CVE-2026-1616 osim: Path Traversal via query parameters in Nginx configuration

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management OSIM prior v2025.9.0 allows path traversal attacks via query parameters...

PT-2026-5268

Name of the Vulnerable Software and Affected Versions Open Security Issue Management OSIM versions prior to 2025.9.0 Description A path traversal issue exists in Open Security Issue Management OSIM due to the concatenation of $uri$args within the nginx configuration file. This allows attackers to...

CVE-2026-1616: Improper Limitation of a Pathname to a Restricted Directory

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management OSIM prior v2025.9.0 allows path traversal attacks via query parameters...