CVE-2026-14480: Openssl Subprocess Argument Injectioncve-2026-14480-openssl-subprocess-argument-injection
Detected an OpenSSL subprocess array executing with unvalidated input paths or parameters. This can lead to arbitrary file writes via -out/-keyout, path traversal via -in, or argument injection via -subj/-addext. Ensure all untrusted inputs are validated or sanitized before passing them to the OpenSSL command list.