SysAdmin.help

CVE ID :CVE-2026-81721
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl_encrypt before 1.4.9 fails to validate KDF cost parameters in encrypted file metadata and keystore headers, allowing attackers to trigger unbounded memory allocation. Attackers can craft malicious ...

CVE ID :CVE-2026-81720
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity file protection blocks, allowing attackers to trigger out-of-memory conditions during key derivation. Attackers with write ...

CVE ID :CVE-2026-81719
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was compiled and ...

CVE ID :CVE-2026-81718
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC keyfile private keys and 10,000 iterations for dual-encryption file-password ...

CVE ID :CVE-2026-81717
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl_encrypt (pip package openssl-encrypt) before 1.4.9 contains two weaknesses in the portable USB drive feature, whose threat model treats the removable drive as untrusted (attacker with physical write ...

CVE ID :CVE-2026-81716
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl_encrypt (pip: openssl-encrypt) versions before 1.4.9 contain a path traversal flaw in PluginSandbox._is_safe_path, which authorized file access using a bare string-prefix match. A sandboxed plugin ...

CVE ID :CVE-2026-81715
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitize ...

CVE ID :CVE-2026-81714
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl_encrypt (pip: openssl-encrypt) versions <= 1.4.8 use suffix-tolerant fingerprint matching in enroll_trust_key when binding a plugin-signing trust anchor. An operator who confirms a short (forgeable, ~32 ...

CVE ID :CVE-2026-81706
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl_encrypt before 1.4.9 fails to prevent namespace collisions between own identities and contacts in IdentityStore, allowing attackers to create shadowed contact entries invisible until the corresponding ...

CVE ID :CVE-2026-81705
Published : Aug. 27, 2026, 5:21 p.m. | 48 minutes ago
Description :openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g. -apHunter2) or abbreviated long-option spellings (e ...