CVE-2026-8164CWE-427

Search Order Hijacking in ArkSigner's ArkSigner Desktop Client

High · published July 28, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking.

This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-07-28T14:01Z
EPSS history
Timeline
  • 28 JUL 14:01Z
    Search Order Hijacking in ArkSigner's ArkSigner Desktop Client
    cvelistv5