{"vulnerability": "CVE-2026-74876", "sightings": [{"uuid": "48c6fcc8-de74-41ae-af3d-2c78d7f4a160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtirslzue22b", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74876. openssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without verifying signatures. Attackers can call from_d\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74876", "creation_timestamp": "2026-08-20T08:02:33.276231Z"}, {"uuid": "3151e626-aaf3-47e9-9f4c-d12919935952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo4tfpct2p", "content": "\ud83d\udea8 CVE-2026-74876 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates k...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74876\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:09.583360Z"}, {"uuid": "53c744d1-983a-48f6-ba4a-4669210a7561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtbxugdhwh2l", "content": "CVE-2026-74876 - Critical crypto flaw in openssl_encrypt <1.4.0. Unverified key bundles allow secret leakage via attacker-controlled keys. CVSS 9.8. Unpatched - update immediately. #CVE #infosec #cryptography\n\nhttps://www.valtersit.com/cve/CVE-2026-74876/", "creation_timestamp": "2026-08-17T15:02:17.822948Z"}, {"uuid": "416f68d9-5cb3-42cf-bae2-49c6e20bcbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117111451661196847", "content": "CVE-2026-74876 - Critical crypto flaw in openssl_encrypt <1.4.0. Unverified key bundles allow secret leakage via attacker-controlled keys. CVSS 9.8. Unpatched - update immediately. #CVE #infosec #cryptography\nhttps://www.valtersit.com/cve/CVE-2026-74876/", "creation_timestamp": "2026-08-17T15:03:37.770214Z"}, {"uuid": "3c6161f6-e4a2-4263-86c4-e6e39b56d987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtccw4hl7d2e", "content": "CVE-2026-74876 - openssl_encrypt\nOld versions of OpenSSL allow attackers to encrypt data using their own public keys, potentially exposing sensitive information. This affects users who rely on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:20:05.953941Z"}, {"uuid": "bdb5473b-a5fa-4d6b-9d69-c37c8ad0c6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdeyukz7t2m", "content": "CVE-2026-74876 - openssl-encrypt\nA recent OpenSSL update fixes a security issue where encryption keys are not properly verified before use. This could allow an attacker to steal sensitive information. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:30:05.270779Z"}]}