PT-2026-51601

Name of the Vulnerable Software and Affected Versions OpenRemote versions prior to 1.25.0 Description An insecure direct object reference IDOR exists in the bulk alarm deletion endpoint. This occurs because the removeAlarms function in AlarmResourceImpl.java fails to perform realm-scoping...