Unauthenticated Path Traversal in Golem OEE MES by Neuron

CVE-2026-8464

What is CVE-2026-8464?

The Golem OEE MES software is affected by a vulnerability that enables an unauthenticated path traversal. This issue allows an attacker within the same local network to manipulate HTTP request paths and gain access to arbitrary files on the server's operating system. The vulnerability has been addressed in version 11.6.0 of the software. Ensure that your systems are updated to prevent potential exploitation of this flaw.

References