What’s Vulnerable › Vulnerabilities
CVE-2026-8464: Path traversal in Neuron Soft Golem OEE MES
- Severity: high (CVSS 8.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-11 · updated 2026-10-26
- Weakness: CWE-22
Description
Golem OEE MES is vulnerable to an unauthenticated path traversal flaw. This vulnerability allows an attacker in the same local network to read arbitrary files from the server's operating system by manipulating HTTP request paths. This issue has been fixed in version 11.6.0
Affected products
- Neuron Soft Golem OEE MES: before 11.6.0 — fixed in 11.6.0
How to fix
Upgrade to a fixed version: Neuron Soft Golem OEE MES 11.6.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-8464 or the next vulnerability affects your stack