CVE-2026-8464

Vulnerability Description

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0

Related Weaknesses (CWE)

CWE-22

References

https://cert.pl/posts/2026/06/CVE-2026-8464
https://www.neuron.com.pl/mes-help/mes-download.html

FAQ

What is CVE-2026-8464?

CVE-2026-8464 is a documented vulnerability. Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by man...

How severe is CVE-2026-8464?

CVSS scoring is not yet available for CVE-2026-8464. Check NVD for updates.

Is there a patch for CVE-2026-8464?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.