1. Home
  2. CVE Database
  3. CVE-2026-11877
HIGH · 7.5

CVE-2026-11877

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

Vulnerability Description

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
MicrofocusAccess Manager>= 5.0, < 5.1

Related Weaknesses (CWE)

CWE-648

References

FAQ

What is CVE-2026-11877?

CVE-2026-11877 is a vulnerability with a CVSS score of 7.5 (HIGH). An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.

How severe is CVE-2026-11877?

CVE-2026-11877 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-11877?

Check the references section above for vendor advisories and patch information. Affected products include: Microfocus Access Manager.