Advisories · Weakness
CWE-426.
Every Advisory and CVE whose sources give the weakness CWE-426, newest first.
- CVSS 8.5 High
eAI Technologies｜ERP - DLL Hijacking
- eAI Technologies ERP F2
- CWE-426
- CVSS 7.3 High
Notepad++ has an Untrusted Search Path
- notepad-plus-plus
- CWE-426
- CVSS 7.3 High
Total VPN win-service.exe unquoted search path
- Total VPN
- CWE-426
- CWE-428
- CVSS 7.3 High
Flos Freeware Notepad2 Msimg32.dll uncontrolled search path
- Flos Freeware Notepad2
- CWE-426
- CWE-427
- CVSS 7.3 High
Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path
- Unidocs ezPDF DRM Reader
- Unidocs ezPDF Reader
- CWE-426
- CWE-427
- CVSS 7.0 High
Windows Storage Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Authentication bypass
- CWE-426
- CVSS 7.3 High
Artifex MuPDF win_main.c get_system_dpi uncontrolled search path
- Artifex MuPDF
- CWE-426
- CWE-427
- CVSS 7.8 High
Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)
- sumatrapdf
- CWE-426
- CVSS 2.7 Low
Tanium addressed an improper input validation vulnerability in Tanium Appliance.
- Tanium Appliance
- CWE-426
- CVSS 5.1 Medium
IBM App Connect Enterprise Certified Container Information Disclosure
- IBM App Connect Enterprise Certified Container
- CWE-426
- CVSS 7.8 High
Untrusted Search Path Vulnerability when opening max Files
- Autodesk 3ds Max
- CWE-426
- CVSS 9.3 CriticalCritical · CVSS 9+
Untrusted search path vulnerability in Embedded Solutions Framework
- Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ
- Lexmark CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG
- CWE-426
- CVSS 7.0 High
OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking
- CWE-426
>=1.21.0, <1.40.0 · fixed in 1.40.0
GHSA-9h8m-3fm2-qjrq · CVE-2026-24051 - CVSS 8.8 High
Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access
- Native Instruments Native Access
- CWE-426
- CVSS 7.5 High
SiYuan File Read API Case Sensitivity Bypass can Lead to Path Traversal
- Path traversal
- CWE-178
<=0.0.0-20260126094835-d5d10dd41b0c · no fixed version yet
GHSA-f72r-2h5j-7639 · CVE-2026-25992 - CVSS 6.5 Medium
pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)
- Path traversal
- CWE-426
<10.28.1 · fixed in 10.28.1
GHSA-6pfh-p556-v868 · CVE-2026-23888 - CVSS 8.6 High
SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp
- sumatrapdf
- CWE-426
- CVSS 8.6 High
Illustrator | Untrusted Search Path (CWE-426)
- Adobe Illustrator Desktop 2026
- Adobe Illustrator Desktop 2025
- CWE-426
- CVSS 7.0 High
Microsoft Office Click-To-Run Remote Code Execution Vulnerability
- Microsoft Office 2016
- Microsoft Office Deployment Tool
- CWE-426
- CVSS 8.5 High
Untrusted search path in ASUS ASCI
- ASUS ASCI
- CWE-426
- CVSS 8.7 High
LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path Manipulation
- LogicalDOC Srl LogicalDOC Enterprise
- CWE-426
- CVSS 5.7 Medium
Authenticated amportal search for ‘freepbx_engine’ in non root writeable directories leads to potential privilege escalation
- FreePBX framework
- CWE-426
- CVSS 7.8 High
Acrobat Reader | Untrusted Search Path (CWE-426)
- Adobe Acrobat Reader
- CWE-426
- CVSS 7.5 High
Untrusted search path in auth_query connection in PgBouncer
- PgBouncer
- CWE-426
- CVSS 5.8 Medium
Agent builds for AIX vulnerable to library loading hijacking
- Zabbix
- CWE-426
- CVSS 9.8 CriticalCritical · CVSS 9+
NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.
