Hardcoded Database Credentials in OpenSSL_Encrypt Versions

CVE-2026-74891

What is CVE-2026-74891?

OpenSSL Encrypt versions prior to 1.4.0 are susceptible to a vulnerability where hardcoded database credentials are embedded in standalone server configuration files. This flaw allows attackers on the same local network to exploit known default credentials to gain unauthorized access to PostgreSQL databases, potentially leading to the compromise of sensitive information. Organizations using affected versions must take immediate steps to update their systems and safeguard their databases from unauthorized access.

References