Path traversal in Neuron Soft Golem OEE MES
CVE-2026-8464

8.3HIGH

Key Information:

Vendor: Neuron Soft
Status: Golem Oee Mes
Vendor: CVE Published:; 11 June 2026

🔔 Create Neuron Soft Vulnerability Alert

What is CVE-2026-8464?

Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0

Affected Version(s)

Golem OEE MES 0 < 11.6.0

References

https://www.neuron.com.pl/mes-help/mes-download.html

release-notes

https://cert.pl/posts/2026/06/CVE-2026-8464

third-party-advisory

CVSS V4

Score:

8.3

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 11, 2026
Vulnerability Reserved
May 13, 2026

Credit

Karol Królak (securitum.pl)

CVE-2026-8464 Data

JSON