Fossify

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Fossify records in CISA KEV

No Fossify vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-73448 CVE-2026-110232 · GHSA-3q2q-qm6m-5wjv

Path traversal in Fossify File Manager ZIP extraction

LOW 21

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.00205 Published 2026-10-13 No fix listed CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0