Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing console assets by supplying a known asset identifier. Attackers can overwrite push notification tokens and console metadata without authentication or ownership validation, redirecting notifications or denying delivery to legitimate consoles.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-25 | 5 | Disclosure3General2 |
| 2026-07-31 | 1 | Patch1 |
An OpenRemote vulnerability, CVE-2026-66013 (CVSS 9.3), enables unauthenticated asset takeover. Full advisory details are now public. Patch to 1.26.2. #OpenRemote #CVE202666013 #IoTSecurity #AssetTakeover http://securityonline.info/openremote-cve-2026-66013/
Post summary
The post announces the disclosure of CVE-2026-66013 with a high severity score and provides a specific patch version to remediate the vulnerability.
OpenRemote <1.26.2 has CVSS 9.3 auth bypass in console registration API. Check exposure if deployed: https://nvd.nist.gov/vuln/detail/CVE-2026-66013 via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/Y8ZJPTg7HO
Post summary
The tweet alerts to CVE-2026-66013, a high‑severity auth bypass in OpenRemote, but offers no evidence of exploitation, PoC, or fixes.
CVE-2026-66013 Authentication Bypass in OpenRemote Console Registration API Befo... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-66013 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
A brief tweet shares a link to a vulnerability alert for CVE‑2026‑66013, noting an authentication bypass issue in OpenRemote Console Registration API and offering subscription links for alerts.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-66013](https://github.com/openremote/openremote/security/advisories/GHSA-gpfc-h59v-63cv... https://github.com/openremote/openremote/security/advisories/GHSA-gpfc-h59v-63cv #ZeroDay #PatchManagement #Vulnerability
Post summary
The note lists CVE‑2026‑66013 and links to a GitHub advisory but offers no detailed vulnerability, exploit, or patch information.
CVE-2026-66013 OpenRemote before 1.26.2 contains an authentication bypass vulnerability in the console registration API that allows unauthenticated attackers to update existing cons… https://www.cve.org/CVERecord?id=CVE-2026-66013
Post summary
A new authentication bypass vulnerability in OpenRemote versions before 1.26.2 allows unauthenticated attackers to update existing console registrations, as reported in the CVE record.
🚨 CRITICAL - OpenRemote console registration auth bypass (CVE-2026-66013) OpenRemote before 1.26.2 has an authentication bypass in the Console Registration API that lets an unauthenticated caller update existing console assets when they know a valid asset identifier. The root cause is broken access control / missing authentication and ownership validation on an update path. An attacker exploits this remotely by sending crafted registration/update requests with a known asset ID, with no credentials required. Impact includes takeover of console metadata and push notification tokens, allowing notification redirection, suppression of legitimate alerts, and operational disruption. 👉 Affected: openremote < 1.26.2 | Upgrade to 1.26.2
Post summary
A critical authentication bypass in OpenRemote’s Console Registration API allows unauthenticated users to modify existing console assets. The only remediation is upgrading to version 1.26.2.