Back to the CVE list

CVE-2026-33439

Deserialization of untrusted data in Openidentityplatform Openam

CVSS score

9.8

EPSS probability

%8.4

Risk score

0.8

Published

6 mo ago

Overview Public Exploits (8)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.8

CVE-2026-62379OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback

Vendoropenidentityplatform Productopenam+2 etkilenen

Patch verifiedEPSS %11 mo ago

9.2

CVE-2026-46495OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

Vendoropenidentityplatform ProductOpenDJ+2 etkilenen

Patch status unknownEPSS %11 mo ago

9.3

CVE-2026-46619OpenAM Authentication Bypass via MSISDN LDAP Injection

Vendoropenidentityplatform Productopenam

Patch status unknownEPSS %11 mo ago

9.2

CVE-2026-62263OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass

Vendoropenidentityplatform Productopenam

Patch status unknownEPSS %11 mo ago

9.3

CVE-2026-45052OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints

Vendoropenidentityplatform Productopenam

Patch status unknownEPSS %11 mo ago

9.2

CVE-2026-45051OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage

Vendoropenidentityplatform Productopenam

Patch status unknownEPSS %11 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-33439"