Vulnerability Bulletins |
CVE-2026-74885 |
|
| Affected software | OPENSSL |
| openssl_encrypt versions before 1.4.0 contain a logging bug in restore_hidden_modules() that logs module counts after clearing, always showing zero restored modules and corrupting audit trails. Additionally, a race condition exists between module hiding and import hook installation where another thread could re-import blocked modules in multi-threaded environments. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-74885 | |