CVE-2026-116186

The OpenRemote core (openremote-manager) before version 1.31.0 is vulnerable to a gateway authorization bypass . The root cause is that the system fails to perform realm or gateway-descendant authorization on inbound edge gateway events, relying instead on a reversible GatewayConnector.mapAssetId...