Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-75120: OpenText EnCase SAFE Agents may let attackers run code
CVE-2026-75120 · published 2 days ago
Summary
The EnCase SAFE Agents used in OpenText Endpoint Investigator, Endpoint Forensics & Response, Information Assurance, and Endpoint Security can be tricked into allowing an attacker to connect without proper authentication. This could let an unauthorized user execute commands on the affected system. Apply the latest vendor updates and restrict network access to these agents until the fix is installed.
What to do
- Update opentext endpoint investigator to version SAFE 25.4.3.
- Update opentext endpoint forensics & response to version SAFE 25.4.3.
- Update opentext information assurance to version SAFE 25.4.3.
- Update opentext endpoint security to version SAFE 25.1.2.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| opentext | endpoint investigator |
<= 26.1 Fix: upgrade to SAFE 25.4.3
|
| opentext | endpoint forensics & response |
<= 26.1 Fix: upgrade to SAFE 25.4.3
|
| opentext | information assurance |
<= 26.1 Fix: upgrade to SAFE 25.4.3
|
| opentext | endpoint security |
<= 24.1 Fix: upgrade to SAFE 25.1.2
|
Original advisory text
Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment
Severity
9.3
Critical
Type
CWE-290Authentication Bypass by Spoofing
Timeline
Published13 Oct 2026
Updated15 Oct 2026
First seen13 Oct 2026
Track software like this
Free during beta