# CWE-426. Every Advisory and CVE whose sources give the weakness CWE-426, newest first. ## Records, newest first (an older page) - [eAI Technologies｜ERP - DLL Hijacking](https://agentprime.io/advisories/CVE-2026-2998.md) `CVE-2026-2998` · CVE record: eAI Technologies ERP F2 · CVSS 8.5 High · Not analysed yet · Published 23 Feb 2026 · Tags: CWE-426 - [Notepad++ has an Untrusted Search Path](https://agentprime.io/advisories/CVE-2026-25926.md) `CVE-2026-25926` · CVE record: notepad-plus-plus notepad-plus-plus · CVSS 7.3 High · Not analysed yet · Published 18 Feb 2026 · Tags: CWE-426 - [Total VPN win-service.exe unquoted search path](https://agentprime.io/advisories/CVE-2026-2542.md) `CVE-2026-2542` · CVE record: Total VPN · CVSS 7.3 High · Not analysed yet · Published 16 Feb 2026 · Tags: CWE-426, CWE-428 - [Flos Freeware Notepad2 Msimg32.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2026-2538.md) `CVE-2026-2538` · CVE record: Flos Freeware Notepad2 · CVSS 7.3 High · Not analysed yet · Published 16 Feb 2026 · Tags: CWE-426, CWE-427 - [Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2026-2516.md) `CVE-2026-2516` · CVE record: Unidocs ezPDF DRM Reader and 1 more · CVSS 7.3 High · Not analysed yet · Published 15 Feb 2026 · Tags: CWE-426, CWE-427 - [Windows Storage Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-21508.md) `CVE-2026-21508` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 7.0 High · Not analysed yet · Published 10 Feb 2026 · Tags: Authentication bypass, CWE-426 - [Artifex MuPDF win_main.c get_system_dpi uncontrolled search path](https://agentprime.io/advisories/CVE-2025-15569.md) `CVE-2025-15569` · CVE record: Artifex MuPDF · CVSS 7.3 High · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-426, CWE-427 - [Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)](https://agentprime.io/advisories/CVE-2026-25880.md) `CVE-2026-25880` · CVE record: sumatrapdfreader sumatrapdf · CVSS 7.8 High · Not analysed yet · Published 9 Feb 2026 · Tags: CWE-426 - [Tanium addressed an improper input validation vulnerability in Tanium Appliance.](https://agentprime.io/advisories/CVE-2025-15321.md) `CVE-2025-15321` · CVE record: Tanium Tanium Appliance · CVSS 2.7 Low · Not analysed yet · Published 5 Feb 2026 · Tags: CWE-426 - [IBM App Connect Enterprise Certified Container Information Disclosure](https://agentprime.io/advisories/CVE-2025-13491.md) `CVE-2025-13491` · CVE record: IBM App Connect Enterprise Certified Container · CVSS 5.1 Medium · Not analysed yet · Published 5 Feb 2026 · Tags: CWE-426 - [Untrusted Search Path Vulnerability when opening max Files](https://agentprime.io/advisories/CVE-2026-0662.md) `CVE-2026-0662` · CVE record: Autodesk 3ds Max · CVSS 7.8 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-426 - [Untrusted search path vulnerability in Embedded Solutions Framework](https://agentprime.io/advisories/CVE-2025-65078.md) `CVE-2025-65078` · CVE record: Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-426 - [OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking](https://agentprime.io/advisories/GHSA-9h8m-3fm2-qjrq.md) `GHSA-9h8m-3fm2-qjrq`, `CVE-2026-24051`, `GO-2026-4394` · Go `go.opentelemetry.io/otel/sdk`: affected `>=1.21.0, <1.40.0`, fixed in `1.40.0` · CVSS 7.0 High · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-426 - [Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access](https://agentprime.io/advisories/CVE-2026-24070.md) `CVE-2026-24070` · CVE record: Native Instruments Native Access · CVSS 8.8 High · Not analysed yet · Published 2 Feb 2026 · Tags: CWE-426 - [SiYuan File Read API Case Sensitivity Bypass can Lead to Path Traversal](https://agentprime.io/advisories/GHSA-f72r-2h5j-7639.md) `GHSA-f72r-2h5j-7639`, `CVE-2026-25992`, `GO-2026-4386` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<=0.0.0-20260126094835-d5d10dd41b0c`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 