← Back to browse · API

CVE-2022-26082

Severity
CRITICAL
CVSS
9.1
EPSS
0.1961
Risk score
43.26
CISA KEV
No
PoC
No
Published
2022-05-25
Modified
2025-04-15
First seen
2026-08-07
Aliases
EUVD-2022-30650, GHSA-27XW-Q7RH-9MRW
Products
Open Automation Software:OAS Platform V16.00.0112
Sources
euvd EUVD-2022-30650

Description

A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted series of network requests can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

References