CVE-2026-1616

High CVSS: 7.5

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.

Vendor

Redhat

Product

Open Security Issue Management

CWE

CWE-22

Yayın Tarihi

2026-01-29 14:16:13

Güncelleme

2026-03-10 17:45:05

Source Identifier

74b3a70d-cca6-4d34-9789-e83b222ae3be

KEV Date Added

Kategoriler

CWE-22 Open Security Issue Management HIGH Redhat 2026

Referanslar

https://github.com/RedHatProductSecurity/osim/pull/615

Benzer Kayıtlar

High

CVE-2026-28369

A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more…

High

CVE-2026-28368

A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where…

Medium

CVE-2026-3121

A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where thi…

Medium

CVE-2026-3190

A flaw was found in Keycloak. The User-Managed Access (UMA) 2.0 Protection API endpoint for permission tickets fails to…

Low

CVE-2026-4874

A flaw was found in Keycloak. An authenticated attacker can perform Server-Side Request Forgery (SSRF) by manipulating t…

Low

CVE-2026-4633

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login…