Lucene search
+L

7 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-45794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource fall...

7.7CVSS5.9AI score0.00627EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 a.m.•9 views

CVE-2026-45794

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS predicate blob after a messageId expires from the in-memory dispatcher, treats top-level blob keys as Java class names fo...

7.7CVSS0.00627EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/15 9:49 a.m.•43 views

CVE-2026-45794

OpenAM Community Edition (through 16.0.6 ) is vulnerable to unsafe Java deserialization (CWE-502) in its Push Notification SNS callback resource (SnsMessageResource ). The route is mounted with anonymous access ; after a message ID expires from the in-memory dispatcher, it falls back to a CTS-sto...

7.7CVSS5.8AI score0.00627EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/15 9:49 a.m.•32 views

CVE-2026-45794 OpenAM Unsafe Java Deserialization via SNS

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS predicate blob after a messageId expires from the in-memory dispatcher, treats top-level blob keys as Java class names fo...

7.7CVSS0.00627EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/15 9:49 a.m.•14 views

EUVD-2026-78358

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS predicate blob after a messageId expires from the in-memory dispatcher, treats top-level blob keys as Java class names fo...

7.7CVSS5.8AI score0.00627EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/15 9:49 a.m.•10 views

CVE-2026-45794 OpenAM Unsafe Java Deserialization via SNS

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS predicate blob after a messageId expires from the in-memory dispatcher, treats top-level blob keys as Java class names fo...

7.7CVSS5.9AI score0.00627EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•2 views

CVE-2026-45794: Deserialization of Untrusted Data

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the anonymous Push Notification SNS callback handled by SnsMessageResource falls back to a CTS predicate blob after a messageId expires from the in-memory dispatcher, treats top-level blob keys as Java class names fo...

7.7CVSS5.9AI score0.00627EPSS
SaveExploits0References2
Rows per page
Query Builder