Login Request a demo
OP
Product
openremote
by openremote · last CVE Oct 22, 2026
15
CVEs
0
On KEV
9.9
Max CVSS
3
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 3High 8Medium 4Low 0
Severity
All severities15Critical3High8Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add openremote to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39842
9.9
1%
Apr 14
OpenRemote is Vulnerable to Expression Injection
Affected: < 1.22.0
CVE-2022-31860
9.8
2%
Sep 6
An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule
Affected: through 1.0.4
CVE-2026-66013
9.3
1%
Jul 25
OpenRemote before 1.26.2 Authentication Bypass via Console Registration
Affected: before 1.26.2
Showing 3