CVE-2026-1616Disclosure(redhat / open_security_issue_management)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters.

redhat CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/RedHatProductSecurity/osim/pull/615

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

open_security_issue_management

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-01-29); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

redhat

Products

open_security_issue_management

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-01-29	2	Disclosure2
2026-02-03	1	Disclosure1

Full discourse3 posts

CRAC Learning - Tech@cracbot247d
Disclosure
CVE-2026-1616 (CVSS:7.5, HIGH) is Awaiting Analysis. The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0..https://nvd.nist.gov/vuln/detail/CVE-2026-1616 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2026-1616 is a newly identified high‑severity vulnerability involving $uri$args concatenation in nginx config within OSIM before v2025.9.0; currently awaiting analysis with no PoC, exploit, or patch released.
0000068
171 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds252d
Disclosure
CVE-2026-1616 Path Traversal Vulnerability in Open Security Issue Management (OSIM) Prior v2025.9.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1616
Post summary
A Path Traversal vulnerability has been disclosed for OSIM versions prior to 2025.9.0. No PoC, exploit, or patch details are provided in the text.
0000058
4.0K followersView on X
CVE@CVEnew252d
Disclosure
CVE-2026-1616 The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query paramet… https://www.cve.org/CVERecord?id=CVE-2026-1616
Post summary
The tweet announces CVE-2026-1616, detailing a path traversal vulnerability in OSIM's nginx configuration (before v2025.9.0), but offers no PoC, exploit, patch, or active exploitation evidence.
00000259
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	redhat	open_security_issue_management	-	-	-

Explore more

Back to dashboard redhat CVEs open_security_issue_management vulnerabilities