CyberSecBulletin

Jahlives vulnerabilities

We track 42 vulnerabilities in Jahlives products. 42 are rated high or critical, and none are known to be exploited. The most recent was published on August 27, 2026.

42vulnerabilities
20critical
22high
0exploited
8.7average CVSS score

Latest Jahlives vulnerabilities

  • 7.5 High severity

    openssl_encrypt: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

    CVE-2026-74874Jahlives

    openssl_encrypt versions before 1.4.0 use Python's non-cryptographic random module for steganographic pixel selection in the generate_pseudorandom_sequence function. Attackers who know the password can recover the Mersenne Twister state from approximately 624

  • 9.8 Critical severity

    openssl_encrypt: Untrusted Search Path

    CVE-2026-74872Jahlives

    openssl_encrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the