Skip to content

CVE record · 1 source

CVE-2026-126766

CVSS 4.3

OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an incident's reporter to another…

Vendor: OpsTree Solutions
Product: REMS
CVSS v3.1: 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-639

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

9

CVE NVD 2d ago

OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an incident's reporter to another…

OpsTree REMS through 1.0.0 contains an improper authorization vulnerability that allows authenticated users to set an incident's reporter to another user by supplying a client-controlled reporter field. Attackers can send crafted…

CVSS 4.3 CVE-2026-126766 OpsTree Solutions