CVE-2026-74877

creationtimestamp| type| source ---|---|--- 2026-08-18 04:40:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtdfkp6uiu23 2026-08-23 20:00:47+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mtrldopdh32v...

CVE-2026-74877

opensslencrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revokekey method that allows authenticated clients to revoke any other client's key. Attackers can revoke arbitrary keys by providing a valid ML-DSA signature, bypassing the intended ownership...