The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
1,133 vulnerabilities with CWE-427
CVE-2026-2538
HIGH
Notepad2 4.2.22-4.2.25 - Path Traversal
CVSS 7.0
CVE-2026-2516
HIGH
Unidocs ezPDF DRM Reader/ezPDF Reader 2.0/3.0.0.4 - Path Traversal
CVSS 7.0
CVE-2026-25676
HIGH
M-Track Duo HD <1.0.0 - Code Injection
CVSS 7.8
CVE-2026-2361
HIGH
PostgreSQL - Privilege Escalation
CVSS 8.0
CVE-2026-2360
HIGH
PostgreSQL Anonymizer - Privilege Escalation
CVSS 8.0
CVE-2026-25656
HIGH
Siemens Sinec Nms < 2.15.2.1 - Uncontrolled Search Path
CVSS 7.8
CVE-2026-25655
HIGH
Siemens Sinec Nms < 4.0 - Uncontrolled Search Path
CVSS 7.8
CVE-2026-23741
NONE
Asterisk <20.7-cert9, 20.18.2, 21.12.1, 22.8.2, 23.2.2 - Privilege ...
CVE-2026-23740
NONE
Sangoma Certified Asterisk < 20.18.2 - Uncontrolled Search Path
CVE-2026-24694
HIGH
Roland Cloud Manager <3.1.19 - Code Injection
CVSS 7.8
CVE-2026-25129
MEDIUM
Psysh < 0.12.19 - Uncontrolled Search Path
CVSS 6.7
CVE-2026-21408
HIGH
beat-access <3.0.3 - Code Injection
CVSS 7.3
CVE-2026-0776
HIGH
Discord Client - Privilege Escalation
CVSS 7.3
CVE-2026-23755
HIGH
D-Link D-View 8 <2.0.1.107 - Code Injection
CVSS 7.3
CVE-2026-24016
HIGH
ServerView Agents - Code Injection
CVSS 7.8
CVE-2026-21427
HIGH
Pioneer Corporation - DLL Hijacking
CVSS 7.8
CVE-2025-10549
MEDIUM
DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation
CVSS 5.1
CVE-2025-14821
HIGH
Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows
CVSS 7.8
CVE-2025-69784
HIGH
OpenEDR 2.5.1.0 - Privilege Escalation
CVSS 8.8
CVE-2025-11792
HIGH
Acronis Cyber Protect Cloud Agent <41124 - Privilege Escalation
CVSS 7.3
CVE-2025-15558
HIGH
Docker CLI <=29.1.5 - Privilege Escalation
CVSS 8.0
CVE-2025-54519
HIGH
Doc Nav - Privilege Escalation
CVSS 7.3
CVE-2025-52541
HIGH
Vivado - Privilege Escalation
CVSS 7.3
CVE-2025-48503
HIGH
AMD Software Installer - Privilege Escalation
CVSS 7.8
CVE-2025-32452
MEDIUM
AI Playground <2.6.1 beta - Privilege Escalation
CVSS 6.7
Details
Vulnerabilities
1,133