CRITICAL 9.2 NVD
CVE-2026-112256
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly C
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs.
This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and from 6.6.0.0 through 6.6.1.0.
References
- https://docs.microfocus.com/doc/2582/26.3.1/security-improvements-662
- https://docs.microfocus.com/doc/42/26.3.1/security-improvements-662
- https://docs.microfocus.com/doc/42/6.4.3.9/security-improvements-6439
- https://docs.microfocus.com/doc/42/6.5.0.11/security-improvements-65011
This critical severity vulnerability with a CVSS score of 9.2 was published on 2026-10-29 via NVD.
Risk Timeline
CVE Disclosed2026-10-29 · -1 days ago
Remediation Resources
Official Advisory
docs.microfocus.com/doc/2582/26.3.1/security-improvements-662Official Advisory
docs.microfocus.com/doc/42/26.3.1/security-improvements-662
vulnfeed aggregates 16884 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.