CVE-2026-112256
Logon bypass (trust of attacker-controlled completed-methods list)
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and from 6.6.0.0 through 6.6.1.0.
| CWE | CWE-349 |
| Vendor | opentext |
| Product | advanced authentication server |
| Published | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for opentext advanced authentication server
Be the first to know when new unknown vulnerabilities affecting opentext advanced authentication server are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
OpenText / Advanced Authentication Server
6.4.0.0 ≤ 6.4.3.8 6.5.0.0 ≤ 6.5.0.10 6.6.0.0 ≤ 6.6.1.0
References
docs.microfocus.com: https://docs.microfocus.com/doc/42/26.3.1/security-improvements-662 docs.microfocus.com: https://docs.microfocus.com/doc/2582/26.3.1/security-improvements-662 docs.microfocus.com: https://docs.microfocus.com/doc/42/6.4.3.9/security-improvements-6439 docs.microfocus.com: https://docs.microfocus.com/doc/42/6.5.0.11/security-improvements-65011
Credits
JAN FISHER