Openremote

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 19
    Known Exploited: 0
    2
    Critical Level Threats
    7
    High Level Threats
    5
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-63224

    OpenRemote has authenticated SQL injection in crosstab datapoint exports

    Last Modified: Oct 30, 2026
    Published: Oct 30, 2026

    CVE-2026-116186

    OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId

    Last Modified: Oct 29, 2026
    Published: Oct 25, 2026

    CVE-2026-116185

    OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos

    Last Modified: Oct 29, 2026
    Published: Oct 25, 2026

    CVE-2026-116184

    OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket

    Last Modified: Nov 04, 2026
    Published: Oct 25, 2026

    CVE-2026-114661

    OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints

    Last Modified: Oct 28, 2026
    Published: Oct 22, 2026
    Items Per Page
    Openremote Vulnerabilities & Security CVEs | CVE-DB