CVE-2026-105117 | OpenIdentityPlatform OpenAM up to 16.1.2 Email Notification subject/message injection

October 3, 2026 Yanac

A vulnerability was found in OpenIdentityPlatform OpenAM up to 16.1.2. It has been rated as critical. Affected is an unknown function of the component Email Notification. The manipulation of the argument subject/message leads to injection.

This vulnerability is uniquely identified as CVE-2026-105117. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More