Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now! : cybersecurity@infosec.pub

submitted 3 months ago by cm0002@mander.xyz to c/cybersecurity@infosec.pub

1 comment fedilink hide all child comments

sorted by: hot top controversial new old

[–] Kissaki@programming.dev 2 points 3 months ago

7-Zip 26.02, released 2026-06-25, undisclosed vulnerability fixes. Quite a while ago, if you keep stuff up to date.

They mention Landon Peng as the one finding the vulnerability, but their blog has only a post about a vulnerability fixed in 25.01.

[–] Ordoviz@lemmy.ml 2 points 3 months ago

CVE-2026-14266 has been reserved for this according to ZDI.