CVE-2026-2040: CWE-427: Uncontrolled Search Path Element in PDF-XChange PDF-XChange Editor
CVE-2026-2040 is a local privilege escalation vulnerability in PDF-XChange Editor version 10.7.2.400. It arises from an uncontrolled search path element in the TrackerUpdate process, which loads a library from an unsecured location. An attacker with the ability to execute low-privileged code on the system can exploit this flaw to escalate privileges and execute code with higher user rights. The vulnerability has a CVSS score of 7.3, indicating high severity. No patch or official remediation information is currently available.
AI Analysis
Technical Summary
This vulnerability in PDF-XChange Editor's TrackerUpdate process involves an uncontrolled search path element (CWE-427). The product loads a library from an insecure location, allowing a local attacker who already has low-privileged code execution to escalate privileges. The flaw affects version 10.7.2.400 and was tracked as ZDI-CAN-27788. The CVSS 3.0 vector indicates local attack vector, low attack complexity, required privileges of low, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation allows a local attacker to escalate privileges on the affected system, potentially gaining higher user rights and executing code in the context of the target user. This can lead to full compromise of the affected user's environment. There are no known exploits in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor vendor communications for updates. Until a fix is available, limiting local code execution capabilities and restricting user permissions may reduce risk.
CVE-2026-2040: CWE-427: Uncontrolled Search Path Element in PDF-XChange PDF-XChange Editor
Description
CVE-2026-2040 is a local privilege escalation vulnerability in PDF-XChange Editor version 10.7.2.400. It arises from an uncontrolled search path element in the TrackerUpdate process, which loads a library from an unsecured location. An attacker with the ability to execute low-privileged code on the system can exploit this flaw to escalate privileges and execute code with higher user rights. The vulnerability has a CVSS score of 7.3, indicating high severity. No patch or official remediation information is currently available.
CVSS v3.0
Score 7.3high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in PDF-XChange Editor's TrackerUpdate process involves an uncontrolled search path element (CWE-427). The product loads a library from an insecure location, allowing a local attacker who already has low-privileged code execution to escalate privileges. The flaw affects version 10.7.2.400 and was tracked as ZDI-CAN-27788. The CVSS 3.0 vector indicates local attack vector, low attack complexity, required privileges of low, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation allows a local attacker to escalate privileges on the affected system, potentially gaining higher user rights and executing code in the context of the target user. This can lead to full compromise of the affected user's environment. There are no known exploits in the wild at this time.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor vendor communications for updates. Until a fix is available, limiting local code execution capabilities and restricting user permissions may reduce risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- zdi
- Date Reserved
- 2026-02-06T01:13:48.593Z
- Cvss Version
- 3.0
- State
- PUBLISHED
Threat ID: 6998e0efbe58cf853bd8653f
Added to database: 02/20/2026, 22:32:15 UTC
Last enriched: 05/26/2026, 20:27:25 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 217
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.