CVE-2026-46495

OpenDJ (LDAPv3 directory service) is vulnerable to unauthenticated Remote Code Execution via its JMX RMI connector prior to version 5.1.1 . The root cause is a Deserialization of Untrusted Data (CWE-502) issue: RmiConnector.java processes attacker-controlled credential objects before authenticati...