[ Vendor · 3 CVEs ]
openremote
CVEs affecting openremote published in the last 30 days, plus any openremote CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114661 | 22 Oct 2026 | CVSS 8.5 | openremoteOpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start… | |
| CVE-2026-54640 | 13 Oct 2026 | CVSS 7.6 | openremoteOpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in… | |
| CVE-2026-54641 | 13 Oct 2026 | CVSS 7.7 | openremoteOpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealmRoles methods in… |