Is CVE-2026-112255 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-112255 being exploited in the wild.

How severe is CVE-2026-112255?

Informational severity, published 29 October 2026.

Which products and versions are affected?

Opentext Advanced Authentication Server 6.4.0.0 through 6.6.1.0.

How is CVE-2026-112255 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-112255?

Check whether you run Opentext Advanced Authentication Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-112255: OpenText Advanced Authentication Server insecure default endpoint creation

CVE-2026-112255 · Severity: info · Published 2026-10-29

OpenText Advanced Authentication Server is used to verify user identities and control access to corporate systems. A default configuration flaw allows anyone on the network to create unauthenticated endpoints that bypass normal security controls. This could allow attackers to establish persistent backdoors or gain unauthorized access to protected resources without proper authentication.

Vendors: Opentext.

Quick answers

Is CVE-2026-112255 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-112255 being exploited in the wild.
How severe is CVE-2026-112255?: Informational severity, published 29 October 2026.
Which products and versions are affected?: Opentext Advanced Authentication Server 6.4.0.0 through 6.6.1.0.
Is there a fix for CVE-2026-112255?: No fixed version is recorded yet. Disable creation and recreation of unauthenticated endpoints in your configuration. If unauthenticated endpoints are required, configure a non-empty whitelist to restrict their creation to trusted networks only; an empty whitelist permits all networks.</anigation> <parameter name="fixed_in">Advanced Authentication Server 6.6.2.0 If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-112255 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-112255?: Check whether you run Opentext Advanced Authentication Server at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Disable creation and recreation of unauthenticated endpoints in your configuration. If unauthenticated endpoints are required, configure a non-empty whitelist to restrict their creation to trusted networks only; an empty whitelist permits all networks.</anigation> <parameter name="fixed_in">Advanced Authentication Server 6.6.2.0

Technical details

An insecure default initialization allows unrestricted creation and recreation of unauthenticated endpoints due to insufficient access controls. The vulnerability affects versions 6.4.0.0 through 6.6.1.0 and can be exploited over the network to allocate excessive resources or establish unauthorized authentication bypasses. The issue is mitigated by disabling unauthenticated endpoint creation or restricting it to a trusted network whitelist; version 6.6.2.0 adds a best practice warning for insecure configurations.

Affected products

OpenText Advanced Authentication Server 6.4.0.0 through 6.6.1.0

Timeline

2026-10-29: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.