Skip to content
Noroxi

maximthomas

8 credited records · 8 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for maximthomas

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-105122
    21Monitor

    OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri

    MediumCVSS 5.3No exploitEPSS 0%

    openidentityplatform · openamOct 3, 2026

  • CVE-2026-105121
    27Monitor

    OpenAM before 16.1.3 Improper Authorization in Delegated Session-Destroy Realm Scoping

    MediumCVSS 6.9No exploitEPSS 0%

    openidentityplatform · openamOct 3, 2026

  • CVE-2026-105120
    27Monitor

    OpenAM before 16.1.3 Cross-Realm Session Disclosure via Sessions REST Endpoint

    MediumCVSS 6.9No exploitEPSS 0%

    openidentityplatform · openamOct 3, 2026

  • CVE-2026-105119
    30Monitor

    OpenAM before 16.1.3 PKCE Enforcement Bypass via OAuth 2.0 Hybrid Flows

    HighCVSS 7.6No exploitEPSS 0%

    openidentityplatform · openamOct 3, 2026

  • CVE-2026-105118
    9Monitor

    OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession

    LowCVSS 2.3No exploitEPSS 0%

    openidentityplatform · openamOct 3, 2026

  • CVE-2026-105117
    21Monitor

    OpenAM before 16.1.3 Email Content Injection via Users REST Self-Service Actions

    MediumCVSS 5.3No exploitEPSS 0%

    openidentityplatform · openamOct 3, 2026

  • CVE-2026-105116
    20Monitor

    OpenAM before 16.1.3 Latent XSS in SAML Load-Balancer Cookie Bounce Page

    MediumCVSS 5.1No exploitEPSS 0%

    openidentityplatform · openamOct 3, 2026

  • CVE-2026-105115
    35Monitor

    OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instantiation via JAX-RPC Interface

    HighCVSS 8.8No exploitEPSS 0%

    openidentityplatform · openamOct 3, 2026