SUSE CVE-2026-39244

adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size header field. In zipEntry.js line 103, Buffer.alloccentralHeader.size allocates memory based on the declared uncompressed size from the ZIP central directory header without...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through the handling of XAPK archive entries with absolute paths in the XApkLoader file. An attacker can achieve arbitrary code execution by crafting a malicious .xapk file that causes files to be written outside the...

PT-2026-58887

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description The expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDialog/RunDlg/RunDlg.cpp copies a variable name located between $ and into a fixed-size wchar t strMAX PATH stack buffer...

PT-2026-60280

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/upload, creating an H2 datasource that uses the zip: protocol, and executing an SQL dataset path where...

PT-2026-64791

Impact adawolfa/isdoc reads ISDOC invoices from ISDOCX ZIP archives and from PDF files with embedded ISDOC documents and supplements. Affected versions inflate ZIP entries and read embedded files without validating their uncompressed size, so a small crafted file can amplify into gigabytes: -...

PT-2026-58888

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description The decompress function in WinGup fails to perform canonical containment validation when joining untrusted ZIP entry names to unzipDestTo. This allows a specially crafted ZIP entry, such as...

CVE-2026-50124: Unrestricted Upload of File with Dangerous Type

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/upload, creating an H2 datasource that uses the zip: protocol, and executing an SQL dataset path where...

PT-2026-58886

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.7 Description Notepad++ fails to perform path normalization when validating the backupFilePath attribute from session.xml using the std::wstring::starts with function. This allows the use of parent-directory...

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XZ chunked...

CVE-2026-62843: Improper Limitation of a Pathname to a Restricted Directory

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory. From 2.63.6 to 2.63.16, File Browser's archive builder uses strings.ReplaceAllnameInArchive, "", "/", which turns a POSIX filename such as ....\evil.sh into the...

PT-2026-60144

Name of the Vulnerable Software and Affected Versions Grav version 2.0.1 Description A decompression-bomb size-cap bypass exists in ZipArchiver and GPMInstaller. The system calculates the uncompressed size by summing the values declared in each entry's ZIP central-directory header via...

Linux Distros Unpatched Vulnerability : CVE-2026-39244

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size header field. In zipEntry.js line 103,...

KLA91162 ACE vulnerability in 7-Zip

A remote code execution vulnerability was found in 7-Zip. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service, bypass security restrictions. Original advisories ZDI-26-444 Exploitation Public exploits exist for this vulnerability. Related products 7-Z...

CVE-2026-42447

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx-gui is affected by an HTML injection vulnerability in the Summary tab because SummaryNode.java appends arches and perArchCount values derived from .so file path components inside an APK into an HTML panel without escaping. A malicious APK wit...

CVE-2026-42447 jadx: HTML Injection in Summary panel

jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx-gui is affected by an HTML injection vulnerability in the Summary tab because SummaryNode.java appends arches and perArchCount values derived from .so file path components inside an APK into an HTML panel without escaping. A malicious APK wit...

EUVD-2026-43731

A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of the file include/zip.class.php of the component Album Publishing Feature. The manipulation of the argument filename results in path traversal. The attack can be executed remotely...

K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression

Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...

GHSA-JXR7-MQHW-9P98 K3s: ZIP Archive Path Traversal Vulnerability in etcd Snapshot Decompression

Summary A path traversal vulnerability exists in K3s's etcd snapshot decompression functionality. Zip files containing archive members with maliciously crafted names e.g., ../../../../etc/password can be written to arbitrary locations on the filesystem when an administrator restores the archive a...

CVE-2026-15700

A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of the file include/zip.class.php of the component Album Publishing Feature. The manipulation of the argument filename results in path traversal. The attack can be executed remotely...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the Files.php and Myfiles.php controllers, which insufficiently validate user-supplied paths by relying on prefix checks of the raw URL rather than resolving the canonical filesystem path. An attacker can access...