What is CVE-2026-81696?

CVE-2026-81696 is a low-severity vulnerability in Jahlives OpenSSL Encrypt, classified under Improper Output Neutralization for Logs. CVSS score: 3.3/10. Published 2026-08-27.

How severe is CVE-2026-81696?

Low severity. CVSS v3 base score is 3.3 out of 10.

Vulnerability in Jahlives OpenSSL Encrypt

CVE-2026-81696

openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.

Affected products

Jahlives Openssl_encrypt

Weakness classification (CWE)

CWE-117 — Improper Output Neutralization for Logs

References

disclosure@vulncheck.com (vendor-advisory)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-81696?: CVE-2026-81696 is a low-severity vulnerability in Jahlives OpenSSL Encrypt, classified under Improper Output Neutralization for Logs. CVSS score: 3.3/10. Published 2026-08-27.
How severe is CVE-2026-81696?: Low severity. CVSS v3 base score is 3.3 out of 10.