Dashboard / CVE-2026-8464

CVE-2026-8464

HIGH
MEDIUM Priority: 0.02 BB Relevance: 62/100
Published: 2026-06-11 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: None
VC: High
VI: None
VA: None

Description

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0

Weakness Classification (1)

References & Advisories (2)

Bug Bounty Relevance

62 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.20%
Raw Score 0.002040
Percentile 10.4%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00204
2026-10-28
0.00204

Intelligence Sources

nvd ref →

External Links