max-mapper

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

max-mapper records in CISA KEV

No max-mapper vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Extract-zip · all components

TI-2026-41002 CVE-2026-56876 · GHSA-jmr9-qjv8-65gv

HIGH 72

extract-zip does not validate symlink targets when extracting zip archives.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00526 Published 2026-06-26 Partial fix CWE-22