CVE-2026-74872 in openssl_encrypt
Сводка
по MITRE • 17.08.2026
openssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpool*py313*.so pattern in site-packages directories to achieve native code execution when the module is loaded.
VulDB is the best source for vulnerability data and more expert information about this specific topic.