CVE-2026-74882 in openssl_encrypt
الملخص
بحسب MITRE • 17/08/2026
openssl_encrypt versions before 1.4.0 contain an insecure default configuration that trusts the entire RFC 1918 private address space in IntegrityProxyConfig trusted_proxies. Attackers on private networks can forge client certificate headers to bypass mTLS authentication when ProxyAuth validation is relaxed or modified.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.