CVE-2026-8164

{"id": "CVE-2026-8164", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8164", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-07-28T14:44:57.907759Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.3}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "ArkSigner Software and Hardware Industry and Trade Inc.", "product": "ArkSigner Desktop Client", "versions": [{"status": "affected", "version": "v2.2.16.10", "versionType": "custom", "lessThanOrEqual": "17062026"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-28T15:17:51.633", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0665", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking.\n\nThis issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026."}, {"lang": "es", "value": "Una vulnerabilidad de Elemento de Ruta de B\u00fasqueda No Controlado en ArkSigner Software and Hardware Industry and Trade Inc. Cliente de escritorio ArkSigner permite el Secuestro del Orden de B\u00fasqueda.\n\nEste problema afecta al Cliente de escritorio ArkSigner: desde la v2.2.16.10 hasta la 17062026."}], "lastModified": "2026-10-24T13:10:00.147", "sourceIdentifier": "iletisim@usom.gov.tr"}