Deserialization of untrusted data in Openidentityplatform Openam
CVSS Skor
9.8
EPSS İhtimal
%8.4
Risk Skoru
0.8
Yayın
6 ay önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Proof of concept for CVE-2026-33439, an unauthenticated RCE in OpenAM via Java deserialization
Python PoC for CVE-2026-33439, an OpenAM pre-authentication RCE via jato.clientSession deserialization
First publicly shared exploit implementation for CVE-2026-33439 (OpenAM pre-auth RCE via jato.clientSession deserialization).
Vulnerable endpoint description for CVE-2026-33439 in OpenAM
Nuclei: OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization
https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-2cqq-rpvq-g5qj
İlgili Benzer Açıklar
OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI
OpenAM Authentication Bypass via MSISDN LDAP Injection
OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass
OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints
OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-33439"