PT-2026-33495 · Firebird+1 · Firebird+1

Vladimirelitokarev · CVE-2026-40342 · Published 2026-04-17 · Updated 2026-05-15

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firebird versions prior to 5.0.4 Firebird versions prior to 4.0.7 Firebird versions prior to 3.0.14

Description The external engine plugin loader concatenates a user-supplied engine name into a filesystem path without filtering path separators or dot-dot (..) components. An authenticated user with CREATE FUNCTION privileges can use a crafted ENGINE parameter to perform path traversal and load an arbitrary shared library from any location on the filesystem. The initialization code of the library executes immediately upon loading, before the system validates the module, allowing for code execution under the server's operating system account.

Recommendations Update to version 5.0.4 Update to version 4.0.7 Update to version 3.0.14

Exploit

Fix

RCE

DoS

Uncontrolled Search Path Element

Path traversal

Code Injection

Weakness Enumeration

CWE-427

CWE-73

CWE-22

CWE-94

Related Identifiers

BDU:2026-07740

CVE-2026-40342

GHSA-7PXC-H3RV-R257

OESA-2026-2013

OESA-2026-2014

OESA-2026-2015

OESA-2026-2016

OESA-2026-2017

SUSE-SU-2026:1868-1

Affected Products

Firebird

Red Os

References · 43

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40342.json · Exploit
• 🔥 https://github.com/FirebirdSQL/firebird/security/advisories/GHSA-7pxc-h3rv-r257 · Exploit
• https://osv.dev/vulnerability/OESA-2026-2015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40342 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/732890 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-40342 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65104 · Security Note
• https://osv.dev/vulnerability/CVE-2026-40342 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-28224 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-28212 · Security Note
• https://bdu.fstec.ru/vul/2026-07740 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-34232 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-40342 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2017 · Vendor Advisory