{"vulnerability": "cve-2026-8169", "sightings": [{"uuid": "ca952fd3-2227-4f05-b871-d19eb8af246e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81695", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muacwb5si72t", "content": "CVE-2026-81695\nVersions of the OpenSSL encrypt library before 1.4.9 can display attacker\u2011controlled text on the screen when a decryption fails. The malicious text can change how the terminal looks and mislead users into\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T16:40:03.008378Z"}, {"uuid": "c443cc7a-7157-40bf-893c-e9350bcc9562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81696", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muacwcpa4d2p", "content": "CVE-2026-81696\nVersions of OpenSSL Encrypt prior to 1.4.9 do not clean special characters in file metadata shown by the info command. This lets an attacker embed hidden codes that change what appears on the screen,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T16:40:04.468266Z"}, {"uuid": "935e839c-c0b8-4a01-b77e-621815d3a9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muadi74vtd2e", "content": "CVE-2026-81698\nVersions of the openssl_encrypt library released before 1.4.9 insert user\u2011provided information into a command line it shows on the screen without protecting it. If someone copies that displayed command into a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T16:50:04.864559Z"}, {"uuid": "0a7de300-1b0b-4392-bf50-8aa6ea5f5d80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8169", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr476wzvgh2i", "content": "CVE-2026-8169 - ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG\nCVE ID : CVE-2026-8169\n \n Published : July 20, 2026, 6:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-m...", "creation_timestamp": "2026-07-20T21:07:05.928266Z"}, {"uuid": "a600c3ff-c230-44c1-9818-32b73fcf5072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81694", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gxd2wg225", "content": "\ud83d\udea8 CVE-2026-81694 \u2014 CVSS 9.3 CRITICAL\n\nopenssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81694\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:08:54.557325Z"}, {"uuid": "4e9eb76c-9401-418a-9dfb-21c0ff59a4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81695", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gxkzsiw2u", "content": "\ud83d\udea8 CVE-2026-81695 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr du...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81695\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:09:04.253810Z"}, {"uuid": "f24ea5a8-7af1-4b33-8378-ba396a6ef15d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81696", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gxubun72p", "content": "\ud83d\udea8 CVE-2026-81696 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81696\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:09:12.847521Z"}, {"uuid": "37e2191a-aaa5-4b9b-9cd0-24df27841c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu3gy4ckbn24", "content": "\ud83d\udea8 CVE-2026-81698 \u2014 CVSS 9.3 CRITICAL\n\nopenssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconst...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-81698\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-27T18:09:38.514913Z"}, {"uuid": "7a957ae0-5b9b-48fd-83d2-34e3a512fbaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3jum3jyi27", "content": "\ud83d\udfe0 CVE-2026-81698 - High (7.5)\n\nopenssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81698/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T19:01:06.081318Z"}, {"uuid": "3450e8d2-5170-46ff-b361-0b64478973ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81699", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3jutedft2r", "content": "\ud83d\udfe0 CVE-2026-81699 - High (7.5)\n\nopenssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-81699/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-27T19:01:13.887653Z"}, {"uuid": "d9f0f99f-660c-495a-ae81-77fba5b240e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81695", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.358689Z"}, {"uuid": "fc028ff7-5c0b-44df-8eae-7a5c033e4612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81694", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.647415Z"}, {"uuid": "75b105b8-431f-48c8-92d3-7f42b63868cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.565227Z"}, {"uuid": "513df869-c877-4a09-9831-71038621ced4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81696", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117169103851890443", "content": "How about 15 sev:CRIT CVEs for openssl_encrypt? Sound cool? IDK, I'm not reading them. Have fun, nerds.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-81681https://nvd.nist.gov/vuln/detail/CVE-2026-81680https://nvd.nist.gov/vuln/detail/CVE-2026-81685https://nvd.nist.gov/vuln/detail/CVE-2026-81695https://nvd.nist.gov/vuln/detail/CVE-2026-81702https://nvd.nist.gov/vuln/detail/CVE-2026-81700https://nvd.nist.gov/vuln/detail/CVE-2026-81701https://nvd.nist.gov/vuln/detail/CVE-2026-81698https://nvd.nist.gov/vuln/detail/CVE-2026-81696https://nvd.nist.gov/vuln/detail/CVE-2026-81694https://nvd.nist.gov/vuln/detail/CVE-2026-81717https://nvd.nist.gov/vuln/detail/CVE-2026-81707https://nvd.nist.gov/vuln/detail/CVE-2026-81719https://nvd.nist.gov/vuln/detail/CVE-2026-81714https://nvd.nist.gov/vuln/detail/CVE-2026-81706", "creation_timestamp": "2026-08-27T19:24:01.607263Z"}, {"uuid": "5ecfd5f6-7762-4fc9-be68-ef71375e4396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81695", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu4y6xug4w2y", "content": "CVE-2026-81695 - openssl_encrypt\nVersions of OpenSSL prior to 1.4.9 may show attacker\u2011controlled text on the screen when automatically detecting the encryption key. A crafted encrypted file can cause\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#opensslencrypt #jahlives #CVE #infosec", "creation_timestamp": "2026-08-28T08:50:04.829723Z"}, {"uuid": "b60dc49d-5e3b-4bc5-8043-fc4b58265937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81696", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu54nyqtk62y", "content": "CVE-2026-81696\nVersions of OpenSSL Encrypt older than 1.4.9 do not clean special characters when showing file information. A crafted file can make the terminal display false verification data, potentially misleading users.