https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:09:23.128238+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-74888 CVE-2026-74888 — openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation 2026-10-02T19:09:23.129446+00:00

Affected: jahlives openssl_encrypt

openssl_encrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an outer loop, creating a KDF whose security properties have not been formally analyzed. Attackers can exploit this weakened key derivation to more efficiently crack passwords protecting legacy encrypted files compared to standard PBKDF2 implementations.