Vulnerabilities

TI-2026-26279 CVE-2026-33922 · GHSA-28gp-jr6q-rxgq

Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0

LOW 31

A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validation of an input parameter.

CVSS 4.0MEDIUM 6.8 Local High privileges No interaction EPSS 0.00166 Published 2026-08-11 Fixed in 2.7.0 CWE-22

TI-2026-26278 CVE-2026-33921 · GHSA-gwvc-2mf6-9jv4

Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0

LOW 21

The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00133 Published 2026-08-11 Fixed in 2.7.0 CWE-1188

Vulnerabilities

Filters

Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0

Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0