CVE-2026-8164 HIGH

CVE-2026-8164: Search Order Hijacking in ArkSigner's ArkSigner Desktop Client

Vendor Arksigner Software And Hardware Industry And Trade Inc.

Product ArkSigner Desktop Client

Weakness CWE-427

Published July 28, 2026

Last update July 28, 2026

View on NVD All CVEs

CVSS base score

7.3/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 17062026.

Key dates

02Disclosure timeline

July 28, 2026 CVE published

July 28, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-8164 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/427.html AskarLabs — CWE-427 write-up Uncontrolled Search Path Element

Identifiers

CVE CVE-2026-8164

CWE CWE-427

CVSS 7.3 / HIGH

Affected versions

Vendor Arksigner Software And Hardware Industry And Trade Inc.

Product ArkSigner Desktop Client

Affected ≥ v2.2.16.10 and ≤ 17062026