CVE-2026-62238 | OpenRemote 1.22.0/1.22.1/1.24.2 Datapoint Crosstab Export Endpoint asset name sql injection

July 17, 2026 Yanac

A vulnerability, which was classified as critical, has been found in OpenRemote 1.22.0/1.22.1/1.24.2. This vulnerability affects unknown code of the component Datapoint Crosstab Export Endpoint. This manipulation of the argument asset name causes sql injection.

This vulnerability appears as CVE-2026-62238. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More