<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: openremote</title><description>Every new CVE for openremote.</description><link>https://agentprime.io/</link><item><title>CVE-2026-114661: OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints</title><link>https://agentprime.io/advisories/CVE-2026-114661/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-114661/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 01:43:45 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-81679: OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API</title><link>https://agentprime.io/advisories/CVE-2026-81679/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-81679/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 27 Aug 2026 14:50:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-73616: OpenRemote Notification Delete Cross-Realm Insecure Direct Object Reference</title><link>https://agentprime.io/advisories/CVE-2026-73616/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73616/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Aug 2026 11:28:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-67310: openremote before 1.27.0 Cross-Tenant IDOR via setAssetLinks</title><link>https://agentprime.io/advisories/CVE-2026-67310/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-67310/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 01 Aug 2026 12:22:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-66013: OpenRemote before 1.26.2 Authentication Bypass via Console Registration</title><link>https://agentprime.io/advisories/CVE-2026-66013/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-66013/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 25 Jul 2026 10:45:56 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-65009: OpenRemote before 1.26.2 Information Disclosure via Syslog REST API</title><link>https://agentprime.io/advisories/CVE-2026-65009/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65009/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 11:39:57 GMT</pubDate><category>CVE</category></item></channel></rss>