Browse all 7 CVE security advisories affecting OpsTree Solutions. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-126772 | OpsTree REMS through 1.0.0 Comment Author Spoofing via Incident Comment API — REMS CWE-863 | 4.3 | Medium | 2026-11-11 |
| CVE-2026-126770 | OpsTree REMS through 1.0.0 SSRF via Database Test Connection — REMS CWE-918 | 5.0 | Medium | 2026-11-11 |
| CVE-2026-126771 | OpsTree REMS through 1.0.0 Stored XSS via Attachment Upload and Preview — REMS CWE-79 | 5.4 | Medium | 2026-11-11 |
| CVE-2026-126769 | OpsTree REMS through 1.0.0 Missing Authentication via /api/v1/databases Governance API — REMS CWE-306 | 7.5 | High | 2026-11-11 |
| CVE-2026-126767 | OpsTree REMS through 1.0.0 Prompt Injection via RCA Chat Assistant — REMS CWE-1427 | 4.3 | Medium | 2026-11-11 |
| CVE-2026-126768 | OpsTree REMS through 1.0.0 Authentication Bypass via is_local_auth Flag — REMS CWE-287 | 9.8 | Critical | 2026-11-11 |
| CVE-2026-126766 | OpsTree REMS through 1.0.0 Reporter Spoofing via /api/v1/incidents — REMS CWE-639 | 4.3 | Medium | 2026-11-11 |
This page lists every published CVE security advisory associated with OpsTree Solutions. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.