openremote core vulnerabilities
5 published CVEs name openremote core among the affected products.
- Published CVEs
- 5
- Last 12 months
- 5
- Critical
- 0
- Known exploited
- 0
Critical 0High 1Medium 2Low 2Not scored 0
Newest CVEs
- CVE-2026-124436
OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources
openremote · core
High8.6 - CVE-2026-124435
OpenRemote before 1.32.2 Stored XSS via Manager Configuration Image Upload
openremote · core
Medium4.6 - CVE-2026-116186
OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId
openremote · core
Low2.3 - CVE-2026-116185
OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos
openremote · core
Medium5.3 - CVE-2026-116184
OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket
openremote · core
Low2.1