CVE-2026-14663 PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext

Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext. The OpenSSL version and OpenSSL configuration determine the disabled ciphers. If the application accepts encrypted data as input, decryption will succeed...

curl: TLS Cipher Misconfiguration in HTTP/3/QUIC Support

Summary: This vulnerability occurs when the --ciphers option is used with the curl command to manually specify TLS cipher suites. HTTP/3 or QUIC fails to function in this scenario because QUIC does not rely on traditional TLS cipher suites defined for TLS 1.2 or earlier. Consequently, using the...

The vulnerability in the implementation of the Transport Layer Security (TLS) protocol of the libcurl library allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Transport Layer Security TLS protocol implementation in the libcurl library is related to errors in security settings when the CURLOPTSSLCIPHERLIST configuration option is used. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain...