ZeroHour

CVE-2026-1616

CVSS 3.1
7.5 high
EPSS
<1%p40
Published
()
Modified
Description

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.

Vendors
redhat
Products
open security issue management
Weakness
CWE-22
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.