CVE-2026-116185 | OpenRemote core up to 1.30.x Gateway Tunnel getGatewayActiveTunnelInfos realm/gatewayId authorization

October 25, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in OpenRemote core up to 1.30.x. The affected element is the function getGatewayActiveTunnelInfos of the component Gateway Tunnel. The manipulation of the argument realm/gatewayId leads to authorization bypass.

This vulnerability is referenced as CVE-2026-116185. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More