Skip to content
OpenAdvisories

Package · Maven

io.openremote:openremote-manager

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-49439

    OpenRemote read-only asset users can write predicted datapoints

    OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with only `read:assets` privileges to write predicted datapoints. Version 1.24.1 fixes the issue.

    openremote openremote io.openremote:openremote-manager Maven