CVE-2026-74882
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
openssl_encrypt before version 1.4.0 contains an insecure default configuration that trusts the entire RFC 1918 private address space in IntegrityProxyConfig trusted_proxies. Attackers on private networks can forge client certificate headers to bypass mTLS authentication when ProxyAuth validation is relaxed or modified.
Risk Assessment
The risk includes unauthorized access to the system by bypassing mTLS authentication, potentially leading to compromise of data and services.
Recommendation
It is recommended to change the default trusted_proxies configuration to not trust the entire RFC 1918 space, and to upgrade openssl_encrypt to version 1.4.0 or later.
Original NVD description (English source)
openssl_encrypt versions before 1.4.0 contain an insecure default configuration that trusts the entire RFC 1918 private address space in IntegrityProxyConfig trusted_proxies. Attackers on private networks can forge client certificate headers to bypass mTLS authentication when ProxyAuth validation is relaxed or modified.