CVE-2026-74900

creationtimestamp| type| source ---|---|--- 2026-08-17 12:11:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbociaww725 2026-08-17 12:55:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4xbvc346d3ke4 2026-08-17 13:48:35+00:00| seen|...

CVE-2026-74900 openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode

opensslencrypt versions before 1.4.0 contain a critical vulnerability in pqc.py where KEM decapsulation failures silently fall back to simulation mode, generating a deterministic shared secret from only 16 bytes of the private key and publicly available encapsulated key data. Attackers who obtain...

CVE-2026-74900

openssl_encrypt before version 1.4.0 has a flaw in pqc.py: when KEM decapsulation fails, it silently falls back to simulation mode, deriving a deterministic shared secret from just 16 bytes of the private key plus public encapsulated key data. An attacker with those 16 private-key bytes can compu...