Products: 1
Vulnerabilities: 5
Known Exploited: 0
0
Critical Level Threats
3
High Level Threats
1
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-115909
zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction
Last Modified: Oct 26, 2026
Published: Oct 26, 2026
CVE-2026-115908
zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. (The defense against CVE-2025-29787 was broken in v7.2.0)
Last Modified: Oct 26, 2026
Published: Oct 26, 2026
CVE-2026-115907
zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size
Last Modified: Oct 30, 2026
Published: Oct 26, 2026
CVE-2026-115906
zip: AES Entry HMAC Authentication Bypass on Premature EOF
Last Modified: Oct 31, 2026
Published: Oct 26, 2026
CVE-2026-115905
zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE
Last Modified: Nov 02, 2026
Published: Oct 26, 2026
Items Per Page
