CVE-2026-126769

OpsTree REMS versions through 1.0.0 are vulnerable to a missing authentication flaw in the Governance API. Specifically, the /api/v1/databases endpoint does not properly validate requests, allowing unauthenticated remote attackers to access sensitive information. Attackers can bypass security by ...