HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-8164 — Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardwar...

·Source: NIST NVD

Updated:

Executive Summary

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026.

Analysis

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026. CVSS Score: 7.3. Published: 2026-07-28T15:17:51.633.

Indicators of Compromise (1)

CVE (1)
CVE-2026-8164
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

House Committee Advances Bill Preventing OSHA From Implementing Heat Standard

A bill that seeks to prohibit the Department of Labor’s Occupational Safety and Health Administration (OSHA) from issuing a standard […] The post House Committee Advances Bill Preventing OSHA From Implementing Heat Standard appeared first on The HIPAA Journal .

HIPAA Journal
HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-67181 — Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability tha...

Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to desynchronize HTTP message boundaries by exploiting improper header forwarding in the proxy implementation. The proxy in src/proxy.rs forwards the client's Transfer-Encoding header to upstream backends unchanged while transmitting a body already de-chunked by tiny_http, enabling CL.TE desyn

CVE-2026-67181
NIST NVD
HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-66754 — Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the ...

Rouille 0.1.6 through 3.6.2 contains a reachable assertion vulnerability in the Request::remove_prefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent-encoded URL. Attackers can send a request whose decoded path matches a configured prefix while the raw percent-encoded path does not, causing the assert! to fail and triggering either a 500 erro

CVE-2026-66754
NIST NVD