<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: openremote-core</title><description>Every new CVE for openremote-core.</description><link>https://agentprime.io/</link><item><title>CVE-2026-124436: OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources</title><link>https://agentprime.io/advisories/CVE-2026-124436/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-124436/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 08 Nov 2026 13:15:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-124435: OpenRemote before 1.32.2 Stored XSS via Manager Configuration Image Upload</title><link>https://agentprime.io/advisories/CVE-2026-124435/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-124435/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 08 Nov 2026 13:15:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-116186: OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId</title><link>https://agentprime.io/advisories/CVE-2026-116186/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116186/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 25 Oct 2026 13:22:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-116185: OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos</title><link>https://agentprime.io/advisories/CVE-2026-116185/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116185/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 25 Oct 2026 13:22:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-116184: OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket</title><link>https://agentprime.io/advisories/CVE-2026-116184/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116184/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 25 Oct 2026 13:22:08 GMT</pubDate><category>CVE</category></item></channel></rss>