CVE-2026-8164
Search Order Hijacking in ArkSigner's ArkSigner Desktop Client
- State
- Published
- Severity
- 7.3 High
- Published
- Jul 28, 2026
- Updated
- Jul 28, 2026
- Reserved
- May 8, 2026
Description
Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking.
This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H | TR-CERT |
Weaknesses
- CWE-427 Uncontrolled Search Path Element
Affected Products
| Product | Versions |
|---|---|
ArkSigner Desktop ClientArkSigner Software and Hardware Industry and Trade Inc. |
|
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0665government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.