# cve.now: Jahlives

The newest entries naming Jahlives as an affected vendor (up to 200), of 66 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-81721](https://cve.now/CVE-2026-81721.md): openssl\_encrypt before 1.4.9 Denial of Service via KDF (CVSS 8.7)
- [CVE-2026-81720](https://cve.now/CVE-2026-81720.md): openssl\_encrypt before 1.4.9 Denial of Service via Unbounded Argon2 (CVSS 6.9)
- [CVE-2026-81719](https://cve.now/CVE-2026-81719.md): openssl\_encrypt before 1.4.9 Remote Code Execution via Plugin (CVSS 9.3)
- [CVE-2026-81718](https://cve.now/CVE-2026-81718.md): openssl\_encrypt before 1.4.9 Weak Cryptographic Parameters (CVSS 8.7)
- [CVE-2026-81717](https://cve.now/CVE-2026-81717.md): openssl\_encrypt before 1.4.9 Integrity Bypass via Added Files (CVSS 9.3)
- [CVE-2026-81716](https://cve.now/CVE-2026-81716.md): openssl\_encrypt before 1.4.9 Plugin Sandbox Path Traversal (CVSS 8.7)
- [CVE-2026-81715](https://cve.now/CVE-2026-81715.md): openssl\_encrypt before 1.4.9 Credential Exposure via Debug Output (CVSS 8.7)
- [CVE-2026-81714](https://cve.now/CVE-2026-81714.md): openssl\_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass (CVSS 9.3)
- [CVE-2026-81707](https://cve.now/CVE-2026-81707.md): openssl\_encrypt before 1.4.9 ANSI Escape Injection via Identity Email (CVSS 9.3)
- [CVE-2026-81706](https://cve.now/CVE-2026-81706.md): openssl\_encrypt before 1.4.9 Key Substitution via Identity Shadowing (CVSS 9.3)
- [CVE-2026-81705](https://cve.now/CVE-2026-81705.md): openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug (CVSS 8.7)
- [CVE-2026-81704](https://cve.now/CVE-2026-81704.md): openssl\_encrypt before 1.4.9 Weak Key Derivation via D-Bus (CVSS 8.7)
- [CVE-2026-81703](https://cve.now/CVE-2026-81703.md): openssl\_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key (CVSS 8.7)
- [CVE-2026-81702](https://cve.now/CVE-2026-81702.md): openssl\_encrypt before 1.4.9 Key Substitution via Identity Load (CVSS 9.3)
- [CVE-2026-81701](https://cve.now/CVE-2026-81701.md): openssl\_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin (CVSS 9.3)
- [CVE-2026-81700](https://cve.now/CVE-2026-81700.md): openssl\_encrypt before 1.4.9 GPG Signature Verification Bypass (CVSS 9.3)
- [CVE-2026-81699](https://cve.now/CVE-2026-81699.md): openssl\_encrypt before 1.4.9 Denial of Service via unbounded KDF cost (CVSS 8.7)
- [CVE-2026-81698](https://cve.now/CVE-2026-81698.md): openssl\_encrypt before 1.4.9 Shell Injection via info command (CVSS 9.3)
- [CVE-2026-81697](https://cve.now/CVE-2026-81697.md): openssl\_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration (CVSS 8.7)
- [CVE-2026-81696](https://cve.now/CVE-2026-81696.md): openssl\_encrypt before 1.4.9 Terminal Injection via info Command (CVSS 9.3)
- [CVE-2026-81695](https://cve.now/CVE-2026-81695.md): openssl\_encrypt before 1.4.9 Terminal Injection via key\_id (CVSS 9.3)
- [CVE-2026-81694](https://cve.now/CVE-2026-81694.md): openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command (CVSS 9.3)
- [CVE-2026-81693](https://cve.now/CVE-2026-81693.md): openssl\_encrypt before 1.4.9 Denial of Service via QR total field (CVSS 8.7)
- [CVE-2026-81692](https://cve.now/CVE-2026-81692.md): openssl\_encrypt before 1.4.9 Denial of Service via STREAMINFO (CVSS 8.7)
- [CVE-2026-81691](https://cve.now/CVE-2026-81691.md): openssl\_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs (CVSS 8.7)
- [CVE-2026-81690](https://cve.now/CVE-2026-81690.md): verify-usb before 1.4.9 Symlink Directory Traversal Code Execution (CVSS 8.7)
- [CVE-2026-81689](https://cve.now/CVE-2026-81689.md): openssl\_encrypt before 1.4.9 Weak Pepper Key Derivation (CVSS 8.7)
- [CVE-2026-81688](https://cve.now/CVE-2026-81688.md): openssl\_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256 (CVSS 8.7)
- [CVE-2026-81687](https://cve.now/CVE-2026-81687.md): openssl\_encrypt before 1.4.9 Denial of Service via KDF (CVSS 8.7)
- [CVE-2026-81686](https://cve.now/CVE-2026-81686.md): openssl\_encrypt before 1.4.9 D-Bus Properties Authorization Bypass (CVSS 6.9)
- [CVE-2026-81685](https://cve.now/CVE-2026-81685.md): openssl\_encrypt before 1.4.9 Text Injection via Recovery Slot Metadata (CVSS 9.3)
- [CVE-2026-81684](https://cve.now/CVE-2026-81684.md): openssl\_encrypt before 1.4.9 Information Disclosure via Command Line (CVSS 6.9)
- [CVE-2026-81683](https://cve.now/CVE-2026-81683.md): openssl\_encrypt before 1.4.9 Plaintext Private Key Storage (CVSS 8.6)
