CVE-2026-66013

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

July 25, 2026

Last Seen

July 26, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Authentication Bypass Vulnerability in OpenRemote Disclosed72.9

OpenRemote versions prior to 1.26.2 have been found to contain an authentication bypass vulnerability in the console registration API. This flaw allows unauthenticated attackers to update existing console assets by providing a known asset identifier. Attackers can overwrite push notification tokens...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Authentication Bypass Vulnerability in OpenRemote Disclosed

Jul 26·3 sources

Related Articles (3)

CVE-2026-66013: OpenRemote before 1.26.2 Authentication Bypass via Console Registration [CRITICAL] Exploit Intelligence — Recent CVEs / 1d OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without authen

exploit-intel.com·Jul 26

CVE-2026-66013 INCIBE-CERT - Vulnerabilities RSS / 1d OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without authentication or ownership validation, redirecting notifications or denying delivery to legitimate consoles.

www.incibe.es·Jul 26

CVE-2026-66013 - Exploits & Severity

Related Entities

Data Breach Zero-day Exploit CWE-287 - Improper Authentication OpenRemote