by Kastro
Paper/Archive/CVE-2026-74880

CVE-2026-74880

jahlives openssl_encrypt — openssl_encrypt before 1.4.0 Token Leakage via Query Parameters

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 46.5.465 × 209.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser history, and HTTP Referer headers to gain unauthorized access.

Affected

ProductAffectedFixed inSource
openssl_encrypt< 1.4.01.4.0CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorygithub.com/jahlives/openssl_encrypt/security/advisories/GHSA-4rh7-jwg9-m28mwriteupvulncheck.com/advisories/openssl-encrypt-before-token-leakage-via-query-parameters