PT-2026-82590

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software derives the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password. This results in identical keys being used across all users and files. An attacker...

PT-2026-82588

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description The software fails to enforce a time ceiling on key derivation function KDF iteration counts specified in file metadata. A KDF is a cryptographic algorithm that derives one or more secret key...

PT-2026-82581

Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description Failure to authenticate the presence of recovery slots in envelope-format encrypted files allows attackers to remove these slots without re-encrypting the payload. By modifying the file heade...