- CWE-426
- CVSS 7.3 High
Untrusted search path in AMD StoreMI™
- AMD StoreMI™
- CWE-426
- CVSS 7.3 High
Untrusted search path in AMD StoreMI™
- AMD StoreMI™
- CWE-426
- CVSS 7.3 High
Muse Group MuseHub Windows Service Muse.Updater.exe unquoted search path
- Muse Group MuseHub
- CWE-426
- CWE-428
- CVSS 7.8 High
Windows Administrator Protection Elevation of Privilege Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- CWE-426
- CVSS 6.3 Medium
Local Privilege Escalation via qagent_uninstall.sh Qualys Cloud Agents
- Qualys Inc Qualys Agent
- CWE-426
- CVSS 7.3 High
Potential Privilege Escalation in Revenera InstallShield 2023 R1
- Revenera InstallShield
- CWE-426
- CVSS 7.3 High
VeePN AVService avservice.exe unquoted search path
- VeePN
- CWE-426
- CWE-428
- CVSS 7.3 High
Hasleo Backup Suite HasleoImageMountService/HasleoBackupSuiteService unquoted search path
- Hasleo Backup Suite
- CWE-426
- CWE-428
- CVSS 7.3 High
LibreWolf Installer setup.nsi uncontrolled search path
- LibreWolf
- CWE-426
- CWE-427
- CVSS 7.4 High
Argument injection in Unity3D Unity Editor
- Unity3D Unity Editor
- Command injection
- CWE-426
- CVSS 7.0 High
Uncontrolled search path in Seagate Toolkit
- Seagate Toolkit
- CWE-426
- CWE-427
- CVSS 7.3 High
Mechrevo Control Center GX V2 Powershell Script Command uncontrolled search path
- Mechrevo Control Center GX V2
- CWE-426
- CWE-427
- CVSS 7.3 High
Mechrevo Control Center GX V2 reg File uncontrolled search path
- Mechrevo Control Center GX V2
- CWE-426
- CWE-427
- CVSS 9.6 CriticalCritical · CVSS 9+
Zoom Clients for Windows - Untrusted Search Path
- Zoom Communications Inc Zoom Clients for Windows
- CWE-426
- CVSS 6.2 Medium
Zoom Clients for Windows- Race Condition
- Zoom Communications Inc Zoom Clients for Windows
- CWE-426
- CVSS 7.8 High
Privilege Ecalation due to Untrusted Search Path Vulnerability
- Autodesk AutoCAD
- Autodesk AutoCAD LT
- CWE-426
- CVSS 9.0 CriticalCritical · CVSS 9+
NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path
- CWE-426
<25.3.2 · fixed in 25.3.2
GHSA-vmg3-7v43-9g23 · CVE-2025-23266 - CVSS 8.4 High
GlobalProtect App: Privilege Escalation (PE) Vulnerability
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- CWE-426
- CVSS 8.4 High
Apache Tomcat installer for Windows has an untrusted search path vulnerability
- CWE-426
>=11.0.0-M1, <11.0.8 || >=10.1.0, <10.1.42 || >=9.0.23, <9.0.106 · fixed in 11.0.8, 10.1.42, 9.0.106
GHSA-42wg-hm62-jcwg · CVE-2025-49124 - CVSS 7.5 High
Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability
- CWE-426
>=8.0.0, <8.0.17 || >=9.0.0, <9.0.6 · fixed in 8.0.17, 9.0.6
GHSA-266m-wp2v-x7mq · CVE-2025-30399 - CVSS 7.8 High
Privilege Ecalation due to Untrusted Search Path Vulnerability
- Autodesk Installer
- CWE-426
- CVSS 8.4 High
DLL Hijacking in Yandex Telemost
- Yandex Telemost
- CWE-426
- CVSS 8.5 High
Untrusted search path in Lenovo PC Manager
- Lenovo PC Manager
- CWE-426
- CVSS 5.9 Medium
Perl threads have a working directory race condition where file operations may target unintended paths
- perl
- CWE-426
- CWE-689
- CVSS 7.3 High
Wondershare Filmora Installer NFWCHK.exe uncontrolled search path
- Wondershare Filmora
- CWE-426
- CWE-427
- CVSS 7.3 High
Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path
- Sangfor 零信任访问控制系统 aTrust
- CWE-426
- CWE-427
- CVSS 8.5 High
Broadcom Automic Automation Agent Unix privilege escalation
- Broadcom Automic Automation
- CWE-426
- CVSS 7.8 High
Untrusted search path in The GNU C Library glibc
- The GNU C Library glibc
- CWE-426
- CVSS 7.3 High
CBEWIN Anytxt Searcher ATService.exe uncontrolled search path
- CBEWIN Anytxt Searcher
- CWE-426
- CWE-427
- CVSS 7.3 High
MTSoftware C-Lodop CLodopPrintService unquoted search path
- MTSoftware C-Lodop
- CWE-426
- CWE-428
- CVSS 7.3 High
Hainan ToDesk DLL File Parser profapi.dll uncontrolled search path
- Hainan ToDesk
- CWE-426
- CWE-427
- CVSS 7.3 High
Shanghai Bairui Information Technology SunloginClient sunlogin_guard.exe uncontrolled search path
- Shanghai Bairui Information Technology SunloginClient
- CWE-426
- CWE-427
- CVSS 7.3 High
Discord WINSTA.dll uncontrolled search path
- Discord
- CWE-426
- CWE-427
- CVSS 7.3 High
Patch My PC Home Updater System.IO uncontrolled search path
- Patch My PC Home Updater
- CWE-426
- CWE-427