CWE-428.

Unquoted search path in Dell OS Recovery tool

• Dell OS Recovery tool
• CWE-428

Unquoted search path in Yamaha Corporation YMS-VPN8 and others

• Yamaha Corporation YMS-VPN8
• Yamaha Corporation YMS-VPN8-CP
• CWE-428

Path Traversal Vulnerability

• Zohocorp ManageEngine OpManager
• Zohocorp ManageEngine Network Configuration Manager
• CWE-428

Unquoted search path in Dell Inventory Collector Client

• Dell Inventory Collector Client
• CWE-428

Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation

• OISF suricata
• CWE-428

Maono Link local privilege escalation

• Maono Link
• CWE-428

Unquoted search path in Integrated Systems Technologies, Inc. NetKids iMark

• Integrated Systems Technologies, Inc. NetKids iMark
• CWE-428

GV-ASManager DLL hijacking vulnerability

• GeoVision Inc. GV-ASManager
• CWE-428

Studio 5000 Logix Designer® – Multiple Vulnerabilities

• Rockwell Automation Studio 5000 Logix Designer
• CWE-428

HP Fan Control App – Potential Escalation of Privilege

• HP Inc. HP Fan Control App
• CWE-428

AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation

• AVAST Antivirus
• CWE-428

Chromacam 4.0.3.0 Unquoted Service Path Privilege Escalation

• Personifyinc Chromacam
• CWE-428

Malwarebytes 4.5 Unquoted Service Path Privilege Escalation

• Malwarebytes
• CWE-428

Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation

• Brother SAPSprint
• CWE-428

Wondershare PDFelement 5.2.9 Privilege Escalation via Unquoted Service Path

• Wondershare PDFelement
• CWE-428

Winstep 18.06.0096 Unquoted Service Path Privilege Escalation

• Winstep
• CWE-428

Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation

• Realtek Audio Service
• CWE-428

RealTimes Desktop Service 18.1.4 Unquoted Service Path Privilege Escalation

• RealTimes Desktop Service
• CWE-428

TFTP Broadband 4.3.0.1465 Unquoted Service Path Privilege Escalation

• Weird-Solutions TFTP Broadband
• CWE-428

Network Inventory Advisor 5.0.26.0 Unquoted Service Path Privilege Escalation

• Network-Inventory-Advisor Network Inventory Advisor
• CWE-428

Matrix42 Remote Control Host 3.20.0031 Unquoted Path Privilege Escalation

• Matrix42 Remote Control Host
• CWE-428

AnyDesk 2.5.0 Unquoted Service Path Elevation of Privilege

• AnyDesk
• CWE-428

Wise Care 365 4.27 and Wise Disk Cleaner 9.29 Unquoted Service Path Privilege Escalation

• Wisecleaner Wise Care 365
• Wisecleaner Wise Disk Cleaner
• CWE-428

NetDrive 2.6.12 Unquoted Service Path Elevation of Privilege

• NetDrive
• CWE-428

Windows Firewall Control 4.8.6.0 Unquoted Service Path Privilege Escalation

• Binisoft Windows Firewall Control
• CWE-428

Comodo Dragon Browser 52.15.25.663 Privilege Escalation via Unquoted Service Path

• Comodo Dragon Browser
• CWE-428

Iperius Remote 1.7.0 Unquoted Service Path Elevation of Privilege

• Iperiusremote Iperius Remote
• CWE-428

Comodo Chromodo Browser 52.15.25.664 Unquoted Service Path Privilege Escalation

• Comodo Chromodo Browser
• CWE-428

Fortitude HTTP 1.0.4.0 Unquoted Service Path Elevation of Privilege

• Networkdls Fortitude HTTP
• CWE-428

Vembu StoreGrid 4.0 Unquoted Service Path Privilege Escalation

• Vembu StoreGrid
• CWE-428

Realtek High Definition Audio Driver 6.0.1.6730 Privilege Escalation

• Realtek High Definition Audio Driver
• CWE-428

Punto Switcher 4.5.0.583 Unquoted Search Path via WinExec

• Yandex Punto Switcher
• CWE-428

VX Search 13.5.28 Unquoted Service Path Privilege Escalation

• Vxsearch VX Search
• CWE-428

Kite 4.2.0.1 U1 Unquoted Service Path Privilege Escalation

• Kite
• CWE-428

Advanced System Care Service 13.0.0.157 Unquoted Service Path Privilege Escalation

