---
id: "CVE-2026-112256"
kind: "vulnerability"
aliases: ["CVE-2026-112256"]
title: "OpenText Advanced Authentication Server: untrusted data lets attackers reach restricted functions"
severity: "critical"
cvss: 9.2
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Advanced Authentication Server", "fixed": [], "affected": ">= 6.4.0.0, <= 6.4.3.8; >= 6.5.0.0, <= 6.5.0.10; >= 6.6.0.0, <= 6.6.1.0", "ecosystem": "vendor"}]
ecosystems: []
tags: ["advanced-authentication-server", "authentication", "netiq", "opentext", "self-hosted", "vendor"]
not_affected_if: ["version-outside-affected-ranges"]
published_at: "2026-10-29T16:17:58+00:00"
first_seen_at: "2026-10-29T16:25:56+00:00"
updated_at: "2026-10-29T16:33:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112256", "first_seen_at": "2026-10-29T16:25:56+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-29T16:33:50+00:00"}]
---

# OpenText Advanced Authentication Server: untrusted data lets attackers reach restricted functions

OpenText Advanced Authentication Server accepts extra untrusted data alongside trusted data, which bypasses access control checks. An attacker can reach functionality that should be restricted to authorized users.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Advanced Authentication Server affected >= 6.4.0.0, <= 6.4.3.8; >= 6.5.0.0, <= 6.5.0.10; >= 6.6.0.0, <= 6.6.1.0 fixed ?

## How to check

- Check the installed Advanced Authentication Server version against the affected ranges: `6.4.0.0` through `6.4.3.8`, `6.5.0.0` through `6.5.0.10`, and `6.6.0.0` through `6.6.1.0`.

## Timeline

- 2026-10-29T16:25:56+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112256
- 2026-10-29T16:33:50+00:00 analyst — No OpenText advisory or fixed version found yet (searched web; only NVD, published 2026-10-29). CNA vector from security@opentext.com is CVSS 4.0 AV:N/AC:L/PR:N/UI:N, so network-reachable and unauthenticated per the vector. Not exploited per sources, no PoC found. Fix unknown; recheck OpenText/NetIQ support portal (KM articles) and the AAF 6.6.x release notes. Nothing verified.

## From the sources

Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects Advanced Authentication Server: from 6.4.0.0 through 6.4.3.8, from 6.5.0.0 through 6.5.0.10, and from 6.6.0.0 through 6.6.1.0.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_