28 Jan 2026 · Tags: Path traversal, CWE-178, CWE-426 - [pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)](https://agentprime.io/advisories/GHSA-6pfh-p556-v868.md) `GHSA-6pfh-p556-v868`, `CVE-2026-23888` · npm `pnpm`: affected `<10.28.1`, fixed in `10.28.1` · CVSS 6.5 Medium · Not analysed yet · Published 26 Jan 2026 · Tags: Path traversal, CWE-426 - [SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp](https://agentprime.io/advisories/CVE-2026-23512.md) `CVE-2026-23512` · CVE record: sumatrapdfreader sumatrapdf · CVSS 8.6 High · Not analysed yet · Published 14 Jan 2026 · Tags: CWE-426 - [Illustrator | Untrusted Search Path (CWE-426)](https://agentprime.io/advisories/CVE-2026-21280.md) `CVE-2026-21280` · CVE record: Adobe Illustrator Desktop 2026 and 1 more · CVSS 8.6 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-426 - [Microsoft Office Click-To-Run Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-20943.md) `CVE-2026-20943` · CVE record: Microsoft Microsoft Office 2016 and 4 more · CVSS 7.0 High · Not analysed yet · Published 13 Jan 2026 · Tags: CWE-426 - [Untrusted search path in ASUS ASCI](https://agentprime.io/advisories/CVE-2025-12793.md) `CVE-2025-12793` · CVE record: ASUS ASCI · CVSS 8.5 High · Not analysed yet · Published 6 Jan 2026 · Tags: CWE-426 - [LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation](https://agentprime.io/advisories/CVE-2019-25257.md) `CVE-2019-25257` · CVE record: LogicalDOC Srl LogicalDOC Enterprise · CVSS 8.7 High · Not analysed yet · Published 24 Dec 2025 · Tags: CWE-426 - [Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation](https://agentprime.io/advisories/CVE-2025-67722.md) `CVE-2025-67722` · CVE record: FreePBX framework · CVSS 5.7 Medium · Not analysed yet · Published 16 Dec 2025 · Tags: CWE-426 - [Acrobat Reader | Untrusted Search Path (CWE-426)](https://agentprime.io/advisories/CVE-2025-64785.md) `CVE-2025-64785` · CVE record: Adobe Acrobat Reader · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-426 - [Untrusted search path in auth_query connection in PgBouncer](https://agentprime.io/advisories/CVE-2025-12819.md) `CVE-2025-12819` · CVE record: PgBouncer · CVSS 7.5 High · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-426 - [Agent builds for AIX vulnerable to library loading hijacking](https://agentprime.io/advisories/CVE-2025-49642.md) `CVE-2025-49642` · CVE record: Zabbix Zabbix · CVSS 5.8 Medium · Not analysed yet · Published 1 Dec 2025 · Tags: CWE-426 - [NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.](https://agentprime.io/advisories/CVE-2025-26155.md) `CVE-2025-26155` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Nov 2025 · Tags: CWE-426 - [Untrusted search path in AMD StoreMI™](https://agentprime.io/advisories/CVE-2024-21923.md) `CVE-2024-21923` · CVE record: AMD AMD StoreMI™ · CVSS 7.3 High · Not analysed yet · Published 23 Nov 2025 · Tags: CWE-426 - [Untrusted search path in AMD StoreMI™](https://agentprime.io/advisories/CVE-2024-21922.md) `CVE-2024-21922` · CVE record: AMD AMD StoreMI™ · CVSS 7.3 High · Not analysed yet · Published 23 Nov 2025 · Tags: CWE-426 - [Muse Group MuseHub Windows Service Muse.Updater.exe unquoted search path](https://agentprime.io/advisories/CVE-2025-13433.md) `CVE-2025-13433` · CVE record: Muse Group MuseHub · CVSS 7.3 High · Not analysed yet · Published 20 Nov 2025 · Tags: CWE-426, CWE-428 - [Windows Administrator Protection Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-60718.md) `CVE-2025-60718` · CVE record: Microsoft Windows 11 Version 24H2 and 1 more · CVSS 7.8 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-426 - [Local Privilege Escalation via qagent_uninstall.sh Qualys Cloud Agents](https://agentprime.io/advisories/CVE-2025-43079.md) `CVE-2025-43079` · CVE record: Qualys Inc Qualys Agent · CVSS 6.3 Medium · Not