CVE-2026-74890

creationtimestamp| type| source ---|---|--- 2026-08-17 12:09:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo7q42kt2p 2026-08-17 19:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcf5morgb2u...

CVE-2026-74890

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

CVE-2026-74890 openssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...