up\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74894", "creation_timestamp": "2026-08-22T00:02:09.203170Z"}, {"uuid": "865d5ff5-4d53-470d-859a-77857a881b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74894", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtoniln2u425", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74894. openssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify_api_token function that accepts any non-empty Bearer token string without validation. Attackers can up\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74894", "creation_timestamp": "2026-08-22T16:01:20.111846Z"}, {"uuid": "bd56fb29-018e-4eaa-babd-7e2e84977a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74895", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtp2tv2a552x", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74895. openssl_encrypt versions before 1.4.0 fail to apply sandbox restrictions in the default process isolation mode for plugin execution. Attackers can execute malicious plugins with unrestricted ac\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74895", "creation_timestamp": "2026-08-22T20:00:18.172838Z"}, {"uuid": "3ba3b767-b89b-4b31-b654-3054ddd501fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74896", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtpidfb5ym2v", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74896. openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in the DangerousPatternVisitor AST analyzer that fails to detect dunder attribute traversal techniques. Attackers ca\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74896", "creation_timestamp": "2026-08-23T00:01:36.677335Z"}, {"uuid": "3d242f92-1671-40c5-8179-106be73d9fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74899", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtpvsuqcqy2j", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74899. openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74899", "creation_timestamp": "2026-08-23T04:02:54.828413Z"}]}