From https://github.com/openremote/openremote
 * tag                   1.25.0     -> FETCH_HEAD
 * tag                   1.26.2     -> FETCH_HEAD
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
VULNERABLE_ATTEMPT_1_CONFIRMED: anonymous known-ID request overwrote owner-linked console metadata and push token.
VULNERABLE_ATTEMPT_2_CONFIRMED: anonymous known-ID request overwrote owner-linked console metadata and push token.
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
curl: (7) Failed to connect to 127.0.0.1 port 8081 after 0 ms: Could not connect to server
FIXED_ATTEMPT_1_CONFIRMED: HTTP 403 and original owner-linked console state retained.
FIXED_ATTEMPT_2_CONFIRMED: HTTP 403 and original owner-linked console state retained.
REPRODUCTION_SUCCESS: CVE-2026-66013 confirmed through the real OpenRemote HTTP API with repeated fixed-version negative controls.