Start for Free
maven

io.openremote:openremote-manager

View on maven registry
7 Total advisories
7 Vulnerabilities
0 Malware

Vulnerabilities

CRITICAL 9.6
Maven

CVE-2026-56784

OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)
UNKNOWN
Maven

GHSA-cgfv-jrfp-2r7v

OpenRemote has Authenticated SQL Injection via Datapoint Crosstab Export
HIGH 7.7
Maven

CVE-2026-54641

OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl
MEDIUM 4.3
Maven

CVE-2026-49439

OpenRemote read-only asset users can write predicted datapoints
HIGH 7.6
Maven

CVE-2026-40882

OpenRemote has XXE in Velbus Asset Import
CRITICAL 9.9
Maven

CVE-2026-39842

Expression Injection in OpenRemote
HIGH 7.0
Maven

CVE-2026-41166

OpenRemote has Improper Access Control via updateUserRealmRoles function

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes