VULNERABILITY INTELLIGENCE
CVE-2026-40118
CVSS score6.3 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-04-16
Last modified2026-10-26
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Description
UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing information disclosure.
Weakness classification
- vultures@jpcert.or.jp: CWE-941