{"vulnerability": "cve-2026-74880", "sightings": [{"uuid": "6e09dca8-0e01-4668-b049-d4a9667d8ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtlccup23w2n", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T08:03:17.799178Z"}, {"uuid": "09d323e7-9b5a-433a-9ab8-08f4d65f0605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbo5ecwnl2p", "content": "\ud83d\udea8 CVE-2026-74880 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and teleme...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74880\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:08:20.377070Z"}, {"uuid": "22fb0357-43c1-4cd1-88a9-01296a287b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtjmnvifjp2t", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-20T16:03:05.867495Z"}, {"uuid": "86253f42-0330-4653-8d87-e6776c2d15a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcdhz5ina25", "content": "CVE-2026-74880 - openssl_encrypt\nOld versions of the OpenSSL Encrypt library in certain routes allow attackers to extract refresh tokens from server logs, potentially giving them unauthorized access.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T18:30:06.968093Z"}, {"uuid": "de775adc-2948-41aa-8c11-0454807e0c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtdg4lqyb52f", "content": "CVE-2026-74880 - openssl-encrypt\nOpenSSL's keyserver and telemetry servers accept refresh tokens in URLs, making them visible in server logs, browser history, and other places. This puts sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #pip #CVE #infosec", "creation_timestamp": "2026-08-18T04:50:04.295540Z"}, {"uuid": "a279fc94-179b-4984-8a7f-34dd7216a4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74880", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtkhk56rki25", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74880. openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74880", "creation_timestamp": "2026-08-21T00:04:10.916596Z"}]}