CVE-2026-11877
NoneCVSS
—
EPSS
0.3%
Published
Jun 24, 2026
CISA due date
—
The record
An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-54424 An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads… CWE-648
- CVE-2026-9560 Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on… CWE-648
- CVE-2026-41225 A vulnerability exists in iControl REST where a highly privileged, authenticated attacker… CWE-648
- CVE-2026-41386 OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap… CWE-648
- CVE-2026-41329 OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to… CWE-648
- CVE-2026-35669 OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in… CWE-648
- CVE-2026-35663 OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing… CWE-648
- GHSA-m5jp-p3r5-mfqp Duplicate Advisory: OpenClaw: Gateway Plugin Subagent Fallback `deleteSession` Uses… CWE-648