{"vulnerability": "cve-2026-7487", "sightings": [{"uuid": "48c6fcc8-de74-41ae-af3d-2c78d7f4a160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtirslzue22b", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74876. openssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without verifying signatures. Attackers can call from_d\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74876", "creation_timestamp": "2026-08-20T08:02:33.276231Z"}, {"uuid": "030b60cb-e3b1-4ea9-bf4c-1372144f07d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtkv234zho2t", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74878. openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute aut\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74878", "creation_timestamp": "2026-08-21T04:05:44.550866Z"}, {"uuid": "c44d9053-255d-4183-8e50-a5004f7a3fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtj7bextcp2q", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74878. openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute aut\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74878", "creation_timestamp": "2026-08-20T12:03:27.077625Z"}, {"uuid": "7046791d-3de3-47cd-98e2-ab9c694c92b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74875", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo4gowcm2m", "content": "\ud83d\udea8 CVE-2026-74875 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is n...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74875\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:07:49.094243Z"}, {"uuid": "68032c0f-23e2-4693-a3ba-dd976c7bbf21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74872", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo44i3ol2b", "content": "\ud83d\udea8 CVE-2026-74872 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool ha...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74872\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:07:38.442501Z"}, {"uuid": "3151e626-aaf3-47e9-9f4c-d12919935952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo4tfpct2p", "content": "\ud83d\udea8 CVE-2026-74876 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates k...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74876\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:09.583360Z"}, {"uuid": "84406ac2-6a42-4bb6-a20e-da7e1bc9efe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo53pk4n2j", "content": "\ud83d\udea8 CVE-2026-74878 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74878\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:11.803924Z"}, {"uuid": "53c744d1-983a-48f6-ba4a-4669210a7561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtbxugdhwh2l", "content": "CVE-2026-74876 - Critical crypto flaw in openssl_encrypt <1.4.0. Unverified key bundles allow secret leakage via attacker-controlled keys. CVSS 9.8. Unpatched - update immediately. #CVE #infosec #cryptography\n\nhttps://www.valtersit.com/cve/CVE-2026-74876/", "creation_timestamp": "2026-08-17T15:02:17.822948Z"}, {"uuid": "416f68d9-5cb3-42cf-bae2-49c6e20bcbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117111451661196847", "content": "CVE-2026-74876 - Critical crypto flaw in openssl_encrypt <1.4.0. Unverified key bundles allow secret leakage via attacker-controlled keys. CVSS 9.8. Unpatched - update immediately. #CVE #infosec #cryptography\nhttps://www.valtersit.com/cve/CVE-2026-74876/", "creation_timestamp": "2026-08-17T15:03:37.770214Z"}, {"uuid": "d5d21f50-af4e-4d6b-a292-2b1f95425f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74872", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcce7z3bd2j", "content": "CVE-2026-74872 - openssl_encrypt\nA vulnerability in OpenSSL's encryption function allows attackers to execute malicious code. This affects older versions of the OpenSSL library, which is used in many\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:10:15.340898Z"}, {"uuid": "484ec5dd-a0a3-409a-b6ec-51c4bac7d9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74875", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtccw2xbwf25", "content": "CVE-2026-74875 - openssl_encrypt\nOld versions of OpenSSL Encrypt do not check data formats as expected, which can lead to processing malicious data. This is a concern because it allows attackers to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:20:04.247263Z"}, {"uuid": "3c6161f6-e4a2-4263-86c4-e6e39b56d987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtccw4hl7d2e", "content": "CVE-2026-74876 - openssl_encrypt\nOld versions of OpenSSL allow attackers to encrypt data using their own public keys, potentially exposing sensitive information. This affects users who rely on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:20:05.953941Z"}, {"uuid": "e2c471ab-5a42-4aa4-a97f-744b1e494fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcdhxaq7b25", "content": "CVE-2026-74878 - openssl_encrypt\nOld versions of OpenSSL do not share a rate limiter across servers, making it easier for attackers to try many TOTP codes quickly. This can be exploited by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:30:04.431893Z"}, {"uuid": "75bca771-73be-4717-954a-36a602e7dcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtjzz23r242j", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74878. openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on server restart. Attackers can distribute aut\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74878", "creation_timestamp": "2026-08-20T20:01:58.193372Z"}, {"uuid": "6a132a07-8406-45eb-9327-83019df814f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74875", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdegyet4e2p", "content": "CVE-2026-74875 - openssl-encrypt\nA security issue in OpenSSL Encrypt allows an attacker to bypass schema validation if the jsonschema library is not installed or if metadata has an unknown format version.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:20:05.339226Z"}, {"uuid": "bdb5473b-a5fa-4d6b-9d69-c37c8ad0c6f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74876", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdeyukz7t2m", "content": "CVE-2026-74876 - openssl-encrypt\nA recent OpenSSL update fixes a security issue where encryption keys are not properly verified before use. This could allow an attacker to steal sensitive information. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:30:05.270779Z"}, {"uuid": "9aa6262b-ff66-431b-9963-16dba98224eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74877", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdfkp6uiu23", "content": "CVE-2026-74877 - openssl-encrypt\nAny client can revoke another client's key, potentially disrupting communication. This can happen because the OpenSSL software doesn't check who is trying to revoke a key\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:40:03.977288Z"}, {"uuid": "07742d85-a19b-4c87-bdad-f0bfff2125d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdfkqhthf25", "content": "CVE-2026-74878 - openssl-encrypt\nThe OpenSSL TOTP rate limiter doesn't share its state across multiple workers or save its state when the server restarts, making it vulnerable to brute-force attacks. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:40:04.850792Z"}, {"uuid": "c2edce49-efd8-4ceb-bbb5-c68e2783719a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74872", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mthwzxjjfv2v", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74872. openssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74872", "creation_timestamp": "2026-08-20T00:03:28.288794Z"}, {"uuid": "2eb009ae-77da-4d2f-87fc-08768472d652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74875", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtienckmqf25", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74875. openssl_encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jso\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74875", "creation_timestamp": "2026-08-20T04:06:56.516454Z"}, {"uuid": "8e22fd00-2ee3-4a63-85fd-69360d695f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7487", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtydkmt2jf26", "content": "\ud83d\udd17 CVE : CVE-2025-10903, CVE-2026-15387, CVE-2026-18252, CVE-2026-3035, CVE-2026-4398, CVE-2026-7487, CVE-2026-77801", "creation_timestamp": "2026-08-26T12:30:08.556315Z"}, {"uuid": "c7e025e1-d756-42c5-a8f8-dd5311b8afde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74874", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtr5wvahku2p", "content": "CVE-2026-74874 [HIGH] OpenSSL\n\nopenssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate_pseudorandom_sequence function. Attackers who know the password can recover the Mer\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74874", "creation_timestamp": "2026-08-23T16:00:59.065587Z"}, {"uuid": "48ad064d-5c50-4c38-a8b4-a5bcfecca47d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74877", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtrldopdh32v", "content": "HIGH severity CVE just published in OpenSSL:\n\nCVE-2026-74877. openssl_encrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revoke_key method that allows authenticated clients to revoke any other client's key.\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74877", "creation_timestamp": "2026-08-23T20:00:47.183466Z"}]}