Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in Oinone Pamirs up to 7.2.0. This vulnerability affects the function request.getParameter of the file LocalFileClient.java of the component RestController. Performing a manipulation of the argument uniqueFileName results in path traversal. The attack may be carried out on the physical device. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-8736 Path Traversal in Oinone Pamirs Up to 7.2.0 LocalFileClient RestController https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8736
Post summary
The post announces a path traversal vulnerability (CVE-2026-8736) affecting Oinone Pamirs up to version 7.2.0 in the LocalFileClient RestController, with no evidence of PoC, exploitation, or patch release.