All vulnerabilities
CVE-2026-75120

Endpoint Investigator: Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents

OpenText Endpoint Investigator
Open in ThreatlineRecord JSON
CVSS
9.3Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.41%Chance of exploitation activity in the next 30 days, higher than 34% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published13 Oct 2026Updated 16 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment

Text from CVE List

Affected versions 4

  • Endpoint Investigatoraffected: all versions through 26.1CVE List
  • Endpoint Forensics & Responseaffected: all versions through 26.1CVE List
  • Information Assuranceaffected: all versions through 26.1CVE List
  • Endpoint Securityaffected: all versions through 24.1CVE List

References 1