{"vulnerability": "cve-2026-81704", "sightings": [{"uuid": "f2ffb5f1-f8b8-4dc7-b75c-d8c6d07ee7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81704", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mugk4ncenb2s", "content": "CVE-2026-81704 [HIGH] OpenSSL\n\nopenssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the D-Bus CryptoService.EncryptFile handler that uses unstretched SHA-256 instead of Argon2id. Attackers can perform offline passwor\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81704", "creation_timestamp": "2026-09-01T04:04:51.599641Z"}]}