CWE-426

High likelihood

Untrusted Search Path

Parent: CWE-642 - External Control of Critical State Data

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

626 vulnerabilities with CWE-426
CVE-2025-43079 MEDIUM
Qualys Cloud Agent - Command Injection
CVSS 6.3
CVE-2025-12286 HIGH
VeePN <1.6.2 - Unquoted Search Path
CVSS 7.0
CVE-2025-12247 HIGH
Hasleo Backup Suite <5.2 - Path Traversal
CVSS 7.0
CVE-2025-11940 HIGH
LibreWolf <143.0.4-1 - Path Traversal
CVSS 7.0
CVE-2025-59489 HIGH
Unity Runtime <2025-10-02 - Code Injection
CVSS 7.4
CVE-2025-9267 HIGH
Seagate Toolkit <2.35.0.6 - RCE
CVE-2025-9016 HIGH
Mechrevo Control Center GX V2 - Uncontrolled Search Path
CVSS 7.0
CVE-2025-9000 HIGH
Mechrevo Control Center GX V2 - Uncontrolled Search Path
CVSS 7.0
CVE-2025-49457 CRITICAL
Zoom Meeting Software Development Kit < 6.3.10 - Untrusted Search Path
CVSS 9.6
CVE-2025-49456 MEDIUM
Zoom Meeting Software Development Kit < 6.4.10 - Race Condition
CVSS 6.2
CVE-2025-5039 HIGH
Autodesk < - Code Injection
CVSS 7.8
CVE-2025-23266 CRITICAL
Nvidia-container-toolkit < 1.17.8 - Untrusted Search Path
CVSS 9.0
CVE-2025-0141 HIGH
Palo Alto Networks GlobalProtect < - Privilege Escalation
CVE-2025-49124 HIGH
Apache Tomcat < 9.0.106 - Untrusted Search Path
CVSS 8.4
CVE-2025-30399 HIGH
.NET & Visual Studio - Code Injection
CVSS 7.5
CVE-2025-5335 HIGH
Autodesk Installer < 2.15 - Untrusted Search Path
CVSS 7.8
CVE-2025-2501 HIGH
Lenovo Pcmanager < 5.1.110.5082 - Untrusted Search Path
CVSS 7.8
CVE-2025-40909 MEDIUM
Perl - Path Traversal
CVSS 5.9
CVE-2025-5180 HIGH
Wondershare Filmora - Uncontrolled Search Path
CVSS 7.0
CVE-2025-5129 HIGH
Sangfor Atrust - Uncontrolled Search Path
CVSS 7.0
CVE-2025-4971 HIGH
Broadcom Automic Automation Agent Unix <24.3.0 HF4-21.0.13 HF1 - Pr...
CVE-2025-4802 HIGH
GNU C Library <2.39 - Code Injection
CVSS 7.8
CVE-2025-4769 HIGH
CBEWIN Anytxt Searcher 1.3.1128.0 - Uncontrolled Search Path
CVSS 7.0
CVE-2025-4540 HIGH
MTSoftware C-Lodop <6.6.1.1 - Unquoted Search Path
CVSS 7.0
CVE-2025-4539 HIGH
Todesk - Uncontrolled Search Path
CVSS 7.0
Details
Vulnerabilities 626
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits