CVE-2026-74891 is a vulnerability in jahlives openssl_encrypt versions before 1.4.0 where hardcoded database credentials are present in standalone server configuration files. This flaw enables attackers with network access to connect to PostgreSQL databases using well-known default credentials, leading to unauthorized data access. The CVSS 4.0 score is 8.7, indicating high severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality.

Attackers on the same network can exploit the hardcoded credentials to gain unauthorized access to PostgreSQL databases, allowing them to retrieve sensitive information. The vulnerability does not require privileges or user interaction, making it easier to exploit in a local network environment. Integrity and availability impacts are not indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected servers and avoid using affected versions in untrusted network environments. Monitor for vendor updates regarding patches or configuration changes to remove hardcoded credentials.