CVE-2026-74891
Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 0.28%
- 21th pct
- KEV
- No
- Class
- oss containerizable
- CWE-798
Description
openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data.
References
Status: profiled · ingested 2026-09-01T18:00:49.000Z