cthackers

Products

ProductCVEsExploitedLatest
adm-zip9–Oct 25, 2026

Exploited and recent CVEs

  • CVE-2026-116137 Low 3.7 adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names 0.3%
  • CVE-2026-114105 Medium 6.2 Adm-zip before 0.6.1 Privilege Escalation via keepOriginalPermission Setuid Bits 0.1%
  • CVE-2026-114104 Medium 5.9 adm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass 0.3%
  • CVE-2026-114103 Medium 5.3 adm-zip 0.6.0 Decompression Bomb Guard Bypass via getDataAsync() 0.4%
  • CVE-2026-114102 High 7.5 adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Event 0.5%
  • CVE-2026-102282 High 7.1 adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation 0.2%
  • CVE-2026-77301 High 7.5 adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS) 0.6%
  • CVE-2026-92000 High 7.5 adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size 0.7%
  • CVE-2026-76845 Medium 6.5 adm-zip 0.5.9 through 0.6.0 Arbitrary File Overwrite via Symlink Following on Extraction 0.2%