Skip to content
Jjunrar
Products
| Product | CVEs | Exploited | Latest |
|---|
| junrar | 4 | – | Oct 15, 2026 |
Exploited and recent CVEs
-
CVE-2026-97370
High 7.5
Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction
0.4%
-
CVE-2026-86071
Low 3.7
Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root
0.4%
-
CVE-2026-41245
Medium 5.9
Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix
0.3%
-
CVE-2026-28208
Medium 5.9
Junrar has arbitrary file write due to backslash path traversal bypass in LocalFolderExtractor on Linux/Unix
14.7%