analysed yet · Published 10 Nov 2025 · Tags: CWE-426 - [Potential Privilege Escalation in Revenera InstallShield 2023 R1](https://agentprime.io/advisories/CVE-2024-14012.md) `CVE-2024-14012` · CVE record: Revenera InstallShield · CVSS 7.3 High · Not analysed yet · Published 29 Oct 2025 · Tags: CWE-426 - [VeePN AVService avservice.exe unquoted search path](https://agentprime.io/advisories/CVE-2025-12286.md) `CVE-2025-12286` · CVE record: VeePN · CVSS 7.3 High · Not analysed yet · Published 27 Oct 2025 · Tags: CWE-426, CWE-428 - [Hasleo Backup Suite HasleoImageMountService/HasleoBackupSuiteService unquoted search path](https://agentprime.io/advisories/CVE-2025-12247.md) `CVE-2025-12247` · CVE record: Hasleo Backup Suite · CVSS 7.3 High · Not analysed yet · Published 27 Oct 2025 · Tags: CWE-426, CWE-428 - [LibreWolf Installer setup.nsi uncontrolled search path](https://agentprime.io/advisories/CVE-2025-11940.md) `CVE-2025-11940` · CVE record: LibreWolf · CVSS 7.3 High · Not analysed yet · Published 19 Oct 2025 · Tags: CWE-426, CWE-427 - [Argument injection in Unity3D Unity Editor](https://agentprime.io/advisories/CVE-2025-59489.md) `CVE-2025-59489` · CVE record: Unity3D Unity Editor · CVSS 7.4 High · Not analysed yet · Published 3 Oct 2025 · Tags: Command injection, CWE-426 - [Uncontrolled search path in Seagate Toolkit](https://agentprime.io/advisories/CVE-2025-9267.md) `CVE-2025-9267` · CVE record: Seagate Toolkit · CVSS 7.0 High · Not analysed yet · Published 26 Sept 2025 · Tags: CWE-426, CWE-427 - [Mechrevo Control Center GX V2 Powershell Script Command uncontrolled search path](https://agentprime.io/advisories/CVE-2025-9016.md) `CVE-2025-9016` · CVE record: Mechrevo Control Center GX V2 · CVSS 7.3 High · Not analysed yet · Published 15 Aug 2025 · Tags: CWE-426, CWE-427 - [Mechrevo Control Center GX V2 reg File uncontrolled search path](https://agentprime.io/advisories/CVE-2025-9000.md) `CVE-2025-9000` · CVE record: Mechrevo Control Center GX V2 · CVSS 7.3 High · Not analysed yet · Published 15 Aug 2025 · Tags: CWE-426, CWE-427 - [Zoom Clients for Windows - Untrusted Search Path](https://agentprime.io/advisories/CVE-2025-49457.md) `CVE-2025-49457` · CVE record: Zoom Communications Inc Zoom Clients for Windows · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-426 - [Zoom Clients for Windows- Race Condition](https://agentprime.io/advisories/CVE-2025-49456.md) `CVE-2025-49456` · CVE record: Zoom Communications Inc Zoom Clients for Windows · CVSS 6.2 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-426 - [Privilege Ecalation due to Untrusted Search Path Vulnerability](https://agentprime.io/advisories/CVE-2025-5039.md) `CVE-2025-5039` · CVE record: Autodesk AutoCAD and 3 more · CVSS 7.8 High · Not analysed yet · Published 24 Jul 2025 · Tags: CWE-426 - [NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path](https://agentprime.io/advisories/GHSA-vmg3-7v43-9g23.md) `GHSA-vmg3-7v43-9g23`, `CVE-2025-23266`, `GO-2025-3992` · Go `github.com/NVIDIA/gpu-operator` and 3 more: affected `<25.3.2`, fixed in `25.3.2` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2025 · Tags: CWE-426 - [GlobalProtect App: Privilege Escalation (PE) Vulnerability](https://agentprime.io/advisories/CVE-2025-0141.md) `CVE-2025-0141` · CVE record: Palo Alto Networks GlobalProtect App and 1 more · CVSS 8.4 High · Not analysed yet · Published 9 Jul 2025 · Tags: CWE-426 - [Apache Tomcat installer for Windows has an untrusted search path vulnerability](https://agentprime.io/advisories/GHSA-42wg-hm62-jcwg.md) `GHSA-42wg-hm62-jcwg`, `BIT-tomcat-2025-49124`, `CVE-2025-49124` · Maven `org.apache.tomcat.embed:tomcat-embed-core` and 2 more: affected `>=11.0.0-M1, <11.0.8 || >=10.1.0, <10.1.42 || >=9.0.23, <9.0.106`, fixed in `11.0.8`, `10.1.42`, `9.0.106` · CVSS 8.4 High · Not analysed yet · Published 16 Jun 2025 · Tags: CWE-426 - [Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability](https://agentprime.io/advisories/GHSA-266m-wp2v-x7mq.md) `GHSA-266m-wp2v-x7mq`, `BIT-dotnet-2025-30399`, `BIT-dotnet-sdk-2025-30399`, `BIT-powershell-2025-30399`, `CVE-2025-30399` · NuGet `Microsoft.NetCore.App.Runtime.linux-arm` and 11 more: affected `>=8.0.0, <8.0.17 || >=9.0.0, <9.0.6`, fixed in `8.0.17`, `9.0.6` · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2025 · Tags: CWE-426 - [Privilege Ecalation due to Untrusted Search Path Vulnerability](https://agentprime.io/advisories/CVE-2025-5335.md) `CVE-2025-5335` · CVE record: Autodesk Installer · CVSS 7.8 High · Not analysed yet · Published 10 Jun 2025 · Tags: CWE-426 - [DLL Hijacking in Yandex Telemost](https://agentprime.io/advisories/CVE-2024-12168.md) `CVE-2024-12168` · CVE record: Yandex Telemost · CVSS 8.4 High · Not analysed yet · Published 2 Jun 2025 · Tags: CWE-426 - [Untrusted search path in Lenovo PC Manager](https://agentprime.io/advisories/CVE-2025-2501.md) `CVE-2025-2501` · CVE record: Lenovo PC Manager · CVSS 8.5 High · Not analysed yet · Published 30 May 2025 · Tags: CWE-426 - [Perl threads have a working directory race condition where file operations may target unintended paths](https://agentprime.io/advisories/CVE-2025-40909.md) `CVE-2025-40909` · CVE record: perl perl · CVSS 5.9 Medium · Not analysed yet · Published 30 May 2025 · Tags: CWE-426, CWE-689 - [Wondershare Filmora Installer NFWCHK.exe uncontrolled search path](https://agentprime.io/advisories/CVE-2025-5180.md) `CVE-2025-5180` · CVE record: Wondershare Filmora · CVSS 7.3 High · Not analysed yet · Published 26 May 2025 · Tags: CWE-426, CWE-427 - [Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2025-5129.md) `CVE-2025-5129` · CVE record: Sangfor 零信任访问控制系统 aTrust · CVSS 7.3 High · Not analysed yet · Published 24 May 2025 · Tags: CWE-426, CWE-427 - [Broadcom Automic Automation Agent Unix privilege escalation](https://agentprime.io/advisories/CVE-2025-4971.md) `CVE-2025-4971` · CVE record: Broadcom Automic Automation · CVSS 8.5 High · Not analysed yet · Published 19 May 2025 · Tags: CWE-426 - [Untrusted search path in The GNU C Library glibc](https://agentprime.io/advisories/CVE-2025-4802.md) `CVE-2025-4802` · CVE record: The GNU C Library glibc · CVSS 7.8 High · Not analysed yet · Published 16 May 2025 · Tags: CWE-426 - [CBEWIN Anytxt Searcher ATService.exe uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4769.md) `CVE-2025-4769` · CVE record: CBEWIN Anytxt Searcher · CVSS 7.3 High · Not analysed yet · Published 16 May 2025 · Tags: CWE-426, CWE-427 - [MTSoftware C-Lodop CLodopPrintService unquoted search path](https://agentprime.io/advisories/CVE-2025-4540.md) `CVE-2025-4540` · CVE record: MTSoftware C-Lodop · CVSS 7.3 High · Not analysed yet · Published 11 May 2025 · Tags: CWE-426, CWE-428 - [Hainan ToDesk DLL File Parser profapi.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4539.md) `CVE-2025-4539` · CVE record: Hainan ToDesk · CVSS 7.3 High · Not analysed yet · Published 11 May 2025 · Tags: CWE-426, CWE-427 - [Shanghai Bairui Information Technology SunloginClient sunlogin_guard.exe uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4532.md) `CVE-2025-4532` · CVE record: Shanghai Bairui Information Technology SunloginClient · CVSS 7.3 High · Not analysed yet · Published 11 May 2025 · Tags: CWE-426, CWE-427 - [Discord WINSTA.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4525.md) `CVE-2025-4525` · CVE record: Discord · CVSS 7.3 High · Not analysed yet · Published 10 May 2025 · Tags: CWE-426, CWE-427 - [Patch My PC Home Updater System.IO uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4455.md) `CVE-2025-4455` · CVE record: Patch My PC Home Updater · CVSS 7.3 High · Not analysed yet · Published 9 May 2025 · Tags: CWE-426, CWE-427 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .