CVE-2026-116186: falha de baixa gravidade em openremote core
OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2.3epss 0.2%
OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound edge gateway events and maps event asset IDs only through the reversible GatewayConnector.mapAssetId transform. An attacker controlling a registered gateway can craft pre-image IDs in AttributeEvent or DELETE AssetEvent messages to overwrite attributes on, or delete, assets in any realm, breaking tenant isolation.
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
openremote · coreCVEs relacionadas — openremote core
No mesmo produto, das mais perigosas para as menos.
CVE-2026-124436HIGHOpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global ResourcesEPSS 0.4%CVE-2026-116184LOWOpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via WebsocketEPSS 0.2%CVE-2026-116185MEDIUMOpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfosEPSS 0.2%CVE-2026-124435MEDIUMOpenRemote before 1.32.2 Stored XSS via Manager Configuration Image UploadEPSS 0.2%