CVE-2026-123552

Versions of OpenAM prior to 16.1.4 are vulnerable to a server-side request forgery (SSRF) and CRL tampering vulnerability. The flaw exists in the certificate CRL checking mechanism, which fetches CRLs from the distribution point specified in a presented certificate without restricting the destina...