{"vulnerability": "cve-2026-7490", "sightings": [{"uuid": "e4614a61-b844-4404-aae6-956898c0dc9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7490", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10895-25ca1-2.html", "content": "", "creation_timestamp": "2026-04-30T02:20:00.000000Z"}, {"uuid": "f64ccb56-1eec-487b-bc02-8c3fe2770ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74902", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mted6k6gqq2m", "content": "CVE-2026-74902 - siyuan\nSiYuan versions before 3.7.4 are affected by a security issue that allows attackers to upload files that can execute malicious code when a user interacts with them in the editor.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-18T13:30:07.952368Z"}, {"uuid": "d5b14059-65a5-4e45-bcfc-b26e6b4bf493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74902", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtefawmtjc2t", "content": "\ud83d\udea8 CVE-2026-74902 \u2014 CVSS 9.3 CRITICAL\n\nSiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file upload validation flow that ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74902\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T14:07:15.670512Z"}, {"uuid": "8d18d765-4160-4732-b227-1cdcc48d8a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbociaww725", "content": "\ud83d\udea8 CVE-2026-74900 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation fa...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74900\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:11:12.167465Z"}, {"uuid": "a3db0bfc-29d9-4f0f-9025-68be4fd4f311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74901", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtbocqolvy2f", "content": "\ud83d\udea8 CVE-2026-74901 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GC...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74901\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-17T12:11:21.161169Z"}, {"uuid": "c4041286-7a82-4bc0-b7a0-836bb9eff08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74901", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/i5xvfncqfarns", "content": "CVE-2026-74901 - openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback\nCVE ID : CVE-2026-74901\n \n Published : Aug. 17, 2026, 11:16 a.m. | 56\u00a0minutes ago\n \n Description : openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in p...", "creation_timestamp": "2026-08-17T12:53:59.819756Z"}, {"uuid": "b523fb29-a2f7-4de1-90fd-ceedb5ea4336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4xbvc346d3ke4", "content": "CVE-2026-74900 - openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode\nCVE ID : CVE-2026-74900\n \n Published : Aug. 17, 2026, 11:16 a.m. | 56\u00a0minutes ago\n \n Description : openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KE...", "creation_timestamp": "2026-08-17T12:55:59.967904Z"}, {"uuid": "222dba05-c833-4b5e-ac88-adb77266be84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mtbtqn42ra2c", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-74900](https://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-p3gq-pcg9-q...\nhttps://github.com/jahlives/openssl_encrypt/security/advisories/GHSA-p3gq-pcg9-qvfv #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-08-17T13:48:35.762153Z"}, {"uuid": "c23d1461-6fd9-4a56-9ecc-d21e9655e581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74901", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcgbfrcf624", "content": "CVE-2026-74901 - openssl_encrypt\nA security issue affects old versions of a popular encryption function used in some software. This means that attackers could modify data in transit without being\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T19:20:05.728279Z"}, {"uuid": "2bdfddcb-c5e6-4d00-b676-ecbeab1fc95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtcgtbtaed2t", "content": "CVE-2026-74900 - openssl_encrypt\nOld versions of OpenSSL's encryption feature can be tricked into using a weak secret. This allows attackers to decrypt data if they have a small part of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-17T19:30:06.710245Z"}, {"uuid": "ba418fb2-c287-4fb2-a901-35f2a8895671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74900", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtqd4z63tp2n", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74900. openssl_encrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74900", "creation_timestamp": "2026-08-23T08:01:13.840550Z"}, {"uuid": "9a6ab41d-cd4d-40cd-b57d-6671218785f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74901", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mtqqmvkhfl2t", "content": "Critical CVE landed today in OpenSSL:\n\nCVE-2026-74901. openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in pqc.py where AES-GCM decryption failures trigger fallback to unauthenticated AES-CTR mode. Attackers can\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-74901", "creation_timestamp": "2026-08-23T12:02:45.362601Z"}, {"uuid": "b4fe40b0-3b9a-41b4-a617-717c0087430d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7490", "type": "seen", "source": "https://t.me/shimiscyberworld/1131", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7490 \u2014 CVSS 7.2\nSunnet CTMS/CPAS Arbitrary File Upload Allows RCE\n\nCVE-2026-7490 \u2014 CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #code_execution\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7490 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:19.840744Z"}, {"uuid": "b2fcd441-1f5b-4436-abcf-60ad898fdd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7490", "type": "seen", "source": "https://t.me/shimiscyberworld/1131", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-7490 \u2014 CVSS 7.2\nSunnet CTMS/CPAS Arbitrary File Upload Allows RCE\n\nCVE-2026-7490 \u2014 CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #code_execution\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-7490 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:08.708675Z"}]}