PT-2026-64322

Name of the Vulnerable Software and Affected Versions pki-core affected versions not specified Description A flaw exists in the certificate authority CA renewal request path. Unlike the enrollment path, the renewal process fails to perform realm-based authorization checks. This allows an...

PT-2026-55487

Summary OpenRemote Manager is vulnerable to a cross-tenant Insecure Direct Object Reference IDOR in the bulk alarm deletion endpoint. An authenticated user in any realm can delete alarms belonging to other realms tenants by supplying arbitrary alarm IDs. The vulnerability exists because the bulk...