O
Vendor security profile
openremote
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical0
CISA KEV0
Public exploit0
Patch rate—
Avg. CVSS—
12-month vulnerability rate
CVE KEV
CVE severity distribution
9toplam CVE
Uncertain9 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
9Unknown
Latest vulnerabilities
7.7
CVE-2026-54641OpenRemote: Cross-Realm User Information Disclosure in UserResourceImpl
Patch verifiedEPSS %0
4.3
CVE-2026-49439OpenRemote read-only asset users can write predicted datapoints
Patch verifiedEPSS %0
7.1
5.3
CVE-2026-67310openremote before 1.27.0 Cross-Tenant IDOR via setAssetLinks
Patch status unknownEPSS %0
5.3
7.2
CVE-2026-62238OpenRemote < 1.26.0 SQL Injection via Crosstab Export
Patch status unknownEPSS %0
8.6
CVE-2026-56784OpenRemote < 1.25.0 IDOR via Bulk Alarm Deletion Endpoint
Patch status unknownEPSS %0