{"vulnerability": "cve-2026-8170", "sightings": [{"uuid": "6b7cb04b-610d-447a-9ba4-6e9fdd52642f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muaa4vrhty2m", "content": "CVE-2026-81701\nVersions of OpenSSL Encrypt older than 1.4.9 do not properly check the authenticity of add\u2011on modules, so an attacker could drop an unsigned plugin into the normal plugins folder and have it executed. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T15:50:04.683427Z"}, {"uuid": "412f3b14-cb2d-40c1-94d7-4898edfe0e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muadi7pxh52c", "content": "CVE-2026-81700\nVersions of OpenSSL Encrypt older than 1.4.9 can be fooled into trusting signatures that have been revoked or are no longer valid. This could let an attacker run malicious code disguised as a trusted plugin.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T16:50:07.089864Z"}, {"uuid": "3c288020-2479-4651-9fae-4693d5c61f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81706", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muae23knjt2t", "content": "CVE-2026-81706\nThe encryption feature in OpenSSL versions earlier than 1.4.9 can be tricked into using a false locking code. This lets an attacker replace the code that protects your files with one they control, so they can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T17:00:05.045978Z"}, {"uuid": "293bb496-af1e-4584-8f4e-f0dcf1b64375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3muao6eryv42j", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-81700. openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired keys by only checking VALIDSIG status without\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81700", "creation_timestamp": "2026-08-29T20:01:26.513685Z"}, {"uuid": "ef990a11-f32b-4c0f-a76c-271770f92828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu557vggik2y", "content": "CVE-2026-81701\nVersions of OpenSSL Encrypt older than 1.4.9 do not properly check plugins, so an attacker could add a fake plugin to the standard plugin folders and have it executed. This could let the attacker run any code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T10:20:04.707226Z"}, {"uuid": "aa102a0f-2090-44eb-9c62-bd320a5db23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81706", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu557wyo7q2e", "content": "CVE-2026-81706\nVersions of OpenSSL encrypt earlier than 1.4.9 can let a bad actor add hidden contact records that only appear after a user removes their own identity. When those hidden contacts appear they point to the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T10:20:06.441006Z"}, {"uuid": "1196011e-3661-4576-8927-4be985986531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8170", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mr3xvap66j2n", "content": "\u2694\ufe0f ATTACKS CVE Notify: \ud83d\udea8 [CVE-2026-8170](https://www.extremenetworks.com/support/policies/product-security)\nThe mv, cp, an...\nhttps://www.extremenetworks.com/support/policies/product-security #InfoSec #CyberAttack #ThreatIntel", "creation_timestamp": "2026-07-20T18:56:23.741419Z"}, {"uuid": "cb35394a-774d-4709-85c1-edc9b65fd45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8170", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr46fcysjj2q", "content": "CVE-2026-8170 - ExtremeXOS Privilege Escalation via Symlink Following in File Utilities\nCVE ID : CVE-2026-8170\n \n Published : July 20, 2026, 6:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environ...", "creation_timestamp": "2026-07-20T20:52:45.591017Z"}, {"uuid": "ae86450e-7c6a-468b-bbe4-82baa44aa094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyp7axf2b", "content": "\ud83d\udea8 CVE-2026-81701 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigne...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81701\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:09:44.600753Z"}, {"uuid": "13964d88-853f-4894-aea8-ffb6287f4eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyh2uwf2b", "content": "\ud83d\udea8 CVE-2026-81700 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_d...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81700\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:09:41.970448Z"}, {"uuid": "356b195b-3a76-472e-b79a-5786968364ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81702", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gyxtoht2e", "content": "\ud83d\udea8 CVE-2026-81702 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from iden...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81702\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:09:49.870530Z"}, {"uuid": "70910397-4f54-49f5-9702-6f7d09c27577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81706", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gza2b7k2t", "content": "\ud83d\udea8 CVE-2026-81706 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in I...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81706\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:09:58.489530Z"}, {"uuid": "8a702f8f-ff92-414e-84d3-777782840d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81707", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gzkv2c62u", "content": "\ud83d\udea8 CVE-2026-81707 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81707\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:10:09.861891Z"}, {"uuid": "c5b97d1f-26b3-4800-875a-ebfb7107572f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81707", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3juf2pf22l", "content": "\ud83d\udd34 CVE-2026-81707 - Critical (9.8)\n\nopenssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81707/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T19:00:58.231272Z"}, {"uuid": "7310d014-15a6-4856-a294-b2c9dc61af2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81707", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.750666Z"}, {"uuid": "3fb3b39c-adfc-4c7e-9fee-d18152d2d3a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81702", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.414281Z"}, {"uuid": "c4962fcb-b970-4cd4-aa82-0e41711ff7f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.469657Z"}, {"uuid": "d39e9f21-d123-4266-91af-c7622bab0726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.518882Z"}, {"uuid": "d47f139b-a2d4-4d8b-858a-b9cb578e739e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81706", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.933400Z"}, {"uuid": "3120af09-cf12-441e-b4ac-d3eb682ec854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3n7npreu2l", "content": "\ud83d\udd34 CVE-2026-81700 - Critical (9.8)\n\nopenssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runne...