core vulnerabilities

1 known vulnerability in core from Openremote. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  core: Incorrect Authorization

  CVE-2026-124436Nov 8, 2026Openremote

  OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /con