{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/rems-through-1.0.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:opstree:rems:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-126769"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["REMS (through 1.0.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["OpsTree"],"content_html":"\u003cp\u003eOpsTree REMS versions through 1.0.0 contain a missing authentication vulnerability that allows unauthenticated remote attackers to access sensitive Governance API endpoints. By sending requests to specific endpoints, such as /api/v1/databases, without an Authorization header or with invalid/tampered JWT tokens, attackers can bypass security controls and retrieve stored database configuration details.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated remote attackers to exfiltrate sensitive information from the application, specifically database host addresses, usernames, and passwords stored within the system. The CVSS v3.1 base score for this vulnerability is 7.5.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eIdentify all instances of OpsTree REMS version 1.0.0 or earlier within the environment.\u003c/li\u003e\n\u003cli\u003eImplement network segmentation or access control lists (ACLs) to restrict access to the Governance API endpoints (e.g., /api/v1/databases) to trusted administrative IP addresses until a patch is applied.\u003c/li\u003e\n\u003cli\u003eMonitor server-side web application logs for HTTP requests to /api/v1/databases that lack valid Authorization headers or contain suspicious/malformed tokens.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-11-11T20:05:04Z","date_published":"2026-11-11T20:05:04Z","id":"https://feed.craftedsignal.io/briefs/2026-11-opstree-rems-auth-bypass-cve-2026-126769/","summary":"OpsTree REMS through version 1.0.0 is susceptible to an authentication bypass vulnerability allowing unauthenticated remote attackers to query sensitive Governance API endpoints.","title":"OpsTree REMS: Authentication bypass in Governance API (CVE-2026-126769)","url":"https://feed.craftedsignal.io/briefs/2026-11-opstree-rems-auth-bypass-cve-2026-126769/"}],"language":"en","title":"CraftedSignal Threat Feed - REMS (Through 1.0.0)","version":"https://jsonfeed.org/version/1.1"}