CVE-2026-114661

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 22, 2026

Last Seen

October 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-114661 in OpenRemote Allows Unauthorized Gateway Access78.0

OpenRemote version 1.2.0 before 1.31.0 has a missing authorization vulnerability (CVE-2026-114661) in GatewayServiceResource, allowing authenticated users to manipulate gateway tunnels without administrative privileges. Attackers can exploit this flaw by sending POST or DELETE requests to the gatewa...