CWE-428Base

Unquoted Search Path or Element

Draft in the CWE catalog · 335 CVEs mapped

335
CVEs mapped
8.5
Median CVSS
What it is

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

Recent examples
6.7cvss
CVE-2026-66839

CVE-2026-66839 - MEDIUM Severity Vulnerability

NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated attacker may exploit this vulnerability to execute arbitrary code with SYSTEM privileges.

MEDIUMno explanation yet
0%
epss
7.3cvss
CVE-2026-18755

CVE-2026-18755 - HIGH Severity Vulnerability

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library (DLL) file into the application search path prior to the legitimate library, the malicious code is loaded and executed under the security privileges of the GV-ASManager process.

HIGHno explanation yet
0%
epss
7.5cvss
CVE-2026-9128

CVE-2026-9128 - HIGH Severity Vulnerability

A code execution security issue exists within Studio 5000 Logix Designer® due to an unquoted search path in the External Tools configuration. The executable paths specified in the external tools configuration file are not properly quoted, and because these paths contain spaces, the operating system may resolve them to unintended executables placed earlier in the search order. If exploited, an attacker could plant a malicious executable in a location within the search path, resulting in arbitrary code execution with the same permissions of the user running the application.

HIGHno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-428
Abstraction
Base
Structure
Simple
Status
Draft