Arcserve Vulnerabilities and Affected Products
Vulnerabilities associated with UDP Console.
Products
Clear product- Unified Data Protection (UDP)5 vulnerabilities
- Unified Data Protection4 vulnerabilities
- Arcserve UDP3 vulnerabilities
- arcserve_unified_data_protection2 vulnerabilities
- udp2 vulnerabilities
- D2D1 vulnerability
- UDP Console1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-40118MEDIUM | Generated title:Arcserve UDP Console Incorrectly Specified Destination in Communication ChannelUDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing information disclosure. CWE-941Apr 16, 2026 | CVSS5.1v4.0 | EPSS0.178% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |