Skip to content
OpenAdvisories

Product · openremote

core

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2026-124436

    OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources

    OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /co…

    openremote core