Skip to content

CVE record · 1 source

CVE-2026-126772

CVSS 4.3

OpsTree REMS through 1.0.0 contains an improper attribution vulnerability that allows authenticated users to post comments as the incident creator…

Vendor: OpsTree Solutions
Product: REMS
CVSS v3.1: 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-863

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

9

CVE NVD 2d ago

OpsTree REMS through 1.0.0 contains an improper attribution vulnerability that allows authenticated users to post comments as the incident creator…

OpsTree REMS through 1.0.0 contains an improper attribution vulnerability that allows authenticated users to post comments as the incident creator via POST /api/v1/incidents/{incident_id}/comment. Lower-privileged attackers can…

CVSS 4.3 CVE-2026-126772 OpsTree Solutions