VULNERABILITY INTELLIGENCE

CVE-2026-81696

CVSS score3.3 LOW
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-08-27
Last modified2026-09-01
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.

Weakness classification

  • disclosure@vulncheck.com: CWE-117

Primary references