CVE-2026-74892 — openssl_encrypt before 1.4.0 Hardcoded Secret Key
openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who kno…
Published: 2026-08-17 · CVSS: 8.7 · CVSS 4.0
openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7