EUVD-2026-66846

Spring Security's embedded UnboundID LDAP server UnboundIdContainer unconditionally registers an administrative credential and binds its listener to all available network interfaces. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.1), org.openidentityplatform.opendj:opendj-embedded (4.9.1) +4 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.9...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.13), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.13) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.13)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.openam:openam-slf4j (15.1.4), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.4 -...

org.openidentityplatform.openam:openam-slf4j (>=16.0.1, <=16.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1, <=5.1.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1, <=5.1.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.1 Source cves: CVE-2026-73644 Source advisory: OSV:GHSA-P279-2CQP-84JG...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.12), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.12) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.12)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.openam:openam-slf4j (15.2.2), org.openidentityplatform.opendj:opendj-dsml-servlet (4.10.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.10.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.2.2 -...

org.openidentityplatform.openam:openam-slf4j (>=16.0.1, <=16.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (>=5.0.1, <=5.1.1) +5 more potentially affected by unknown CVE via org.openidentityplatform.opendj:opendj-server-legacy (>=5.0.1, <=5.1.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version =5.0.1, =16.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.0.1, =5.1.1 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGOPENIDENTITYPLATFORMOPENDJ-18313059...

org.openidentityplatform.openam:openam-slf4j (15.1.5), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.3) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.3)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.5 -...

org.openidentityplatform.openam:openam-slf4j (15.1.6), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.4) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.4)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.6 -...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.1), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.1) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.7), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.7) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.7)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.14), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.14) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.14)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.3), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.3) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.3)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.openam:embedded.opendj (>=14.6.1.1, <=14.6.1.2), org.openidentityplatform.openam:openam-slf4j (14.6.1) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.9)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:embedded.opendj...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.15), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.15) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.15)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.0), org.openidentityplatform.opendj:opendj-embedded (4.9.0) +4 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.0)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.9...

org.openidentityplatform.openam:openam-slf4j (>=15.1.2, <=15.1.3), org.openidentityplatform.opendj:opendj-dsml-servlet (4.8.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.8.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j =15.1.2,...

org.openidentityplatform.openam:openam-slf4j (15.1.1), org.openidentityplatform.opendj:opendj-dsml-servlet (4.8.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.8.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.1 -...

org.openidentityplatform.openam:openam-slf4j (>=15.1.2, <=15.1.3), org.openidentityplatform.opendj:opendj-dsml-servlet (4.8.2) +5 more potentially affected by CVE-2026-46495 via org.openidentityplatform.opendj:opendj-server-legacy (4.8.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j =15.1.2,...