https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-26T19:57:20.543818+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116185 fkie_cve-2026-116185 2026-10-26T19:57:20.557768+00:00

OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read other realms' gateway tunnel information via getGatewayActiveTunnelInfos. Attackers can request the gateway tunnel endpoint with their own realm and a victim gateway ID to disclose internal target hosts, ports, and routing data.

 https://db.gcve.eu/vuln/ghsa-6f5f-g69g-4546 GHSA-6f5f-g69g-4546 2026-10-26T19:57:20.557887+00:00

OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read other realms' gateway tunnel information via getGatewayActiveTunnelInfos. Attackers can request the gateway tunnel endpoint with their own realm and a victim gateway ID to disclose internal target hosts, ports, and routing data.