CVE-2026-73616 in OpenRemote
Riassunto
di MITRE • 13/08/2026
OpenRemote notification deletion endpoints fail to enforce realm boundaries, allowing any realm administrator to delete notifications belonging to other realms. Attackers with write:admin role in one realm can send DELETE requests to remove notifications from the master realm or other tenants without authorization checks.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.