advanced_authentication_server vulnerabilities
CVEs whose affected-version data names the advanced_authentication_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112256Critical· 9.2Logon bypass (trust of attacker-controlled completed-methods list)
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from …
▾ MidnightOpenText · Advanced Authentication ServerEPSS 0.24%via CVEORG
CVE-2026-112255Low· 2.9Endpoint credential minting (insecure default allow-list)
Initialization of a resource with an insecure default vulnerability in OpenText Advanced Authentication Server allows Excessive Allocation. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.x, from 6.5.0.0 th…
▾ SunlitOpenText · Advanced Authentication ServerEPSS 0.47%via CVEORG