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81700/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T20:00:58.357186Z"}, {"uuid": "49f3cf8b-adf3-4210-adad-ed9bdc5b0feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3n7urqmn2u", "content": "\ud83d\udd34 CVE-2026-81701 - Critical (9.8)\n\nopenssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81701/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T20:01:05.340593Z"}, {"uuid": "c647b916-3792-4c06-a35b-2cb72a65ecd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81702", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3na43o5v27", "content": "\ud83d\udd34 CVE-2026-81702 - Critical (9.8)\n\nopenssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81702/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T20:01:13.392228Z"}, {"uuid": "210c47c5-5077-409c-92d5-29713984a66b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4y6zcesk2j", "content": "CVE-2026-81700 - openssl_encrypt\nVersions of OpenSSL Encrypt earlier than 1.4.9 can be tricked into accepting a digital signature that should be rejected because the signing key has been revoked or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-28T08:50:06.373903Z"}, {"uuid": "cd729d8c-4de9-4528-b4a5-444d8f6aaaa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mub3kwvdn725", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-81701. openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories and unknown subdirectories to bypass signa\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81701", "creation_timestamp": "2026-08-30T00:01:07.146373Z"}, {"uuid": "43b65a90-fb34-4781-a437-0b3be06b1c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81702", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mubj32q3dg2o", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-81702. openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute public keys in identity stores. Attackers\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81702", "creation_timestamp": "2026-08-30T04:02:46.153923Z"}, {"uuid": "4e81d7f5-6df4-40ca-8789-1c3f9d77514c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81707", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mubwffhxl725", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-81707. openssl_encrypt before 1.4.9 fails to sanitize the email field of imported identity documents, allowing attackers to inject ANSI escape sequences that forge the fingerprint verification line di\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81707", "creation_timestamp": "2026-08-30T08:01:12.641447Z"}, {"uuid": "f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mugk4ncenb2s", "content": "CVE-2026-81704 [HIGH] OpenSSL\n\nopenssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline passwor\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81704", "creation_timestamp": "2026-09-01T04:04:51.599641Z"}, {"uuid": "aab005fe-0d55-4c09-b70f-5eb7ed60c9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81705", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mugxfesjqz2s", "content": "HIGH severity CVE just published in OpenSSL:\n\nCVE-2026-81705. openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81705", "creation_timestamp": "2026-09-01T08:02:23.735149Z"}, {"uuid": "b5c59a48-021e-4de7-99c1-93965b53dbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81706", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj4famslz2f", "content": "\ud83d\udccc CVE-2026-81706 - openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create ... https://www.cyberhub.blog/cves/CVE-2026-81706", "creation_timestamp": "2026-09-02T04:37:07.712835Z"}, {"uuid": "e6280a60-7f18-4d5e-afe5-ef81d6f15aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81700", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj7qjzqbm23", "content": "\ud83d\udccc CVE-2026-81700 - openssl_encrypt versions before 1.4.9 contain a signature verification vulnerability in gpg_runner.verify_detached that accepts revoked and expired ke... https://www.cyberhub.blog/cves/CVE-2026-81700", "creation_timestamp": "2026-09-02T05:37:08.320181Z"}, {"uuid": "bce44651-ca38-4719-be8c-a83f7ab44250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81701", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujbg6cpvp2x", "content": "\ud83d\udccc CVE-2026-81701 - openssl_encrypt versions before 1.4.9 use a denylist to identify trusted built-in plugins, allowing unsigned plugins in top-level plugins/ directories... https://www.cyberhub.blog/cves/CVE-2026-81701", "creation_timestamp": "2026-09-02T06:07:07.410527Z"}, {"uuid": "e4543f1b-314d-4020-8542-c724ac56cc70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81705", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujn5ovuzb2f", "content": "\ud83d\udccc CVE-2026-81705 - openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellin... https://www.cyberhub.blog/cves/CVE-2026-81705", "creation_timestamp": "2026-09-02T09:37:07.676832Z"}, {"uuid": "e7d9ae6b-acca-4892-b71b-095630a17cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81703", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujotdozev2l", "content": "\ud83d\udccc CVE-2026-81703 - openssl_encrypt versions before 1.4.9 fail to validate encryption status of embedded post-quantum private keys in file metadata. Attackers can craft f... https://www.cyberhub.blog/cves/CVE-2026-81703", "creation_timestamp": "2026-09-02T10:07:07.379041Z"}, {"uuid": "bbe2a753-5813-4617-86a6-9cbc3a1a1e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81702", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3munyc54rji2l", "content": "\ud83d\udccc CVE-2026-81702 - openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading identities from identity.json, allowing attackers to substitute... https://www.cyberhub.blog/cves/CVE-2026-81702", "creation_timestamp": "2026-09-04T03:07:07.645196Z"}, {"uuid": "3c3994ad-8cd0-4779-9b6b-6b1f2794b0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muomfv225223", "content": "\ud83d\udccc CVE-2026-81704 - openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched... https://www.cyberhub.blog/cves/CVE-2026-81704", "creation_timestamp": "2026-09-04T09:07:08.132665Z"}, {"uuid": "3f2274e1-0075-488b-8317-95c74cf4becb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3muomfwb6ip2l", "content": "\ud83d\udccc CVE-2026-81704 - openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched... https://www.potatohub.blog/cves/CVE-2026-81704", "creation_timestamp": "2026-09-04T09:07:08.718769Z"}]}