CVE-2026-104024

PeaZip versions 10.5.0 through 11.2.0 on Windows are vulnerable to an Incomplete List of Disallowed Inputs (CWE-184) in the archive object viewer (peach.pas, grid_obj_open ). The software uses a hard-coded list (SEBuildContext) to prompt users before running files, but it fails to include shell-e...

EUVD-2026-102089

Incomplete List of Disallowed Inputs CWE-184 in the dangerous-extension confirmation of the archive object viewer peach.pas, gridobjopen in PeaZip 10.5.0 through 11.2.0 on Windows allows an attacker who convinces a victim to open an entry of a crafted archive to execute a program, or an arbitrary...