core
- Software type
- Other
- Total vulnerabilities (90 days)
- 5
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, core recorded 5 security vulnerabilities in the last 90 days, of which 1 is rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of core and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-124436OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global ResourcesCVE-2026-124435OpenRemote before 1.32.2 Stored XSS via Manager Configuration Image UploadCVE-2026-116186OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetIdCVE-2026-116185OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfosCVE-2026-116184OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-124436OpenRemote before 1.32.2 Improper Authorization Allows Realm Admins to Modify Global Resources | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityHigh |
CVE-2026-124435OpenRemote before 1.32.2 Stored XSS via Manager Configuration Image Upload | Exploitation statusNot confirmed | FixYes | Published11/08/2026 | SeverityMedium |
CVE-2026-116186OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId | Exploitation statusActively exploited | FixYes | Published10/25/2026 | SeverityLow |
CVE-2026-116185OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfos | Exploitation statusActively exploited | FixYes | Published10/25/2026 | SeverityMedium |
CVE-2026-116184OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket | Exploitation statusNot confirmed | FixYes | Published10/25/2026 | SeverityLow |
5 Results | Page 1 of 1