What is CVE-2026-74892?

CVE-2026-74892 is a high-severity vulnerability in Jahlives OpenSSL Encrypt, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2026-08-17.

How severe is CVE-2026-74892?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Jahlives OpenSSL Encrypt

CVE-2026-74892

openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Jahlives Openssl_encrypt — versions 0, 1.4.0

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-74892?: CVE-2026-74892 is a high-severity vulnerability in Jahlives OpenSSL Encrypt, classified under Use of Hard-coded Credentials. CVSS score: 7.5/10. Published 2026-08-17.
How severe is CVE-2026-74892?: High severity. CVSS v3 base score is 7.5 out of 10.