CVE-2026-75120
Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents
- State
- Published
- Severity
- 9.3 Critical
- Published
- Oct 13, 2026
- Updated
- Oct 16, 2026
- Reserved
- Aug 17, 2026
Description
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | OpenText |
Weaknesses
- CWE-290 Authentication bypass by spoofing
Affected Products
| Product | Versions |
|---|---|
Endpoint InvestigatorOpenText |
|
Endpoint Forensics & ResponseOpenText |
|
Information AssuranceOpenText |
|
Endpoint SecurityOpenText |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.