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T10:10:04.065982Z"}, {"uuid": "53bf713c-9300-4d78-96dc-575b5950da7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu54o2dw2t23", "content": "CVE-2026-81698\nVersions of the openssl_encrypt tool older than 1.4.9 include a feature that shows a command-line example. If an attacker puts special text into the data\u2019s metadata, that example can contain commands that a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-28T10:10:05.480607Z"}, {"uuid": "e7b4738d-6166-4af3-9e64-04ecbe301254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81690", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mudm346vub2o", "content": "New HIGH CVE for OpenSSL: CVE-2026-81690\n\nopenssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the drive with rglob(), which in CPython does not desce\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-81690", "creation_timestamp": "2026-08-31T00:01:48.795567Z"}, {"uuid": "af5638ff-f9c7-49ab-b662-40bad667dc27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81691", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mudzng3ih72r", "content": "OpenSSL: CVE-2026-81691 [HIGH]\n\nopenssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and unconfigured hosts. Attackers on the network path can intercept cl\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81691", "creation_timestamp": "2026-08-31T04:04:41.918192Z"}, {"uuid": "390a08d1-a164-4bbb-8c93-c30875c74b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81692", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3muegwcnxux2o", "content": "CVE-2026-81692 [HIGH] OpenSSL\n\nopenssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples field of FLAC files before using it to size an allocation (np.random.randint(size=(total_samples,\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81692", "creation_timestamp": "2026-08-31T08:02:18.353487Z"}, {"uuid": "400c0271-13ec-4494-af36-204a0699931b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81693", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mueudrrgoe25", "content": "HIGH severity CVE just published in OpenSSL:\n\nCVE-2026-81693. openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR images with extremely large total values\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81693", "creation_timestamp": "2026-08-31T12:02:29.333260Z"}, {"uuid": "04c5e728-6d81-4750-a1e2-7e6a616d948b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mufbr2innp2q", "content": "New HIGH CVE for OpenSSL: CVE-2026-81698\n\nopenssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can c\u2026\n\nMore: nvd.nist.gov/vuln/detail/CVE-2026-81698", "creation_timestamp": "2026-08-31T16:02:33.285591Z"}, {"uuid": "eb24e617-cc70-49a2-abd9-e5c75c13e190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81699", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mufp45rg2u2r", "content": "OpenSSL: CVE-2026-81699 [HIGH]\n\nopenssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounded memory and CPU exhaustion during pre-authentication processing.\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-81699", "creation_timestamp": "2026-08-31T20:01:25.038302Z"}, {"uuid": "11721c99-77c9-4479-bbaf-5021b09d183f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81698", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muj62usqkq2f", "content": "\ud83d\udccc CVE-2026-81698 - openssl_encrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untruste... https://www.cyberhub.blog/cves/CVE-2026-81698", "creation_timestamp": "2026-09-02T05:07:07.230311Z"}, {"uuid": "c9b922ff-1e5b-42bf-bba6-23973ac394f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81695", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujd3tbnpo2v", "content": "\ud83d\udccc CVE-2026-81695 - openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr during decrypt auto-detection. Attackers can ... https://www.cyberhub.blog/cves/CVE-2026-81695", "creation_timestamp": "2026-09-02T06:37:07.448657Z"}, {"uuid": "f2b67389-4edc-4545-9da3-8772007e2a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81696", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mujerhlcvo2b", "content": "\ud83d\udccc CVE-2026-81696 - openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft m... https://www.cyberhub.blog/cves/CVE-2026-81696", "creation_timestamp": "2026-09-02T07:07:07.151742Z"}, {"uuid": "0390ac15-44b5-4235-829e-abd5a77234aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81693", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumkzrd47l2l", "content": "\ud83d\udccc CVE-2026-81693 - openssl_encrypt before 1.4.9 fails to validate the total field from QR JSON payloads before materializing ranges. Attackers can supply crafted QR imag... https://www.cyberhub.blog/cves/CVE-2026-81693", "creation_timestamp": "2026-09-03T13:37:07.810446Z"}, {"uuid": "c0be98e8-574a-4037-b4be-e234fb05a55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81690", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumoezosav2x", "content": "\ud83d\udccc CVE-2026-81690 - openssl-encrypt (pip package) before 1.4.9 contains a symlink-following flaw in its verify-usb v2 added-file allowlist scan. The scan enumerated the d... https://www.cyberhub.blog/cves/CVE-2026-81690", "creation_timestamp": "2026-09-03T14:37:06.692698Z"}, {"uuid": "c7ddd717-88e3-4626-b449-2ade0de3674b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81691", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mumq2ohfyg2f", "content": "\ud83d\udccc CVE-2026-81691 - openssl_encrypt versions before 1.4.9 fail to validate server URLs in login and register_with_email functions, accepting unencrypted http:// URLs and ... https://www.cyberhub.blog/cves/CVE-2026-81691", "creation_timestamp": "2026-09-03T15:07:09.718470Z"}, {"uuid": "ab77855b-2ce5-485c-99ab-732e0b100979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81694", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3munzxronfk2x", "content": "\ud83d\udccc CVE-2026-81694 - openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data (outside the AES-GCM authenticated manifes... https://www.cyberhub.blog/cves/CVE-2026-81694", "creation_timestamp": "2026-09-04T03:37:06.543918Z"}, {"uuid": "3f4138cc-056c-49c6-9de1-38be97514649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-81699", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muokqagmfe23", "content": "\ud83d\udccc CVE-2026-81699 - openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function costs in crafted files, allowing attackers to trigger unbounde... https://www.cyberhub.blog/cves/CVE-2026-81699", "creation_timestamp": "2026-09-04T08:37:06.971577Z"}]}