CVE-2026-73644

creationtimestamp| type| source ---|---|--- 2026-08-13 18:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msybmbk7el2u...

CVE-2026-73644

OpenDJ is an LDAPv3 compliant directory service. Prior to 5.1.2, the SASL PLAIN authorization identity path in opendj-server-legacy/src/main/java/org/opends/server/extensions/PlainSASLMechanismHandler.java checked the PROXIEDAUTH privilege but did not evaluate the mayProxy proxy ACI scope when an...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.6), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.6) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.6)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.openam:embedded.opendj (>=14.6.5.3, <=14.6.6.1), org.openidentityplatform.openam:openam-slf4j (>=14.6.5, <=14.6.6) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.0)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:embedded.opendj...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.2), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.2) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...