CVE-2026-81680 - openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in envelope-format encrypted files, allowing attackers to remove recovery slots without re-encrypting the payload. Attackers can modify the file header to delete recovery-slot fields and bypass authentication, silently removing recovery paths the owner deliberately added. - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-76581 [危急] CVE-2026-76581 - The WPMU DEV Dashboard plugin for WordPress is vulner…
• CVE-2026-54330 [高危] CVE-2026-54330 - Ceph is an open-source distributed storage platform p…
• CVE-2026-81717 [低危] CVE-2026-81717 - openssl_encrypt (pip package openssl-encrypt) before …
• CVE-2026-81714 [高危] CVE-2026-81714 - openssl_encrypt (pip: openssl-encrypt) versions
• CVE-2026-81701 [危急] CVE-2026-81701 - openssl_encrypt versions before 1.4.9 use a denylist …
• CVE-2026-81700 [危急] CVE-2026-81700 - openssl_encrypt versions before 1.4.9 contain a signa…
• CVE-2026-81680 [中危] CVE-2026-81680 - openssl_encrypt versions before 1.4.9 fail to authent…
• CVE-2026-68745 [高危] CVE-2026-68745 - Certificate validation failures in SAML authenticatio…