CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-74890

openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verification when the PYTEST_CURRENT_TEST environment variable is set. Attackers with code execution can set this environment variable to produce unauthenticated ciphertext and bypass integrity protection on encrypted data.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 6.1%

CVSS Severity

CVSS v3 Score 5.5

References

Products affected by CVE-2026-74890

Jahlives » Openssl Encrypt » Version: 0.2.2

cpe:2.3:a:jahlives:openssl_encrypt:0.2.2
Jahlives » Openssl Encrypt » Version: 0.2.3

cpe:2.3:a:jahlives:openssl_encrypt:0.2.3
Jahlives » Openssl Encrypt » Version: 0.2.4

cpe:2.3:a:jahlives:openssl_encrypt:0.2.4
Jahlives » Openssl Encrypt » Version: 0.2.5

cpe:2.3:a:jahlives:openssl_encrypt:0.2.5
Jahlives » Openssl Encrypt » Version: 0.2.6

cpe:2.3:a:jahlives:openssl_encrypt:0.2.6
Jahlives » Openssl Encrypt » Version: 0.3.0

cpe:2.3:a:jahlives:openssl_encrypt:0.3.0
Jahlives » Openssl Encrypt » Version: 0.3.1

cpe:2.3:a:jahlives:openssl_encrypt:0.3.1
Jahlives » Openssl Encrypt » Version: 0.3.2

cpe:2.3:a:jahlives:openssl_encrypt:0.3.2
Jahlives » Openssl Encrypt » Version: 0.3.3

cpe:2.3:a:jahlives:openssl_encrypt:0.3.3
Jahlives » Openssl Encrypt » Version: 0.4.0

cpe:2.3:a:jahlives:openssl_encrypt:0.4.0
Jahlives » Openssl Encrypt » Version: 0.4.1

cpe:2.3:a:jahlives:openssl_encrypt:0.4.1
Jahlives » Openssl Encrypt » Version: 0.4.2

cpe:2.3:a:jahlives:openssl_encrypt:0.4.2
Jahlives » Openssl Encrypt » Version: 0.4.3

cpe:2.3:a:jahlives:openssl_encrypt:0.4.3
Jahlives » Openssl Encrypt » Version: 0.4.4

cpe:2.3:a:jahlives:openssl_encrypt:0.4.4
Jahlives » Openssl Encrypt » Version: 0.5.0

cpe:2.3:a:jahlives:openssl_encrypt:0.5.0
Jahlives » Openssl Encrypt » Version: 0.5.1

cpe:2.3:a:jahlives:openssl_encrypt:0.5.1
Jahlives » Openssl Encrypt » Version: 0.5.3

cpe:2.3:a:jahlives:openssl_encrypt:0.5.3
Jahlives » Openssl Encrypt » Version: 0.6.0

cpe:2.3:a:jahlives:openssl_encrypt:0.6.0
Jahlives » Openssl Encrypt » Version: 0.7.0

cpe:2.3:a:jahlives:openssl_encrypt:0.7.0
Jahlives » Openssl Encrypt » Version: 0.7.1

cpe:2.3:a:jahlives:openssl_encrypt:0.7.1
Jahlives » Openssl Encrypt » Version: 0.7.2

cpe:2.3:a:jahlives:openssl_encrypt:0.7.2
Jahlives » Openssl Encrypt » Version: 0.8.0

cpe:2.3:a:jahlives:openssl_encrypt:0.8.0
Jahlives » Openssl Encrypt » Version: 0.8.1

cpe:2.3:a:jahlives:openssl_encrypt:0.8.1
Jahlives » Openssl Encrypt » Version: 0.8.2

cpe:2.3:a:jahlives:openssl_encrypt:0.8.2
Jahlives » Openssl Encrypt » Version: 0.9.2

cpe:2.3:a:jahlives:openssl_encrypt:0.9.2
Jahlives » Openssl Encrypt » Version: 1.0.0

cpe:2.3:a:jahlives:openssl_encrypt:1.0.0
Jahlives » Openssl Encrypt » Version: 1.0.1

cpe:2.3:a:jahlives:openssl_encrypt:1.0.1
Jahlives » Openssl Encrypt » Version: 1.0.2

cpe:2.3:a:jahlives:openssl_encrypt:1.0.2
Jahlives » Openssl Encrypt » Version: 1.0.3

cpe:2.3:a:jahlives:openssl_encrypt:1.0.3
Jahlives » Openssl Encrypt » Version: 1.1.0

cpe:2.3:a:jahlives:openssl_encrypt:1.1.0
Jahlives » Openssl Encrypt » Version: 1.2.0

cpe:2.3:a:jahlives:openssl_encrypt:1.2.0
Jahlives » Openssl Encrypt » Version: 1.2.1

cpe:2.3:a:jahlives:openssl_encrypt:1.2.1
Jahlives » Openssl Encrypt » Version: 1.3.0

cpe:2.3:a:jahlives:openssl_encrypt:1.3.0
Jahlives » Openssl Encrypt » Version: 1.3.1

cpe:2.3:a:jahlives:openssl_encrypt:1.3.1
Jahlives » Openssl Encrypt » Version: 1.3.2

cpe:2.3:a:jahlives:openssl_encrypt:1.3.2
Jahlives » Openssl Encrypt » Version: 1.3.3

cpe:2.3:a:jahlives:openssl_encrypt:1.3.3
Jahlives » Openssl Encrypt » Version: 1.3.4

cpe:2.3:a:jahlives:openssl_encrypt:1.3.4
Jahlives » Openssl Encrypt » Version: 1.3.5

cpe:2.3:a:jahlives:openssl_encrypt:1.3.5
Jahlives » Openssl Encrypt » Version: 1.3.6

cpe:2.3:a:jahlives:openssl_encrypt:1.3.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-74890

Products

Pricing

Contact Us