Critical severity · published Oct 13, 2026
CVE-2026-75120
Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents
9.3
CVSS
0.4%
EPSS
No
On KEV
Description
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
Endpoint Forensics & Response · OpenText
through 26.1 · source: vendor
EI
Endpoint Investigator · OpenText
through 26.1 · source: vendor
ES
Endpoint Security · OpenText
through 24.1 · source: vendor
IA
Information Assurance · OpenText
through 26.1 · source: vendor