All 3 CVE vulnerabilities found in bit7z, with AI-generated Chinese analysis, references, and POCs.
Vendor: rikyoz
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-45380 | bit7z: Path Traversal via Null Byte Injection from `gcount()` Off-by-One in `restoreSymlink()` CWE-22 | 3.6 | Low | 2026-06-10 |
| CVE-2026-45384 | bit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Archive Update CWE-59 | 6.1 | Medium | 2026-06-10 |
| CVE-2026-27117 | bit7z has a path traversal vulnerability CWE-22 | 5.5 | Medium | 2026-02-24 |
All 3 known CVE vulnerabilities affecting bit7z with full Chinese analysis, references, and POCs where available.