zombie-zip

Zombie ZIP ZIP format confusion technique that evades 98% of antivirus engines. CVE-2026-0866 | VU976247 | Published March 10, 2026 The Technique Create a ZIP file where: root@kitploit: Compression Method = 0 STORED Actual data = DEFLATE compressed CRC-32 = Checksum of uncompressed payload...

CVE-2026-0866

After the publication of the PoC by the researcher and further analysis, we have determined that this issue does not constitute a valid vulnerability. The technique described is an obfuscation method and does not bypass or impact any implicit or explicit security controls...

CVE-2026-0866

creationtimestamp| type| source ---|---|--- 2026-03-11 09:36:01+00:00| seen| https://infosec.exchange/users/decio/statuses/116209861321874609 2026-03-11 10:09:25+00:00| seen| https://t.me/ctinow/246968 2026-03-11 19:22:12+00:00| seen|...

CVE-2026-0866

CVE-2026-0866 corresponds to the Zombie ZIP technique. Attackers manipulate ZIP headers (e.g., compressiontype=0, stored) so tools scan the archive as uncompressed data while the payload is actually DEFLATE compressed. A custom loader decompresses the payload, enabling bypass of many antivirus/ED...