# Jahlives Openssl Encrypt


- [CVE-2026-81680](https://insights.sbomify.com/CVE-2026-81680/): openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal (critical 9.3)
- [CVE-2026-81681](https://insights.sbomify.com/CVE-2026-81681/): openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage (critical 9.3)
- [CVE-2026-81685](https://insights.sbomify.com/CVE-2026-81685/): openssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadata (critical 9.3)
- [CVE-2026-81694](https://insights.sbomify.com/CVE-2026-81694/): openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command (critical 9.3)
- [CVE-2026-81695](https://insights.sbomify.com/CVE-2026-81695/): openssl_encrypt before 1.4.9 Terminal Injection via key_id (critical 9.3)
- [CVE-2026-81696](https://insights.sbomify.com/CVE-2026-81696/): openssl_encrypt before 1.4.9 Terminal Injection via info Command (critical 9.3)
- [CVE-2026-81698](https://insights.sbomify.com/CVE-2026-81698/): openssl_encrypt before 1.4.9 Shell Injection via info command (critical 9.3)
- [CVE-2026-81700](https://insights.sbomify.com/CVE-2026-81700/): openssl_encrypt before 1.4.9 GPG Signature Verification Bypass (critical 9.3)
- [CVE-2026-81701](https://insights.sbomify.com/CVE-2026-81701/): openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin (critical 9.3)
- [CVE-2026-81702](https://insights.sbomify.com/CVE-2026-81702/): openssl_encrypt before 1.4.9 Key Substitution via Identity Load (critical 9.3)
- [CVE-2026-81706](https://insights.sbomify.com/CVE-2026-81706/): openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowing (critical 9.3)
- [CVE-2026-81714](https://insights.sbomify.com/CVE-2026-81714/): openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/products/jahlives/openssl-encrypt/