Lucene search
+L

12 matches found

Snyk
Snyk
•added 2026/08/17 6:15 p.m.•7 views

Insufficient Verification of Data Authenticity

Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...

9.8CVSS5.9AI score0.00213EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/17 11:16 a.m.•6 views

PYSEC-2026-3766

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

9.3CVSS6.2AI score0.00213EPSS
SaveExploits0References2
PyPA
PyPA
•added 2026/08/17 11:16 a.m.•11 views

PYSEC-2026-3766

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

9.3CVSS6.2AI score0.00213EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2026/08/17 11:16 a.m.•10 views

CVE-2026-74890

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

9.3CVSS0.00213EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/17 11:04 a.m.•14 views

CVE-2026-74890 openssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

9.3CVSS6AI score0.00213EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/17 11:04 a.m.•58 views

CVE-2026-74890 openssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

9.3CVSS0.00213EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/17 11:04 a.m.•35 views

CVE-2026-74890

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

9.3CVSS6AI score0.00213EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/17 11:04 a.m.•12 views

EUVD-2026-60109

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

9.3CVSS6AI score0.00213EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/17 11:04 a.m.•17 views

CVE-2026-74890 openssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

9.3CVSS6.2AI score
SaveExploits0References4
CVE
CVE
•added 2026/08/17 11:04 a.m.•41 views

CVE-2026-74890

openssl_encrypt versions before 1.4.0 have an authentication bypass in the CamelliaCipher component: setting the PYTEST_CURRENT_TEST environment variable disables HMAC tag generation and verification, allowing attackers with code execution to produce unauthenticated ciphertext and bypass integrit...

9.3CVSS6AI score0.00213EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/17 12:00 a.m.•1 views

CVE-2026-74890: Insufficient Verification of Data Authenticity

opensslencrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTESTCURRENTTEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticat...

9.3CVSS6.1AI score0.00213EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/08/17 12:00 a.m.•19 views

PT-2026-76626

openssl encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTEST CURRENT TEST environment variable is set. Attackers with code execution can set this environment variable to produce...

9.3CVSS6AI score0.00213EPSS
SaveExploits0References3
Rows per page
Query Builder