openremote vulnerabilities | LiveThreat CVE Feed

Product

openremote

by openremote · last CVE Oct 22, 2026

CVEs

On KEV

9.9

Max CVSS

New 30D

Severity mix

Critical 3High 8Medium 4Low 0

Severity

Exploitation

Watch

Add openremote to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-73616	6.5	0%	Aug 13	OpenRemote Notification Delete Cross-Realm Insecure Direct Object Reference Affected: All versions, or not specified
CVE-2026-67310	5.4	0%	Aug 1	openremote before 1.27.0 Cross-Tenant IDOR via setAssetLinks Affected: before 1.27.0
CVE-2026-49439	4.3	0%	Sep 11	OpenRemote read-only asset users can write predicted datapoints Affected: < 1.24.1
CVE-2026-65009	4.3	0%	Jul 21	OpenRemote before 1.26.2 Information Disclosure via Syslog REST API Affected: before 1.26.2