CVE-2026-8464

Path traversal in Neuron Soft Golem OEE MES

CVSS 8.3 HIGHEPSS 0.2%CWE-22

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 jun 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Productos afectados

Neuron Soft · Golem OEE MES

Referencias

https://cert.pl/posts/2026/06/CVE-2026-8464 https://www.neuron.com.pl/mes-help/mes-download.html