CVE WATCH / VULNERABILITY DETAIL
CVE-2026-112302
MEDIUMCVSS 6.3NVD feed
Published 19 October 2026 · tracked since 20 October 2026
Description
A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extraction. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been made
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog