CVE-2026-74901

creationtimestamp| type| source ---|---|--- 2026-08-17 12:11:21+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtbocqolvy2f 2026-08-17 12:53:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/i5xvfncqfarns 2026-08-17 19:20:05+00:00| seen|...

CVE-2026-74901

The Python package openssl_encrypt (versions before 1.4.0) has a flaw in pqc.py : when AES-GCM decryption fails, the code silently falls back to unauthenticated AES-CTR mode. This removes integrity verification, allowing an attacker with network access to modify ciphertext in transit via bit-flip...