Back to search
CVE-2025-15579
Published: Feb 18, 2026
Modified: Feb 27, 2026
PUBLISHED
Description
Deserialization of Untrusted Data vulnerability in OpenText™ Directory Services allows Object Injection. The vulnerability could lead to remote code execution, denial of service, or privilege escalation. This issue affects Directory Services: before 24.4.16, from 25.1 before 25.1.9, from 25.2 before 25.2.9, from 25.3 before 25.3.8, from 25.4 before 25.4.5, from 26.1 before 26.1.2.
| Vendor | Product | Versions |
|---|---|---|
OpenText™ | Directory Services | affected 0 - < 24.4.16affected 25.1 - < 25.1.9affected 25.2 - < 25.2.9affected 25.3 - < 25.3.8affected 25.4 - < 25.4.5+1 more versions |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now