All 7 CVE vulnerabilities found in REMS, with AI-generated Chinese analysis, references, and POCs.
Vendor: OpsTree Solutions
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-126772 | OpsTree REMS through 1.0.0 Comment Author Spoofing via Incident Comment API CWE-863 | 4.3 | Medium | 2026-11-11 |
| CVE-2026-126770 | OpsTree REMS through 1.0.0 SSRF via Database Test Connection CWE-918 | 5.0 | Medium | 2026-11-11 |
| CVE-2026-126771 | OpsTree REMS through 1.0.0 Stored XSS via Attachment Upload and Preview CWE-79 | 5.4 | Medium | 2026-11-11 |
| CVE-2026-126769 | OpsTree REMS through 1.0.0 Missing Authentication via /api/v1/databases Governance API CWE-306 | 7.5 | High | 2026-11-11 |
| CVE-2026-126767 | OpsTree REMS through 1.0.0 Prompt Injection via RCA Chat Assistant CWE-1427 | 4.3 | Medium | 2026-11-11 |
| CVE-2026-126768 | OpsTree REMS through 1.0.0 Authentication Bypass via is_local_auth Flag CWE-287 | 9.8 | Critical | 2026-11-11 |
| CVE-2026-126766 | OpsTree REMS through 1.0.0 Reporter Spoofing via /api/v1/incidents CWE-639 | 4.3 | Medium | 2026-11-11 |
All 7 known CVE vulnerabilities affecting REMS with full Chinese analysis, references, and POCs where available.