CVE-2026-115905 - zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE
CVE ID :CVE-2026-115905 Published : Oct. 26, 2026, 5:17 p.m. | 1 hour, 6 minutes ago Description :zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as authoritative while ZipStreamReader...