Security advisory for CVE-2026-112256

Advisory overview

Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and from 6.6.0.0 through 6.6.1.0.

Related references

• https://docs.microfocus.com/doc/2582/26.3.1/security-improvements-662
• https://docs.microfocus.com/doc/42/26.3.1/security-improvements-662
• https://docs.microfocus.com/doc/42/6.4.3.9/security-improvements-6439
• https://docs.microfocus.com/doc/42/6.5.0.11/security-improvements-65011