Browse all 18 CVE security advisories affecting openremote. AI-powered Chinese analysis, POCs, and references for each vulnerability.
This page aggregates security vulnerability data specifically for the vendor openremote, focusing on weaknesses found in their IoT management platforms and software tags. The collection encompasses a comprehensive range of reported issues, including remote code execution, authentication bypasses, and privilege escalation flaws, covering the time period from the vendor's initial public releases through the most recent security bulletins. Visitors can utilize this resource to track the historical sequence of vendor advisories, analyze the prevalence and impact of specific weakness classes within the openremote ecosystem, and review the complete vulnerability history for any of their deployed products. By consolidating disparate reports into a single view, this archive enables security professionals to perform efficient risk assessments, monitor emerging threat patterns, and verify the remediation status of known defects across the entire product line. The data presented here serves as a factual reference for audit compliance, incident response planning, and long-term security strategy development without relying on external commercial feeds or fragmented information sources. Users seeking to understand the security posture of openremote solutions will find detailed contextual information regarding affected versions, disclosed attack vectors, and recommended mitigation steps for each recorded entry.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-116186 | OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId — core CWE-639 | 2.3 | Low | 2026-10-25 |
| CVE-2026-116184 | OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket — core CWE-639 | 2.1 | Low | 2026-10-25 |
| CVE-2026-116185 | OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos — core CWE-639 | 5.0 | Medium | 2026-10-25 |
This page lists every published CVE security advisory associated with openremote. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.