CVE-2026-116186 | OpenRemote up to 1.30.x GatewayConnector GatewayConnector.mapAssetId improper authorization

October 25, 2026 Yanac

A vulnerability was found in OpenRemote up to 1.30.x and classified as critical. This impacts the function GatewayConnector.mapAssetId of the component GatewayConnector. Such manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-116186. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More