Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZ-Compressed Files. Update it now!

⁨17⁩ ⁨likes⁩

Submitted ⁨⁨3⁩ ⁨days⁩ ago⁩ by ⁨cm0002@mander.xyz⁩ to ⁨cybersecurity@infosec.pub⁩

https://securityaffairs.com/195688/security/critical-7-zip-flaw-allows-code-execution-by-opening-crafted-xz-compressed-files-update-it-now.html

Comments

Sort:hotnew top

Kissaki@programming.dev ⁨2⁩ ⁨days⁩ ago
7-Zip 26.02, released 2026-06-25, undisclosed vulnerability fixes. Quite a while ago, if you keep stuff up to date.

They mention Landon Peng as the one finding the vulnerability, but their blog has only a post about a vulnerability fixed in 25.01.

source