CVE-2026-1616 in osim

Riassunto

di MITRE • 29/01/2026

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: Redhat-cnalr
• Prenotare: 29/01/2026
• Divulgazione: 29/01/2026
• Moderazione: accettato
• Voce: VDB-343381
• CPE: pronto
• CWE: CWE-22 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.00460
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-1616
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-1616
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-1616/