• Iobit Advanced System Care Service
• CWE-428

Privacy Drive 3.17.0 Unquoted Service Path Privilege Escalation

• Cybertronsoft Privacy Drive
• CWE-428

Syncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation

• Syncplify.me Server!
• CWE-428

OKI sPSV Port Manager 1.0.41 Unquoted Service Path Privilege Escalation

• OKI sPSV Port Manager
• CWE-428

IObit Uninstaller 9.5.0.15 Unquoted Service Path Privilege Escalation

• IObit Uninstaller
• CWE-428

Argus Surveillance DVR 4.0 Unquoted Service Path Privilege Escalation

• Argus Surveillance DVR
• CWE-428

eMPIA Technology｜AVACAST - Unquoted Service Path

• eMPIA Technology AVACAST
• CWE-428

Search path without quotes in CivetWeb

• CivetWeb
• CWE-428

sheed AntiVirus 2.3 Unquoted Service Path Privilege Escalation

• Sheedantivirus sheed AntiVirus
• CWE-428

Hotspot Shield 6.0.3 Unquoted Service Path Privilege Escalation

• Hotspotshield Hotspot Shield
• CWE-428

IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation

• IObit Malware Fighter
• CWE-428

Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation

• NETGATE AMITI Antivirus
• CWE-428

NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation

• NETGATE Registry Cleaner
• CWE-428

Spy Emergency build 23.0.205 Unquoted Service Path Privilege Escalation

• Spy-Emergency Spy Emergency
• CWE-428

IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation

• IObit Advanced SystemCare
• CWE-428

Electron: Unquoted executable path in app.setLoginItemSettings on Windows

• CWE-428

<38.8.6 || >=39.0.0-alpha.1, <39.8.1 || >=40.0.0-alpha.1, <40.8.0 || >=41.0.0-alpha.1, <41.0.0-beta.8 · fixed in 38.8.6, 39.8.1, 40.8.0, 41.0.0-beta.8

Multiple vulnerabilities in Small HTTP server by Smallsrv

• Smallsrv Small HTTP
• CWE-428

Unquoted search path in SANYO DENKI CO., LTD. SANUPS SOFTWARE STANDALONE and others

• SANYO DENKI CO., LTD. SANUPS SOFTWARE STANDALONE
• SANYO DENKI CO., LTD. SANUPS SOFTWARE
• CWE-428

Serviio PRO 1.8 Local Privilege Escalation via Unquoted Path

• Serviio PRO
• CWE-428

MobaXterm < 26.1 Notepad++ Unquoted Service Path

• Mobatek MobaXterm
• CWE-428

Unquoted search path in Dell Inc. UPS Multi-UPS Management Console (MUMC)

• Dell Inc. UPS Multi-UPS Management Console (MUMC)
• CWE-428

OpenClaw: safeBins static default trusted dirs allow writable-dir binary hijack (`jq`)

• CWE-426
• CWE-428

<2026.2.24 · fixed in 2026.2.24

Unquoted search path in Canon Inc. IJ Scan Utility

• Canon Inc. IJ Scan Utility
• CWE-428

Total VPN win-service.exe unquoted search path

• Total VPN
• CWE-426
• CWE-428

RTK IIS Codec Service 6.4.10041.133 - 'RtkI2SCodec' Unquote Service Path

• Realtek RTK IIS Codec Service
• CWE-428

ActiveFax Server 6.92 Build 0316 - 'ActiveFaxServiceNT' Unquoted Service Path

• Actfax ActiveFax Server
• CWE-428