CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
sevenz-rust2 Path Traversal and Arbitrary File Overwrite Vulnerability (CVE-2026-61725)
[Affected Scope] Rust applications utilizing sevenz-rust2 library versions prior to 0.21.1.
[Impact] Extraction of a malicious 7z archive can lead to writing or overwriting files outside the intended directory, potentially resulting in Remote Code Execution (RCE).
[Mitigation] Immediately upgrade sevenz-rust2 dependency to version 0.21.1 or later.
JFrog Artifactory Privilege Escalation and Admin Access Vulnerability (CVE-2026-42016) Advisory
[Affected Scope] JFrog Artifactory Self-Hosted versions prior to 7.133.11
[Impact] Low-privileged users can escalate to administrative privileges by exploiting insufficient token scope validation, leading to full system compromise
[Mitigation] Immediately upgrade to version 7.133.11 or later and conduct a comprehensive audit of all existing access tokens