CVE-2026-126771

OpsTree REMS (versions through 1.0.0) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. This flaw occurs because the application fails to properly neutralize input during web page generation when handling attachment uploads. An authenticated attacker can bypass security by uploa...

CVE-2026-126772

OpsTree REMS versions through 1.0.0 is affected by an improper attribution vulnerability (CWE-863) in the Incident Comment API . This flaw allows authenticated, lower-privileged users to post comments via POST /api/v1/incidents/{incident_id}/comment while spoofing the identity of the incident cre...

CVE-2026-126770

OpsTree REMS through 1.0.0 is vulnerable to a server-side request forgery (SSRF) flaw within the database Test Connection feature. This vulnerability allows authenticated users to force the backend to connect to arbitrary destinations by manipulating a database entry's host and port. Consequently...

CVE-2026-126768

OpsTree REMS versions through 1.0.0 are vulnerable to an authentication bypass vulnerability. An unauthenticated attacker can gain SuperUser administrative access by sending a POST /api/v1/user/login/ request for the admin account. The attack is achieved by providing an invalid password while set...

CVE-2026-126769

OpsTree REMS versions through 1.0.0 are vulnerable to a missing authentication flaw in the Governance API. Specifically, the /api/v1/databases endpoint does not properly validate requests, allowing unauthenticated remote attackers to access sensitive information. Attackers can bypass security by ...

CVE-2026-126766

OpsTree REMS versions through 1.0.0 are affected by an improper authorization vulnerability (CWE-639) regarding incident reporting. An authenticated user can spoof a reporter's identity by supplying a client-controlled reporter field within crafted POST /api/v1/incidents or PATCH /api/v1/incident...

CVE-2026-126767

OpsTree REMS through 1.0.0 contains a prompt injection vulnerability within the RCA Chat Assistant. This flaw allows authenticated users to submit crafted chat input to the POST /api/v1/rca/chat endpoint to disclose hidden system prompts and internal orchestration instructions. By bypassing estab...