CVE-2026-75120: Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment
Affected Software
Event History
Frequently Asked Questions
Which OpenText products may have vulnerable Agents deployed?
The affected EnCase SAFE Agents are used by OpenText Endpoint Investigator, OpenText Endpoint Forensics & Response, OpenText Information Assurance, and OpenText Endpoint Security.
Does exploitation require authentication or prior access?
The vulnerability may permit unauthorized or unauthenticated activity. An attacker could establish an unauthorized connection to a vulnerable Agent by bypassing security controls during session establishment.
What security boundary is bypassed during exploitation?
The issue affects intended security controls used when a session is established with an EnCase SAFE Agent. The provided information does not specify the affected Agent versions, configurations, or available mitigations.