CWE-427

Uncontrolled Search Path Element

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

1,133 vulnerabilities with CWE-427
CVE-2026-2538 HIGH
Notepad2 4.2.22-4.2.25 - Path Traversal
CVSS 7.0
CVE-2026-2516 HIGH
Unidocs ezPDF DRM Reader/ezPDF Reader 2.0/3.0.0.4 - Path Traversal
CVSS 7.0
CVE-2026-25676 HIGH
M-Track Duo HD <1.0.0 - Code Injection
CVSS 7.8
CVE-2026-2361 HIGH
PostgreSQL - Privilege Escalation
CVSS 8.0
CVE-2026-2360 HIGH
PostgreSQL Anonymizer - Privilege Escalation
CVSS 8.0
CVE-2026-25656 HIGH
Siemens Sinec Nms < 2.15.2.1 - Uncontrolled Search Path
CVSS 7.8
CVE-2026-25655 HIGH
Siemens Sinec Nms < 4.0 - Uncontrolled Search Path
CVSS 7.8
CVE-2026-23741 NONE
Asterisk <20.7-cert9, 20.18.2, 21.12.1, 22.8.2, 23.2.2 - Privilege ...
CVE-2026-23740 NONE
Sangoma Certified Asterisk < 20.18.2 - Uncontrolled Search Path
CVE-2026-24694 HIGH
Roland Cloud Manager <3.1.19 - Code Injection
CVSS 7.8
CVE-2026-25129 MEDIUM
Psysh < 0.12.19 - Uncontrolled Search Path
CVSS 6.7
CVE-2026-21408 HIGH
beat-access <3.0.3 - Code Injection
CVSS 7.3
CVE-2026-0776 HIGH
Discord Client - Privilege Escalation
CVSS 7.3
CVE-2026-23755 HIGH
D-Link D-View 8 <2.0.1.107 - Code Injection
CVSS 7.3
CVE-2026-24016 HIGH
ServerView Agents - Code Injection
CVSS 7.8
CVE-2026-21427 HIGH
Pioneer Corporation - DLL Hijacking
CVSS 7.8
CVE-2025-10549 MEDIUM
DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation
CVSS 5.1
CVE-2025-14821 HIGH
Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows
CVSS 7.8
CVE-2025-69784 HIGH
OpenEDR 2.5.1.0 - Privilege Escalation
CVSS 8.8
CVE-2025-11792 HIGH
Acronis Cyber Protect Cloud Agent <41124 - Privilege Escalation
CVSS 7.3
CVE-2025-15558 HIGH
Docker CLI <=29.1.5 - Privilege Escalation
CVSS 8.0
CVE-2025-54519 HIGH
Doc Nav - Privilege Escalation
CVSS 7.3
CVE-2025-52541 HIGH
Vivado - Privilege Escalation
CVSS 7.3
CVE-2025-48503 HIGH
AMD Software Installer - Privilege Escalation
CVSS 7.8
CVE-2025-32452 MEDIUM
AI Playground <2.6.1 beta - Privilege Escalation
CVSS 6.7
Details
Vulnerabilities 1,133