critical9.6
CVE-2026-56120
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-56784.
Impact
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it's a duplicate of CVE-2026-56784.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.openremote:openremote-manager | < 1.25.0 | 1.25.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-h3m5-97jq-qjrf
- https://github.com/openremote/openremote/security/advisories/GHSA-h3m5-97jq-qjrf
- https://github.com/openremote/openremote/blob/master/manager/src/main/java/org/openremote/manager/alarm/AlarmResourceImpl.java
- https://github.com/openremote/openremote/blob/master/manager/src/main/java/org/openremote/manager/alarm/AlarmService.java
- https://github.com/openremote/openremote/commit/9fad55e5a448c82772d241d395826e5d6fe1ce2d
- https://nvd.nist.gov/vuln/detail/CVE-2026-56120
- https://github.com/openremote/openremote/releases/tag/1.25.0
- https://www.vulncheck.com/advisories/openremote-idor-via-bulk-alarm-deletion-endpoint