CVE-2026-112256
OpenText Advanced Authentication Server
- OpenText Advanced Authentication Server
- Critical
- CVSS 9.2
- Fixed version listed
Summary
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs.
From the CVE record.
Read the original description
CVE record
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and from 6.6.0.0 through 6.6.1.0.
What to do
Fixed version listed
Affected products
| Product | Affected | Fixed in |
|---|---|---|
| OpenText Advanced Authentication Server | Only in the CVE record | 6.4.3.9, 6.5.0.11, 6.6.2.0 |
The CVE record lists 3 ranges this page cannot state exactly.
Scores and signals
- Exploitation
- No known exploitation
- Severity
- Critical, CVSS 9.2 (v4.0, scored by OpenText)
- Weakness
- CWE-349: Acceptance of extraneous untrusted data with trusted data
- Vendor
- OpenText, Advanced Authentication Server
Timeline
- First listed as critical by cve.now. Affected and fixed versions come from the CVE record, once one is published.