Executive brief
Duplicate Advisory: OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)
Affected products
- Maven io.openremote:openremote-manager
Junglewise Threat Intelligence
Duplicate Advisory: OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete)
Severity: low · CVSS 3.1 · Published 2026-06-23
Technologies: io.openremote:openremote-manager (Maven). Vendors: Maven.
Related threats
- OpenRemote is an open-source internet-of-things platform. Prior to version 1.24.1, the predicted datapoint write endpoint allows users with
- OpenRemote SQL injection in datapoint crosstab export
- OpenRemote SQL injection in Datapoint Crosstab Export
- OpenRemote Cross-Realm User Information Disclosure in UserResourceImpl
- OpenRemote Manager removeAlarms cross-realm IDOR