CVE-2026-105115

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes without authentication. Attackers can send SOAP requests to /jaxrpc/* with an unverified session identifier and a chosen class name, crashing the server, probing the classpath, or potentially reaching code execution via gadget chains.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Peaked 1d ago at 1 mentions (2026-10-03); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Referenced assets2 URLs

By indicator

Full discourse2 posts

ThreatAft@ThreatAft22h
🔐 OpenAM Cluster — 8 CVEs, Peak CVSS 8.6 Unauthenticated JAX-RPC Class Instantiation Eight vulnerabilities in OpenAM were disclosed on October 2, 2026. CVE-2026-105115 (CVSS 8.6) Fixed in 16.1.3. RESTRICT /jaxrpc/*. 🔗 https://threataft.com/articles/openam-cluster-cve-2026-105115-105119-105117-105122-105118-105120-105116-105114?utm_source=twitter&utm_medium=social&utm_campaign=share #CyberSecurity #ThreatIntel
0000034
45 followersView on X
CVE@CVEnew1d
CVE-2026-105115 OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to lo… https://www.cve.org/CVERecord?id=CVE-2026-105115
000001.3K
58.1K followersView on X

Explore more

Back to dashboard