CVE-2026-74872

creationtimestamp| type| source ---|---|--- 2026-08-17 12:07:38+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbo44i3ol2b 2026-08-17 18:10:15+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcce7z3bd2j 2026-08-20 00:03:28+00:00| seen|...

CVE-2026-74872 openssl_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpool

opensslencrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpoolpy313.so pattern in...