{"vulnerability": "cve-2026-66013", "sightings": [{"uuid": "28168c34-5417-4969-a474-95507a786e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66013", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrvt37wyg42g", "content": "An OpenRemote vulnerability, CVE-2026-66013 (CVSS 9.3), enables unauthenticated asset takeover. Full advisory details are now public. Patch to 1.26.2.\n\n#OpenRemote #CVE202666013 #IoTSecurity #AssetTakeover", "creation_timestamp": "2026-07-31T01:39:29.269187Z"}, {"uuid": "393d81fc-aed6-4e6c-bf96-efa5f47950d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66013", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrhr2nn7kh2a", "content": "CVE-2026-66013 - openremote\nOpenRemote before version 1.26.2 allows attackers to update console settings without a password. This can cause notifications to be sent to the wrong consoles or blocked altogether.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openremote #CVE #infosec", "creation_timestamp": "2026-07-25T11:26:05.628325Z"}, {"uuid": "d6326681-4a57-4d39-b17e-5ccc6106da15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66013", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrigld2ef32d", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-66013](https://github.com/openremote/openremote/security/advisories/GHSA-gpfc-h59v-63cv...\nhttps://github.com/openremote/openremote/security/advisories/GHSA-gpfc-h59v-63cv #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-25T17:51:13.942645Z"}]}