CVE-2026-112256
NoneCVSS
—
EPSS
0.2%
Published
Oct 29, 2026
CISA due date
—
The record
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and from 6.6.0.0 through 6.6.1.0.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-19033 For a secondary zone with transfers restricted by TSIG, `named` may start to serve the… CWE-349
- CVE-2026-78301 A malformed zone may contain an NS or DNAME node above its origin, which `named` treats… CWE-349
- CVE-2026-74916 The WP Fastest Cache WordPress plugin before 1.5.1 does not include a set of… CWE-349
- CVE-2026-15387 GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before… CWE-349
- CVE-2026-50252 In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized… CWE-349
- CVE-2026-41120 Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of… CWE-349
- CVE-2026-33612 A malicious authoritative server can send a crafted zone via the ZoneToCache function… CWE-349
- CVE-2026-46342 Nuxt is an open-source web development framework for Vue.js. CWE-349