CVE-2026-47426

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the private_key_jwt client authentication path uses ClientJwksResolverCache without reliably binding a cached jwks_uri resolver and verified assertion to the expected clientID in ClientCredentialsReader. An attacker controlling any registered client with published keys, including one obtained through open dynamic registration when enabled, can authenticate as another client whose keys are exposed through jwks_uri and mint tokens in that client's name across realms in the same OpenAM process. This issue is fixed in version 16.1.1.

• CWE-287

• https://github.com/OpenIdentityPlatform/OpenAM/commit/91acaf499162097ec83bcd729275ba7a12e1bd21
• https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/16.1.1
• https://github.com/OpenIdentityPlatform/OpenAM/security/advisories/GHSA-f2cx-463q-7m2c

Published

Sep 15, 2026

Last Modified

Sep 23, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-47419PraisonAI Platform is the platform layer for the PraisonAI m…8.3
• CVE-2026-4742Inconsistent Interpretation of HTTP Requests ('HTTP Request/…2.9
• CVE-2026-47422Frappe is a full-stack web application framework. Prior to 1…5.3
• CVE-2026-47423DOMPurify is a DOM-only cross-site scripting sanitizer for H…8.2
• CVE-2026-47424Open Access Management (OpenAM) is an access management solu…7.5
• CVE-2026-47425Rattler is a library that provides common functionality used…6.9
• CVE-2026-47427GitHub MCP Server is GitHub's official MCP Server. Prior to …7.5
• CVE-2026-47428Vitest is a testing framework powered by Vite. From 4.0.17 u…9.6
• CVE-2026-47429Vitest is a testing framework powered by Vite. Prior to 3.2.…5.9
• CVE-2026-4743NULL Pointer Dereference vulnerability in taurusxin ncmdump …5.2
• CVE-2026-47430## Summary The iOS implementation of `cordova-plugin-inappb…7.5
• CVE-2026-4744Out-of-bounds Read vulnerability in rizonesoft Notepad3 (‎sc…9.3