VYPR
Unrated severityOSV Advisory· Published Jan 29, 2026· Updated Jan 29, 2026

osim: Path Traversal via query parameters in Nginx configuration

CVE-2026-1616

Description

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.

Affected products

1
  • Range: v2023.11.0, v2023.7.0, v2024.10.0, …

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.