Vulnerabilities

TI-2026-07678 CVE-2026-8736 · GHSA-frwq-5cw2-vg5w

Oinone Pamirs RestController LocalFileClient.java request.getParameter path traversal

MEDIUM 46

A security flaw has been discovered in Oinone Pamirs up to 7.2.0.

CVSS 4.0LOW 2.4 Physical Low privileges No interaction EPSS 0.00216 Published 2026-05-17 No fix listed CWE-22

TI-2026-07677 CVE-2026-8735 · GHSA-hwp7-hcx2-p9r2

MEDIUM 57

A vulnerability was identified in Oinone Pamirs up to 7.2.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00242 Published 2026-05-17 No fix listed CWE-20

TI-2026-07676 CVE-2026-8734 · GHSA-5x3x-5qjx-cxrc

HIGH 70

A vulnerability was determined in Oinone Pamirs up to 7.2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00259 Published 2026-05-17 No fix listed CWE-74