Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-40118 EUVD-2026-23192GHSA-rhf4-34xg-3v3j

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user config…

Published Apr 16, 2026 · Updated Apr 16, 2026 · Assigned by jpcert

Description

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability. When a user configures an activation server hostname of the affected product to a dummy URL, the product may unintentionally communicate with the dummy domain, causing information disclosure.

Affected products

VendorProductAffectedFixed
Arcserve UDP Console 10.3 —

References