Report: CVE-2026-8736 - Oinone Pamirs RestController LocalFileClient.java request.getParameter path trave

Report: CVE-2026-8736 - Oinone Pamirs RestController LocalFileClient.java request.getParameter path trave

CVE ID :CVE-2026-8736 Published : May 17, 2026, 7:16 a.m. | 1 hour ago Description :A security flaw has been discovered in Oinone Pamirs up to 7.2.0. This vulnerability affects the function request.getParameter of the file LocalFileClient.java of the component RestController. Performing a manipulation of the argument uniqueFileName results in path traversal. The attack may be carried out on the physical device. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
May 17, 2026
Affected Product: java
Attack Vector: physical
Impact: path traversal