CRITICAL🇬🇧 English

CVE-2026-81696

CVSS 9.3v4.0pub. 2026-08-27upd. 2026-09-01

openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.

oryginał EN
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Jahlives OpenSSL Encrypt

    APP
    Jahlives
    < 1.4.9
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2026-81685CRITICAL9.3ten sam produkt

openssl_encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing att...

CVE-2026-81694CRITICAL9.3ten sam produkt

openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from untrusted drive data (o...

CVE-2026-81680CRITICAL9.3ten sam produkt

openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted...

CVE-2026-81681CRITICAL9.3ten sam produkt

openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 advertise a portable USB workspace as an 'Encr...

CVE-2026-81695CRITICAL9.3ten sam produkt

openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values printed to stderr durin...