CVE-2026-81696
Low · 3.3CVSS
3.3
EPSS
—
Published
Aug 27, 2026
CISA due date
—
The record
openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-109786 In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter… CWE-117
- CVE-2026-87859 morgan is an HTTP request logger middleware for Node.js. CWE-117
- CVE-2026-14350 IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an… CWE-117
- CVE-2026-9736 IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to… CWE-117
- CVE-2026-15603 morgan is an HTTP request logger middleware for Node.js. CWE-117
- CVE-2026-81694 openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from… CWE-117
- CVE-2026-81695 openssl_encrypt versions before 1.4.9 fail to escape attacker-controlled key_id values… CWE-117
- CVE-2026-54511 LogTape is an unobtrusive logging library. CWE-117