CVE-2026-124435 | OpenRemote up to 1.32.1 Manager configuration file upload cross site scripting

November 8, 2026 Yanac

A vulnerability described as problematic has been identified in OpenRemote up to 1.32.1. Affected by this vulnerability is an unknown functionality of the component Manager configuration file upload. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-124435. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More