Lucene search
+L

2 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/30 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-56876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like...

8.6CVSS7.2AI score0.00391EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2026/06/26 4:44 p.m.17 views

CVE-2026-56876

extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to point outside the extraction directory...

8.6CVSS5.9AI score0.00391EPSS
SaveExploits1
Rows per page
Query Builder