CVE-2026-41573 in OpenAM

Prediction

by VulDB Data Team • 06/23/2026

A vulnerability was found in OpenIdentityPlatform OpenAM 15.0.4/16.0.0. This vulnerability affects unknown code. The manipulation of the argument _queryId results in ldap injection. It is possible to launch the attack remotely. Upgrading to version 16.1.1 is able to resolve this issue. It is advisable to upgrade the affected component.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Moderation: accepted
• Entry: VDB-372871
• CPE: ready
• CWE: CWE-90 (confirmed)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-41573
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-41573
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-41573/