Advanced Threat Data Export
Filter and download the raw CVE repository (CSV/JSON) for SIEM integration and internal reporting.
Data export is locked. Upgrade your package to enable filtering and downloading.
🔔 Premium Features
🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-74894 openssl_encrypt before 1.4.0 contains an authentication bypass vulnerability in the verify_api_token function that accepts any non-empty Bearer token ... | CRITICAL | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74893 openssl_encrypt versions before 1.4.0 contain hardcoded default JWT signing secrets in config.py that pass validation checks. Attackers with access to... | HIGH | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74892 openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key... | HIGH | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74891 openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network c... | CRITICAL | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74890 openssl_encrypt versions before 1.4.0 contain an authentication bypass vulnerability in CamelliaCipher that disables HMAC tag generation and verificat... | MEDIUM | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74889 openssl_encrypt versions before 1.4.0 use HKDF with no salt and static info parameter in key normalization functions, reducing entropy extraction and ... | CRITICAL | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74888 openssl_encrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KD... | HIGH | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74887 openssl_encrypt before 1.4.0 imports Python's non-cryptographic 'random' module (Mersenne Twister PRNG) at line 15 of openssl_encrypt/m... | NONE | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74886 openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than... | CRITICAL | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74885 openssl_encrypt versions before 1.4.0 contain a logging bug in restore_hidden_modules() that logs module counts after clearing, always showing zero re... | LOW | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74884 openssl_encrypt versions before 1.4.0 contain a path traversal vulnerability in the _is_safe_path method where the plugin_id parameter is not sanitize... | HIGH | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74883 openssl_encrypt versions before 1.4.0 contain a sandbox bypass vulnerability where the plugin sandbox fails to restrict alternative file access method... | HIGH | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74882 openssl_encrypt versions before 1.4.0 contain an insecure default configuration that trusts the entire RFC 1918 private address space in IntegrityProx... | HIGH | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74881 openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to wildcard and allow_credentials enabled to true. Attackers can create ma... | MEDIUM | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74880 openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract to... | CRITICAL | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74879 openssl_encrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint that returns full database exception stri... | HIGH | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74878 openssl_encrypt versions before 1.4.0 use an in-memory rate limiter for TOTP brute-force protection that is not shared across workers and is lost on s... | CRITICAL | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74877 openssl_encrypt versions before 1.4.0 contain a missing ownership verification vulnerability in the revoke_key method that allows authenticated client... | HIGH | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74876 openssl_encrypt versions before 1.4.0 contain a vulnerability in PublicKeyBundle.from_dict() that creates key bundles from untrusted data without veri... | CRITICAL | ????? | ????? | NVD | 21 hours ago |
| CVE-2026-74875 openssl_encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata t... | CRITICAL | ????? | ????? | NVD | 21 hours ago |