Advisories · Technology
openremote.
Every CVE that names openremote among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.0 CriticalCritical · CVSS 9+
OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints
- openremote
- Broken access control
- CVSS 8.3 High
OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API
- openremote
- Information disclosure
- CVSS 7.1 High
OpenRemote Notification Delete Cross-Realm Insecure Direct Object Reference
- openremote
- Broken access control
- CVSS 5.3 Medium
openremote before 1.27.0 Cross-Tenant IDOR via setAssetLinks
- openremote
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
OpenRemote before 1.26.2 Authentication Bypass via Console Registration
- openremote
- Broken access control
- CVSS 5.3 Medium
OpenRemote before 1.26.2 Information Disclosure via Syslog REST API
- openremote
- Information disclosure