CVE-2026-54640 | OpenRemote up to 1.24.1 KNX handler KNXProtocol.java KNXProtocol.startAssetImport server-side request forgery

October 13, 2026 Yanac

A vulnerability classified as problematic has been found in OpenRemote up to 1.24.1. The impacted element is the function KNXProtocol.startAssetImport of the file agent/src/main/java/org/openremote/agent/protocol/knx/KNXProtocol.java of the component KNX handler. This manipulation causes server-side request forgery.

This vulnerability is tracked as CVE-2026-54640. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More