CVE-2026-63224 | OpenRemote up to 1.25.x Datapoint Export sql injection

October 31, 2026 Yanac

A vulnerability was found in OpenRemote up to 1.25.x and classified as critical. Affected by this vulnerability is an unknown functionality of the component Datapoint Export. Such manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-63224. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More