CVE-2026-8464

Path traversal in Neuron Soft Golem OEE MES

CVSS 8.3 HIGHEPSS 0.2%CWE-22

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Jun 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Affected products

Neuron Soft · Golem OEE MES

References

https://cert.pl/posts/2026/06/CVE-2026-8464 https://www.neuron.com.pl/mes-help/mes-download.html