{"vulnerability": "CVE-2026-81714", "sightings": [{"uuid": "cfd15079-a0cf-4bf5-bc94-b654e7b132af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81714", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muae255ggp2y", "content": "CVE-2026-81714\nVersions of the openssl-encrypt package up to 1.4.8 may accept a short, easily forged key identifier when adding a trusted signing key. This can let an attacker\u2019s key be mistakenly marked as trusted, allowing\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T17:00:06.476835Z"}, {"uuid": "287c2e88-dec9-48de-8351-3ad1de5b8a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81714", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu55rrxvwj25", "content": "CVE-2026-81714\nVersions of the Python package openssl-encrypt up to 1.4.8 can be tricked into accepting a short, easily forged GPG key identifier as a trusted signing key. This could let an attacker\u2019s key be approved and used\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T10:30:05.087533Z"}, {"uuid": "556147cc-9017-4784-bf65-9a6574d4c7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81714", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gzspxyl2c", "content": "\ud83d\udea8 CVE-2026-81714 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81714\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:10:18.285114Z"}, {"uuid": "2523aca6-de39-46eb-b95b-6bfa7bcad7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81714", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.842799Z"}, {"uuid": "e2cfd5ce-02c5-4466-a385-16348355744b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81714", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3muhesig4q22r", "content": "New HIGH CVE for OpenSSL: CVE-2026-81714\n\nopenssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing trust anchor. An operator who confirms a short (forg\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-81714", "creation_timestamp": "2026-09-01T12:02:22.391775Z"}, {"uuid": "14c19e2f-49a4-4487-a47f-e47ba97ad508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81714", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3multkqg7ru2w", "content": "\ud83d\udccc CVE-2026-81714 - openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing tr... https://www.cyberhub.blog/cves/CVE-2026-81714", "creation_timestamp": "2026-09-03T06:37:07.081930Z"}]}