CVE-2026-115905

A flaw was found in zip2. A remote attacker can exploit this vulnerability to achieve arbitrary code execution by supplying a specially crafted archive file. This issue occurs because the streaming extractor reads filenames from local file headers without reconciling them against the central...