CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2026-617256.1/MEDIUMEPSS 0.1%
2026-10-30

sevenz-rust2 Path Traversal and Arbitrary File Overwrite Vulnerability (CVE-2026-61725)

[Affected Scope] Rust applications utilizing sevenz-rust2 library versions prior to 0.21.1.

[Impact] Extraction of a malicious 7z archive can lead to writing or overwriting files outside the intended directory, potentially resulting in Remote Code Execution (RCE).

[Mitigation] Immediately upgrade sevenz-rust2 dependency to version 0.21.1 or later.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse