CVE-2026-123543

OpenAM versions before 16.1.4 are vulnerable to an unauthenticated Denial of Service (DoS) attack due to unbounded Java deserialisation . The flaw allows attackers to exhaust server resources by sending serialized Java data that lacks sufficient size or structure limits. By sending small, crafted...