Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2026/07/23 10:15 p.m.•73 views

CVE-2026-16767 Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal

A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file src/ZipFile.php of the component ZIP Handler. Performing a manipulation of the argument entryName results in path traversal. It is possible to initiate the attack remotely. The...

6.9CVSS0.0068EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/23 10:15 p.m.•20 views

CVE-2026-16767 Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal

A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file src/ZipFile.php of the component ZIP Handler. Performing a manipulation of the argument entryName results in path traversal. It is possible to initiate the attack remotely. The...

6.9CVSS6.1AI score0.0068EPSS
SaveExploits0References6
Mend
Mend
•added 2026/07/23 10:15 p.m.•8 views

CVE-2026-16767

A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file src/ZipFile.php of the component ZIP Handler. Performing a manipulation of the argument entryName results in path traversal. It is possible to initiate the attack remotely. The...

6.9CVSS6.1AI score0.0068EPSS
SaveExploits0References8
CVE
CVE
•added 2026/07/23 10:15 p.m.•51 views

CVE-2026-16767

The CVE-2026-16767 entry concerns Ne-Lexa php-zip, affecting ZipFile::extractTo in src/ZipFile.php of the ZIP Handler up to version 4.0.2. The root cause is manipulation of the argument entryName, enabling path traversal. This can be exploited remotely and the exploit is public. The documents do ...

6.9CVSS6.1AI score0.0068EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/07/23 10:15 p.m.•29 views

CVE-2026-16767 Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal

A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file src/ZipFile.php of the component ZIP Handler. Performing a manipulation of the argument entryName results in path traversal. It is possible to initiate the attack remotely. The...

6.9CVSS6.1AI score0.0068EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/07/23 12:00 a.m.•35 views

PT-2026-64194

Name of the Vulnerable Software and Affected Versions Ne-Lexa php-zip versions prior to 4.0.3 Description A path traversal issue exists in the ZIP Handler component within the ZipFile::extractTo function located in the src/ZipFile.php file. A remote attacker can exploit this by manipulating the...

6.9CVSS6.5AI score0.0068EPSS
SaveExploits0References8
Rows per page
Query Builder