PT-2026-33495 · Firebird · Firebird

Vladimirelitokarev · Published 2026-04-17 · Updated 2026-04-27 · CVE-2026-40342

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firebird versions prior to 5.0.4 Firebird versions prior to 4.0.7 Firebird versions prior to 3.0.14

Description The external engine plugin loader concatenates a user-supplied engine name into a filesystem path without filtering path separators or dot-dot (..) components. An authenticated user with CREATE FUNCTION privileges can use a crafted ENGINE parameter to perform path traversal and load an arbitrary shared library from any location on the filesystem. The initialization code of the library executes immediately upon loading, before the system validates the module, allowing for code execution under the server's operating system account.

Recommendations Update to version 5.0.4 Update to version 4.0.7 Update to version 3.0.14

Exploit

Fix

RCE

Path traversal

Code Injection

Uncontrolled Search Path Element

Weakness Enumeration

CWE-22

CWE-94

CWE-73

CWE-427

Related Identifiers

CVE-2026-40342

OESA-2026-2013

OESA-2026-2014

OESA-2026-2015

OESA-2026-2016

OESA-2026-2017

Affected Products

Firebird

References · 35

• 🔥 https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-7pxc-h3rv-r257 · Exploit
• https://osv.dev/vulnerability/OESA-2026-2015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35215 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2017 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-34232 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-40342 · Security Note
• https://ubuntu.com/security/CVE-2026-40342 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-40342 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-27890 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-33337 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28214 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-40342 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28224 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2016 · Vendor Advisory