CVE-2026-123548

OpenIdentityPlatform OpenAM versions prior to 16.1.4 are vulnerable to an open redirect vulnerability. The root cause is that several pages—including WS-Federation logout , SAML v2.0 logout , name-identifier management , SAML v2.0 identity provider finder , and specific authentication pages—fail ...