CVE-2026-8164

Full vulnerability record from the local CVENow database.

Description

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026.

Severity

HIGH

CVSS score

7.3 (v3.1)

Vulnerability status

Deferred

Source identifier

[email protected]

Published

2026-07-28 15:17:51.633000

Last modified

2026-10-24 13:10:00.147000

View original CVE JSON

{
  "id": "CVE-2026-8164",
  "sourceIdentifier": "[email protected]",
  "published": "2026-07-28T15:17:51.633",
  "lastModified": "2026-10-24T13:10:00.147",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking.\n\nThis issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de Elemento de Ruta de Búsqueda No Controlado en ArkSigner Software and Hardware Industry and Trade Inc. Cliente de escritorio ArkSigner permite el Secuestro del Orden de Búsqueda.\n\nEste problema afecta al Cliente de escritorio ArkSigner: desde la v2.2.16.10 hasta la 17062026."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "ArkSigner Software and Hardware Industry and Trade Inc.",
          "product": "ArkSigner Desktop Client",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "v2.2.16.10",
              "lessThanOrEqual": "17062026",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
          "baseScore": 7.3,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.3,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-07-28T14:44:57.907759Z",
          "id": "CVE-2026-8164",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0665",
      "source": "[email protected]"
    }
  ]
}