7-Zip <= 26.02 Mark-of-the-Web Bypass (CVE-2026-58052)

The version of 7-Zip installed on the remote Windows host is 26.02 or earlier. It is, therefore, affected by a vulnerability: - 7-Zip for Windows fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier...

CVE-2026-58052

creationtimestamp| type| source ---|---|--- 2026-06-28 09:57:50+00:00| seen| https://bsky.app/profile/suriq.io/post/3mpdpjxd5kh2s 2026-06-29 20:03:01+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mphbt2gmac2e 2026-06-29 21:44:42+00:00| seen|...

CVE-2026-58052 7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision

7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched...