CVE-2026-110231

Versions of muCommander through 1.6.2 are vulnerable to a path traversal vulnerability in the UnpackJob component. The root cause is a failure to properly normalize remote paths, allowing attackers to bypass ZipSlip checks during archive extraction. By crafting malicious TAR or ZIP entries (e.g.,...