What’s Vulnerable › Products

openremote core vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your openremote core version is affected

Latest openremote core vulnerabilities

• CVE-2026-116184 — OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket (CVSS 2.1)
• CVE-2026-116186 — OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId (CVSS 2.3)
• CVE-2026-116185 — OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos (CVSS 5.0)