Skip to content
Threat Feed
Subscribe

Tag

Opendj

1 brief RSS
critical advisory

OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI (CVE-2026-46495)

A critical pre-authentication remote code execution (RCE) vulnerability, CVE-2026-46495, exists in OpenDJ Community Edition affecting versions up to 5.1.0, where a deserialization of untrusted data issue in the JMX RMI connector allows unauthenticated attackers with TCP reachability to the JMX listener to execute arbitrary Java objects, potentially leading to full system compromise.

OpenDJ Community Edition <= 5.1.0 +1 java deserialization rce opendj jmx-rmi pre-auth network
2t