Is CVE-2026-1339 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-1339 being exploited in the wild.

How severe is CVE-2026-1339?

Informational severity, published 5 November 2026.

Which products and versions are affected?

Opentext Universal Discovery and CMDB classic deployment.

Is there a fix for CVE-2026-1339?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-1339 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-1339?

Check whether you run Opentext Universal Discovery and CMDB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-1339: OpenText Universal Discovery and CMDB open redirect

CVE-2026-1339 · Severity: info · Published 2026-11-05

An open redirect vulnerability in OpenText Universal Discovery and CMDB allows attackers to craft malicious URLs that redirect users to external websites. If a user clicks a crafted link, they may be directed to phishing sites or malicious resources, potentially leading to credential theft or malware infection. The vulnerability affects only the classic deployment option of the UCMDB UI component.

Vendors: Opentext.

Quick answers

Is CVE-2026-1339 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-1339 being exploited in the wild.
How severe is CVE-2026-1339?: Informational severity, published 5 November 2026.
Which products and versions are affected?: Opentext Universal Discovery and CMDB classic deployment.
Is there a fix for CVE-2026-1339?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-1339 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-1339?: Check whether you run Opentext Universal Discovery and CMDB at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An open redirect flaw exists in the ucmdb-browser component of OpenText Universal Discovery and CMDB's classic deployment. The vulnerability requires an attacker to craft a malicious URL and social engineer a user into following it; no authentication or network-level access is needed. Successful exploitation redirects the user to an attacker-controlled resource, enabling phishing or credential harvesting attacks.

Affected products

OpenText Universal Discovery and CMDB classic deployment

Timeline

2026-11-05: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.