CVE-2026-115908

Published 26 October 2026 · tracked since 27 October 2026

Description

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipArchive::extract and ZipArchive::extract_unwrapped_root_dir use safe_prepare_path in src/read/zipfile.rs and simplified_components in src/path.rs to validate symbolic link targets with a lexi

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-72752 MEDIUM 6.5
• CVE-2026-50095 MEDIUM 6.1
• CVE-2026-116398 MEDIUM 6.5
• CVE-2026-116400 MEDIUM 6.5
• CVE-2026-115922 MEDIUM 6.2
• CVE-2026-115923 MEDIUM 6.5
• CVE-2026-115966 MEDIUM 6.5
• CVE-2026-115918 MEDIUM 6.5
• CVE-2026-115919 MEDIUM 6.2
• CVE-2026-115920 MEDIUM 6.2

→ Open the live CVE board · all tools