Skip to content
Threat Feed
Subscribe

Tag

Untrusted-Search-Path

2 briefs RSS
high advisory

Arbitrary Code Execution in IBM i via Untrusted Search Path

An untrusted search path vulnerability (CVE-2026-16674) in IBM i versions 7.3 through 7.6 allows a remote authenticated attacker to achieve arbitrary code execution.

i ibm-i cve-2026-16674 arbitrary-code-execution untrusted-search-path
1t 1c
high advisory

CVE-2026-3780: Local Privilege Escalation via Untrusted Search Path in Application Installer

An application installer vulnerable to CVE-2026-3780 runs with elevated privileges but resolves system executables and DLLs using an untrusted search path, enabling local privilege escalation by allowing a local attacker to inject malicious binaries.

Foxit privilege-escalation cve-2026-3780 untrusted-search-path dll-hijacking installer
2r 1t 1c