CVE-2026-74894

creationtimestamp| type| source ---|---|--- 2026-08-17 12:09:57+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtboaancnv2j 2026-08-17 19:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtcf5nyxfn2e...

CVE-2026-74894

opensslencrypt before 1.4.0 contains an authentication bypass vulnerability in the verifyapitoken function that accepts any non-empty Bearer token string without validation. Attackers can upload arbitrary public keys, enumerate all keys, and revoke keys belonging to any user by providing any Bear...