Approved changes feed: RSS · Atom
cpe:2.3:a:openremote:core:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Openremote (66c5d099-c251-511e-b323-812340975dc2) |
|---|---|
| Product | Core (fa05186d-287d-5354-ae75-d901a243ffa2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-116185 |
vulnerable | 2026-11-03 10:15:22.004796 |
OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos
MEDIUM (5)
OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read other realms' gateway tunnel information via getGatewayActiveTunnelInfos. Attackers can request the gateway tunnel endpoint with their own realm and a victim gateway ID to disclose internal target hosts, ports, and routing data.
Published: 2026-10-25T13:22:09.474Z
Updated: 2026-10-29T20:06:21.715Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116184 |
vulnerable | 2026-11-03 10:15:21.886353 |
OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket
OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways in other realms because GatewayService only checks the gateway ID, not the realm. Attackers with WRITE:ADMIN in one realm can create a service user named after another realm's gateway ID to overwrite its descendant assets and open SSH tunnels into its local network.
Published: 2026-10-25T13:22:08.792Z
Updated: 2026-11-04T18:58:50.671Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-116186 |
vulnerable | 2026-11-03 10:15:21.657409 |
OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId
OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound edge gateway events and maps event asset IDs only through the reversible GatewayConnector.mapAssetId transform. An attacker controlling a registered gateway can craft pre-image IDs in AttributeEvent or DELETE AssetEvent messages to overwrite attributes on, or delete, assets in any realm, breaking tenant isolation.
Published: 2026-10-25T13:22:10.154Z
Updated: 2026-10-29T16:21:35.837Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.