Product

Zip2 (< 9.0.5)

1 brief RSS

Rust zip-rs/zip2: Arbitrary file overwrite and RCE via ZIP header mismatch (CVE-2026-115905)

CVE-2026-115905 is a critical vulnerability in the Rust zip crate (versions <= 9.0.4) allowing arbitrary file overwrites or RCE via ZIP header discrepancy between CDFH and LFH.

zip2 zip rust vulnerability rce file-overwrite

2t 1c 53m ago