VULNRABLE / Vulnerability / CVE-2026-62379
CVE-2026-62379
CRITICAL WATCH org.openidentityplatform.openam:openam-core GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
What this means
CVE-2026-62379 is a critical-severity vulnerability affecting org.openidentityplatform.openam:openam-core, rated CVSS 9.5. Published July 25, 2026.
View full advisory at GHSA →