CVE-2026-74891

creationtimestamp| type| source ---|---|--- 2026-08-21 20:02:02+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mtmki3fzgl2q 2026-08-22 12:00:47+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mtoa2i5jux2x...

CVE-2026-74891

opensslencrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data...

CVE-2026-74891

The openssl_encrypt npm package (versions before 1.4.0) ships standalone server configuration files containing hardcoded, well-known default PostgreSQL credentials. Network-accessible attackers can connect to exposed PostgreSQL instances and retrieve sensitive data. No exploitation evidence is pr...