PT-2026-5268 · Unknown · Open Security Issue Management

Moritz Oehrlein · Publicado 2026-01-29 · Atualizado 2026-03-10 · CVE-2026-1616

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Open Security Issue Management (OSIM) versions prior to 2025.9.0

Description A path traversal issue exists in Open Security Issue Management (OSIM) due to the concatenation of $uri$args` within the nginx configuration file. This allows attackers to potentially access unauthorized files through crafted query parameters.

Recommendations Update to version 2025.9.0 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-1616

Produtos afetados

Open Security Issue Management

Referências · 5

• https://github.com/RedHatProductSecurity/osim/pull/615 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-1616 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-1616 · Nota de Segurança
• https://twitter.com/CVEnew/status/2016881159536558427 · Publicação no Twitter
• https://t.me/cveNotify/154939 · Publicação no Telegram