CVE Catalog
CVE-2026-74891
CriticalCVSS 9.8Summary
openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data.
Risk Assessment
The risk is that sensitive data stored in the database can be exposed to an attacker on the local network, potentially leading to data confidentiality breach.
Recommendation
Upgrade openssl_encrypt to version 1.4.0 or later and change all default credentials.
Original NVD description (English source)
openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data.