CVE-2026-105119 | OpenIdentityPlatform OpenAM up to 16.1.2 OAuth2 Provider improper authorization

October 3, 2026 Yanac

A vulnerability was found in OpenIdentityPlatform OpenAM up to 16.1.2 and classified as critical. The impacted element is an unknown function of the component OAuth2 Provider. Such manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-105119. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More