Threats tagged 'ghsa-qg6r-j76g-wv2q'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.5%	CVE-2026-74892jahlives openssl_encrypt · Use of Hard-coded Credentials High8.7EPSS 0.5%2026-08-17CVE Database V5CVE-2026-74892 openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication. EPSS 0.5%Vulnerability #ghsa-qg6r-j76g-wv2q	CVE Database V5	2026-08-17

Page 1 of 1