CVE-2026-104024Medium 4.6Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation0.1%
CVE-2026-104025High 8.4Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name0.2%
CVE-2026-105050High 7.1PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.0.5%
CVE-2026-102514High 8.4Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive0.1%
CVE-2025-33026Medium 6.1In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability. This vulnerability allows attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of PeaZip. U0.3%