{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/opstree/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:opstree:rems:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-126769"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["REMS (through 1.0.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["OpsTree"],"content_html":"\u003cp\u003eOpsTree REMS versions through 1.0.0 contain a missing authentication vulnerability that allows unauthenticated remote attackers to access sensitive Governance API endpoints. By sending requests to specific endpoints, such as /api/v1/databases, without an Authorization header or with invalid/tampered JWT tokens, attackers can bypass security controls and retrieve stored database configuration details.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated remote attackers to exfiltrate sensitive information from the application, specifically database host addresses, usernames, and passwords stored within the system. The CVSS v3.1 base score for this vulnerability is 7.5.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eIdentify all instances of OpsTree REMS version 1.0.0 or earlier within the environment.\u003c/li\u003e\n\u003cli\u003eImplement network segmentation or access control lists (ACLs) to restrict access to the Governance API endpoints (e.g., /api/v1/databases) to trusted administrative IP addresses until a patch is applied.\u003c/li\u003e\n\u003cli\u003eMonitor server-side web application logs for HTTP requests to /api/v1/databases that lack valid Authorization headers or contain suspicious/malformed tokens.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-11-11T20:05:04Z","date_published":"2026-11-11T20:05:04Z","id":"https://feed.craftedsignal.io/briefs/2026-11-opstree-rems-auth-bypass-cve-2026-126769/","summary":"OpsTree REMS through version 1.0.0 is susceptible to an authentication bypass vulnerability allowing unauthenticated remote attackers to query sensitive Governance API endpoints.","title":"OpsTree REMS: Authentication bypass in Governance API (CVE-2026-126769)","url":"https://feed.craftedsignal.io/briefs/2026-11-opstree-rems-auth-bypass-cve-2026-126769/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:opstree:rems:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-126768"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["REMS"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["OpsTree"],"content_html":"\u003cp\u003eOpsTree REMS through version 1.0.0 contains an authentication bypass vulnerability. Attackers can send a POST /api/v1/user/login/ request for the admin account with an invalid password and the is_local_auth field set to true to bypass authentication.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated attacker to obtain a valid JWT for an administrative account, resulting in SuperUser administrative access.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eMonitor logs for the POST /api/v1/user/login/ request pattern where the client-controlled is_local_auth field is set to true.\u003c/p\u003e\n","date_modified":"2026-11-11T20:04:08Z","date_published":"2026-11-11T20:04:08Z","id":"https://feed.craftedsignal.io/briefs/2026-11-opstree-rems-auth-bypass-cve-2026-126768/","summary":"OpsTree REMS through version 1.0.0 contains an authentication bypass vulnerability allowing unauthenticated attackers to obtain valid JWTs and gain administrative access via parameter manipulation.","title":"OpsTree REMS: Authentication bypass vulnerability (CVE-2026-126768)","url":"https://feed.craftedsignal.io/briefs/2026-11-opstree-rems-auth-bypass-cve-2026-126768/"}],"language":"en","title":"CraftedSignal Threat Feed - OpsTree","version":"https://jsonfeed.org/version/1.1"}