https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 00:38:27 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-124436 <p>OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other realms&#39; console authentication for credential phishing, inject CSS, replace map tiles, and delete logs.</p> <p>OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other realms&#39; console authentication for credential phishing, inject CSS, replace map tiles, and delete logs.</p> https://db.gcve.eu/vuln/fkie_cve-2026-124436 https://db.gcve.eu/vuln/ghsa-cm8m-mhv8-9v9v <p>OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other realms&#39; console authentication for credential phishing, inject CSS, replace map tiles, and delete logs.</p> <p>OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. Attackers can change the global keycloakUrl via /configuration/manager to redirect other realms&#39; console authentication for credential phishing, inject CSS, replace map tiles, and delete logs.</p> https://db.gcve.eu/vuln/ghsa-cm8m-mhv8-9v9v