openremote kayıtları
openremote üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %80
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-284 Improper Access Control1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2022-31860İstismar yok | An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule.openremote · openremote · CWE-94 | Kritik9,8 | — | %2,3 | 6 Eyl 2022 |
39İzleyin | CVE-2026-39842Kavram kanıtı | OpenRemote is Vulnerable to Expression Injectionopenremote · openremote · CWE-94 | Kritik9,9 | — | %0,9 | 15 Nis 2026 |
30İzleyin | CVE-2026-40882İstismar yok | OpenRemote has XXE in Velbus Asset Importopenremote · openremote · CWE-611 | Yüksek7,6 | — | %0,4 | 22 Nis 2026 |
28İzleyin | CVE-2026-62238İstismar yok | OpenRemote < 1.26.0 SQL Injection via Crosstab Exportopenremote · openremote · CWE-89 | Yüksek7,2 | — | %0,5 | 16 Tem 2026 |
28İzleyin | CVE-2026-41166İstismar yok | OpenRemote has Improper Access Control via updateUserRealmRoles functionopenremote · openremote · CWE-284 | Yüksek7,0 | — | %0,3 | 22 Nis 2026 |
- CVE-2022-3186040Planlayın
An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule.
KritikCVSS 9,8İstismar yokEPSS %2openremote · openremote6 Eyl 2022
- CVE-2026-3984239İzleyin
OpenRemote is Vulnerable to Expression Injection
KritikCVSS 9,9Kavram kanıtıEPSS %1openremote · openremote15 Nis 2026
- CVE-2026-4088230İzleyin
OpenRemote has XXE in Velbus Asset Import
YüksekCVSS 7,6İstismar yokEPSS %0openremote · openremote22 Nis 2026
- CVE-2026-6223828İzleyin
OpenRemote < 1.26.0 SQL Injection via Crosstab Export
YüksekCVSS 7,2İstismar yokEPSS %0openremote · openremote16 Tem 2026
- CVE-2026-4116628İzleyin
OpenRemote has Improper Access Control via updateUserRealmRoles function
YüksekCVSS 7,0İstismar yokEPSS %0openremote · openremote22 Nis 2026