CVE-2026-110232 Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110232 Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110232 Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../x/file to create or overwrite files in sibling folders...

CVE-2026-110232

Fossify File Manager versions through 1.6.2 are vulnerable to a path traversal vulnerability (Zip Slip) within the DecompressActivity component. The root cause is an unanchored startsWith check that fails to properly restrict file paths during extraction. An attacker can provide a crafted ZIP arc...