Answer in brief
CVE-2026-75120 records a Critical severity (CVSS 9.3) vulnerability in Remote Code Execution (RCE) vulnerability identified in the OpenText™ EnCase SAFE Agents. The current sources do not mark it as known exploited. The current feed maps OpenText/Endpoint Forensics & Response (generic), OpenText/Endpoint Investigator (generic), OpenText/Endpoint Security (generic), OpenText/Information Assurance (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 9.3. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps OpenText/Endpoint Forensics & Response (generic), OpenText/Endpoint Investigator (generic), OpenText/Endpoint Security (generic), OpenText/Information Assurance (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| OpenText/Endpoint Forensics & Responsegeneric | >=0 <=26.1 | Not reported |
| OpenText/Endpoint Investigatorgeneric | >=0 <=26.1 | Not reported |
| OpenText/Endpoint Securitygeneric | >=0 <=24.1 | Not reported |
| OpenText/Information Assurancegeneric | >=0 <=26.1 | Not reported |
Published upstream
Oct 13, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 13, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 13, 2026
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment
Quoted source text, attributed separately from HOL analysis.