OpenRemote

Platform

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

July 25, 2026

Last Seen

July 26, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (1)

Critical Authentication Bypass Vulnerability in OpenRemote Disclosed

Jul 26·3 sources

Related Articles (2)

CVE-2026-66013 INCIBE-CERT - Vulnerabilities RSS / 1d OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without authentication or ownership validation, redirecting notifications or denying delivery to legitimate consoles.

www.incibe.es·Jul 26

CVE-2026-66013 - Exploits & Severity

Related Entities

Data Breach Zero-day Exploit CVE-2026-66013 CWE-287 - Improper Authentication