CVE-2026-126768

OpsTree REMS versions through 1.0.0 are vulnerable to an authentication bypass vulnerability. An unauthenticated attacker can gain SuperUser administrative access by sending a POST /api/v1/user/login/ request for the admin account. The attack is achieved by providing an invalid password while set...