Unquoted Search Path or Element

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if

• pre-auth RCE

openbsd · opensshJul 19, 2023

An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to ga

• Pre-auth

fortinet · forticlientMar 12, 2020

An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the Ao

• Pre-auth

fortinet · fortisiem windows agentJun 4, 2020

Mitsubishi Electric Factory Automation Engineering Products Unquoted Search Path or Element

• Pre-auth

mitsubishielectric · c controller interface module utilityFeb 11, 2022

Check Point Endpoint Security Client for Windows, with the VPN blade, before version E80.83, starts a process without using quotes in the pa

• Pre-auth

checkpoint · jumbo hotfix for endpoint security serverJun 20, 2019

An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate

• Pre-auth

justsystems · atok medical 2Aug 16, 2022

An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevat

• Pre-auth

12dsynergy · 12dsynergyFeb 19, 2024

Windows service registered with an unquoted ImagePath vulnerability in the system registry

• RCE
• Local privilege escalation

asustor · abp and aesJul 23, 2025

The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.

1e · clientDec 29, 2020

The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.

1e · clientDec 29, 2020

Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse

• Local privilege escalation

moxa · active opc serverSep 24, 2016

Insecure service configuration – unquoted path

bizerba · _connect.brainOct 31, 2025

Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege Escalation

• Local privilege escalation

netgate · amiti antivirusApr 4, 2026

NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege Escalation

• Local privilege escalation

netgate · registry cleanerApr 4, 2026

VeeVPN 1.6.1 - Unquoted Service Path Remote Code Execution

• RCE
• Local privilege escalation

veepn · veepnDec 4, 2025

FLAME II MODEM USB - Unquoted Service Path

• RCE
• Local privilege escalation

telcel · flame ii modem usbJan 13, 2026

Genexus Protection Server 9.7.2.10 Unquoted Service Path Privilege Escalation

• RCE

genexus · genexus protection serverDec 11, 2025

Amiti Antivirus 25.0.640 - Unquoted Service Path Vulnerability

• Local privilege escalation

netgate · amiti antivirusFeb 4, 2026

NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service Path

• Local privilege escalation

netgate · data backupFeb 4, 2026

Dynojet Power Core 2.3.0 - Unquoted Service Path

• Local privilege escalation

dynojet · power coreJan 15, 2026

Wondershare Dr.Fone 11.4.9 - 'DFWSIDService' Unquoted Service Path

• RCE
• Local privilege escalation

wondershare · dr.foneJan 13, 2026

Wondershare MobileTrans 3.5.9 - 'ElevationService' Unquoted Service Path

• Local privilege escalation

wondershare · mobiletransJan 13, 2026

Flexsense DiskBoss Service Unquoted Service Path Vulnerability

• RCE
• Local privilege escalation

flexsense · diskbossDec 5, 2025

Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path

• Local privilege escalation

brother · bragentJan 15, 2026

TotalAV 5.15.69 - Unquoted Service Path

• Local privilege escalation

totalav · totalavJan 16, 2026