Ghostwire

CVE-2026-115905: zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to...

CRITICAL CVSS 0.0 EPSS 0.32% Exploit Available 2 PoC

Published: October 28, 2026 | Last Modified: October 28, 2026

Description

zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

Ghostwire Analysis — What This Means Practically

Exploitation Probability (EPSS): Low — 0.32% (25th percentile)

Low exploitation probability based on current threat landscape data. Standard patching timeline is appropriate.

2 proof-of-concept exploits available on GitHub. Public exploit code lowers the barrier for both researchers and attackers.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Proof-of-Concept Exploits (2)

foxcornlab/zip-cloaking-scanner
cosmonic-labs/demo-zip-rce-sandbox

References

github.com/zip-rs/zip2/security/advisories/GHSA-m665-v7pm-7grj
nvd.nist.gov/vuln/detail/CVE-2026-115905
github.com/zip-rs/zip2/commit/8068ab480ccf8daa7411424e365fcdbe6d09443e
github.com/zip-rs/zip2/releases/tag/v9.0.5
github.com/advisories/GHSA-m665-v7pm-7grj
www.tenable.com/cve/CVE-2026-115905
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-115905