Nomios Poland CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Nomios Poland CVE published 2026-04-17

CVE-2026-5131

A Server-Side Request Forgery vulnerability exists in GREENmod due to incorrectly configured access control lists for named pipes used for communication between plugins, the web portal, and the system service. This allows an attacker to upload arbitrary XML or JSON files for processing with the privileges of the user running the service, potentially affecting Windows systems providing SMB or WebDav communication.