EXPOSURES › CVE-2026-74891
CVE-2026-74891
CRITICAL
DETAIL
SourceNVD · cve
Published2026-08-17
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-74891 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
DESCRIPTION
openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.