Vulnerabilities in openremote

4 results

CVE-2026-39842CRITICALOpenRemote is Vulnerable to Expression InjectionEPSS 0.9%CVE-2026-41166HIGHOpenRemote has Improper Access Control via updateUserRealmRoles functionEPSS 0.3%CVE-2026-56784HIGHOpenRemote Manager - Cross-Tenant IDOR in Bulk Alarm DeletionEPSS 0.3%CVE-2026-40882HIGHOpenRemote has XXE in Velbus Asset ImportEPSS 0.2%