CVE-2026-112255 is a vulnerability in OpenText Advanced Authentication Server versions 6.4.0.0 through 6.4.3.x, 6.5.0.0 through 6.5.0.x, and 6.6.0.0 through 6.6.1.0. It involves initialization of a resource with insecure default settings that allow excessive allocation. The issue arises from allowing creation or recreation of Unauthenticated Endpoints without proper network restrictions. The recommended fix is to configure the system to disallow creation/recreation of Unauthenticated Endpoints or restrict this capability to trusted networks via a non-empty whitelist. The 6.6.2.0 release includes best practice guidance for secure configuration.