CVE-2026-75120

Awaiting Analysis Awaiting Analysis - Queue

Authentication Bypass in OpenText Endpoint Investigator Agents

Publication date: 2026-10-13

Last updated on: 2026-10-16

Assigner: OpenText

Description

The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-75120

EUVD

EUVD-2026-99206

Affected Vendors & Products

Vendor	Product	Version / Range
OpenText	Endpoint	Investigator 0
OpenText	Endpoint	Forensics & Response 0
OpenText	Information	Assurance 0
OpenText	Endpoint	Security 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-290	This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

Executive Summary

This vulnerability is in the OpenText Endpoint Investigator, Forensics & Response, Information Assurance, and Endpoint Security components. It allows unauthorized or unauthenticated users to bypass security controls during session establishment and connect to vulnerable Agents.

Impact Analysis

An attacker could exploit this to gain unauthorized access to systems running these OpenText components, potentially leading to data breaches, system compromise, or further network infiltration without detection.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's security rules for protected health information, potentially resulting in legal penalties and loss of compliance certifications.

Mitigation Strategies

Apply the latest security patches or updates provided by OpenText for the affected Agents. Disable or restrict network access to vulnerable Agents until patches are applied. Monitor network traffic for unauthorized connections to Agents. Review and enforce strict authentication controls for session establishment.

Hi! I’m here to help you understand CVE-2026-75120. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70