EUVD-2026-36234

ID: EUVD-2026-36234

Severity: high

CVSS v4: 8.3 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0

Timestamps

Normalized: 2026-06-11T13:15:43Z UTC
Last updated: 2026-06-11T13:15:43Z UTC

References

No references provided.

VulnAI

EUVD-2026-36234

Description

Timestamps

References