by Kastro
Paper/Archive/CVE-2026-75120

CVE-2026-75120

OpenText Endpoint Investigator — Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

EPSS 0.4%CVSS 9.3
critical.is priorityof 100
35
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 35.4.354 × 207.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment

Affected

ProductAffectedFixed inSource
Endpoint Investigator≤ 26.1–CNA
Endpoint Forensics & Response≤ 26.1–CNA
Information Assurance≤ 26.1–CNA
Endpoint Security≤ 24.1–CNA

Scores by source

OpenText (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorysupport.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0872887