- [CVE-2026-81682](https://cve.now/CVE-2026-81682.md): openssl\_encrypt before 1.4.9 Insecure File Permissions (CVSS 8.6)
- [CVE-2026-81681](https://cve.now/CVE-2026-81681.md): openssl\_encrypt before 1.4.9 False Encryption via Cleartext Storage (CVSS 9.3)
- [CVE-2026-81680](https://cve.now/CVE-2026-81680.md): openssl\_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal (CVSS 9.3)
- [CVE-2026-74901](https://cve.now/CVE-2026-74901.md): openssl\_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback (CVSS 9.3)
- [CVE-2026-74900](https://cve.now/CVE-2026-74900.md): openssl\_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode (CVSS 9.3)
- [CVE-2026-74899](https://cve.now/CVE-2026-74899.md): openssl\_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy (CVSS 9.3)
- [CVE-2026-74896](https://cve.now/CVE-2026-74896.md): openssl\_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal (CVSS 9.3)
- [CVE-2026-74895](https://cve.now/CVE-2026-74895.md): openssl\_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation (CVSS 9.3)
- [CVE-2026-74894](https://cve.now/CVE-2026-74894.md): openssl\_encrypt before 1.4.0 Authentication Bypass via Bearer Token (CVSS 9.3)
- [CVE-2026-74893](https://cve.now/CVE-2026-74893.md): openssl\_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secrets (CVSS 8.7)
- [CVE-2026-74892](https://cve.now/CVE-2026-74892.md): openssl\_encrypt before 1.4.0 Hardcoded Secret Key (CVSS 8.7)
- [CVE-2026-74891](https://cve.now/CVE-2026-74891.md): openssl\_encrypt before 1.4.0 Hardcoded Database Credentials (CVSS 8.7)
- [CVE-2026-74890](https://cve.now/CVE-2026-74890.md): openssl\_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable (CVSS 9.3)
- [CVE-2026-74889](https://cve.now/CVE-2026-74889.md): openssl\_encrypt before 1.4.0 Weak Key Derivation via HKDF (CVSS 9.3)
- [CVE-2026-74888](https://cve.now/CVE-2026-74888.md): openssl\_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation (CVSS 8.7)
- [CVE-2026-74887](https://cve.now/CVE-2026-74887.md): openssl\_encrypt before 1.4.0 Insecure Random Import in PQC Module (CVSS 6.3)
- [CVE-2026-74886](https://cve.now/CVE-2026-74886.md): openssl\_encrypt before 1.4.0 Plugin Import Guard Bypass (CVSS 9.3)
- [CVE-2026-74885](https://cve.now/CVE-2026-74885.md): openssl\_encrypt before 1.4.0 Logging Bug and Race Condition (CVSS 9.3)
- [CVE-2026-74884](https://cve.now/CVE-2026-74884.md): openssl\_encrypt before 1.4.0 Path Traversal via plugin\_id (CVSS 8.7)
- [CVE-2026-74883](https://cve.now/CVE-2026-74883.md): openssl\_encrypt before 1.4.0 Sandbox Bypass via pathlib and io (CVSS 8.7)
- [CVE-2026-74882](https://cve.now/CVE-2026-74882.md): openssl\_encrypt before 1.4.0 Insecure Default Configuration (CVSS 8.7)
- [CVE-2026-74881](https://cve.now/CVE-2026-74881.md): openssl\_encrypt before 1.4.0 CORS Misconfiguration via Wildcard Origins (CVSS 7.1)
- [CVE-2026-74880](https://cve.now/CVE-2026-74880.md): openssl\_encrypt before 1.4.0 Token Leakage via Query Parameters (CVSS 9.3)
- [CVE-2026-74879](https://cve.now/CVE-2026-74879.md): openssl\_encrypt before 1.4.0 Information Disclosure via /ready endpoint (CVSS 8.7)
- [CVE-2026-74878](https://cve.now/CVE-2026-74878.md): openssl\_encrypt before 1.4.0 TOTP Rate Limiter Bypass (CVSS 9.3)
- [CVE-2026-74877](https://cve.now/CVE-2026-74877.md): openssl\_encrypt before 1.4.0 Missing Ownership Verification via revoke\_key (CVSS 8.7)
- [CVE-2026-74876](https://cve.now/CVE-2026-74876.md): openssl\_encrypt before 1.4.0 Unverified Key Bundle Encryption (CVSS 9.3)
- [CVE-2026-74875](https://cve.now/CVE-2026-74875.md): openssl\_encrypt before 1.4.0 Schema Validation Bypass (CVSS 9.3)
- [CVE-2026-74874](https://cve.now/CVE-2026-74874.md): openssl\_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selection (CVSS 8.7)
- [CVE-2026-74873](https://cve.now/CVE-2026-74873.md): openssl\_encrypt before 1.4.0 Password Exposure via CLI Argument (CVSS 8.7)
- [CVE-2026-74872](https://cve.now/CVE-2026-74872.md): openssl\_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpool (CVSS 9.3)
- [CVE-2026-74871](https://cve.now/CVE-2026-74871.md): openssl\_encrypt before 1.4.6 KDF Bypass via Sequential-XOR (CVSS 6.9)
- [CVE-2026-74870](https://cve.now/CVE-2026-74870.md): openssl\_encrypt before 1.4.8 Hardware Pepper Information Disclosure (CVSS 8.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/jahlives
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.