CVE-2026-40118
Incorrect Destination Specification Leading to Unintended Communication and Information Disclosure in Arcserve UDP Console
UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing information disclosure.
CVSS 4.0 · 5.1 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products