CVE-2026-11877: Missing Authorization Vulnerability in OpenText Access Manager
Published Jun 24, 2026
·Updated
An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue affects Access Manager before 5.1.3.
Affected Software
4 affected components
OpenText Access Manager<5.1.3
Microfocus Access Manager>=5.0<5.1
Microfocus Access Manager=5.1
Microfocus Access Manager=5.1-patch_update_2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenText Access Managerto a version that resolves this vulnerability.Fixed in 5.1.3
Event History
Jun 24, 2026
CVE Published
via MITRE·02:01 PM
Data Sourced
via MITRE·02:01 PM
DescriptionWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-11877?
CVE-2026-11877 has a risk severity rating of 71.
2
How do I fix CVE-2026-11877?
To fix CVE-2026-11877, upgrade OpenText Access Manager to version 5.1.3 or later.
3
What impact does CVE-2026-11877 have on OpenText Access Manager?
CVE-2026-11877 allows unauthorized users to modify configurations through API calls.
4
Which versions of OpenText Access Manager are affected by CVE-2026-11877?
CVE-2026-11877 affects all versions of OpenText Access Manager prior to 5.1.3.
5
Is there a known exploit for CVE-2026-11877?
Yes, CVE-2026-11877 is vulnerable to exploitation by unauthorized users who can make API calls.