CVE-2026-81696EPSS p14.9%

CVE-2026-81696CVE-2026-81696

jahlives / openssl_encrypt

Description

openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.

Scoring

CVSS 3.3 ()
VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS0.25% probability of exploitation · percentile 14.9% · 2026-10-05T12:00:23Z
Last modified2026-09-01
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.