OpenText Advanced Authentication Server

• CVE-2026-112256 Critical 9.2 Logon bypass (trust of attacker-controlled completed-methods list) 0.2%
• CVE-2026-112255 Low 2.9 Endpoint credential minting (insecure default allow-list) 0.5%