CWE-427

Uncontrolled Search Path Element

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

1,098 vulnerabilities with CWE-427
CVE-2026-30896 HIGH
Qsee Client <=1.0.1 - DLL Hijacking
CVSS 7.8
CVE-2026-3787 HIGH
UltraVNC 1.6.4.0 - Path Traversal
CVSS 7.0
CVE-2026-28712 MEDIUM
Acronis Cyber Protect 17 <41186 - Privilege Escalation
CVSS 6.3
CVE-2026-28711 MEDIUM
Acronis Cyber Protect 17 - Privilege Escalation
CVSS 6.3
CVE-2025-11792 HIGH
Acronis Cyber Protect Cloud Agent <41124 - Privilege Escalation
CVSS 7.3
CVE-2026-29610 HIGH
OpenClaw <2026.2.14 - Command Injection
CVSS 8.8
CVE-2026-28456 HIGH
OpenClaw 2026.1.5-2026.2.14 - Code Injection
CVSS 7.2
CVE-2026-28393 HIGH
OpenClaw <2026.2.14 - Path Traversal
CVSS 7.7
CVE-2025-15558
Docker CLI <=29.1.5 - Privilege Escalation
CVE-2026-22270 MEDIUM
Dell PowerScale OneFS <9.10.1.6/9.11.0.0-9.12.0.1 - Privilege Escal...
CVSS 6.7
CVE-2026-24502 HIGH
Dell Command | Intel vPro <4.7.0 - Privilege Escalation
CVSS 8.8
CVE-2026-25191 HIGH
FinalCode Client - DLL Hijacking
CVSS 7.8
CVE-2026-3091 MEDIUM
Synology Presto Client <2.1.3-0672 - DLL Hijacking
CVSS 6.7
CVE-2026-21420 HIGH
Dell Repository Manager <3.4.8 - Privilege Escalation
CVSS 7.3
CVE-2026-2492 HIGH
TensorFlow HDF5 Library - Privilege Escalation
CVSS 7.0
CVE-2026-2040 HIGH
PDF-XChange Editor - Privilege Escalation
CVSS 7.3
CVE-2026-26099 MEDIUM
Owl opds 2.2.0.4 - Path Traversal
CVSS 5.5
CVE-2026-26098 MEDIUM
Owl opds 2.2.0.4 - Path Traversal
CVSS 5.5
CVE-2026-26097 MEDIUM
Owl opds 2.2.0.4 - Path Traversal
CVSS 5.5
CVE-2026-26050 HIGH
RICOH Job Log Tool <1.3.7 - DLL Hijacking
CVSS 7.8
CVE-2026-2538 HIGH
Notepad2 4.2.22-4.2.25 - Path Traversal
CVSS 7.0
CVE-2026-2516 HIGH
Unidocs ezPDF DRM Reader/ezPDF Reader 2.0/3.0.0.4 - Path Traversal
CVSS 7.0
CVE-2025-54519 HIGH
Doc Nav - Privilege Escalation
CVSS 7.3
CVE-2026-25676 HIGH
M-Track Duo HD <1.0.0 - Code Injection
CVSS 7.8
CVE-2026-2361 HIGH
PostgreSQL - Privilege Escalation
CVSS 8.0
Details
Vulnerabilities 1,098