Vendors / muCommander Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now muCommander records in CISA KEV No muCommander vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths.
CVSS 4.0 MEDIUM 5.6· Local · No auth · User interaction · EPSS 0.00275 · Published 2026-10-13 · No fix listed CWE-22
Priority LOW 11
muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials.
CVSS 2.0 LOW 2.1· Local · No auth · Interaction — · EPSS 0.003 · Published 2008-04-27 · No fix listed CWE-255
Open these records in search → All records by CVSS severity
0 0 1 1 0
