TI-2026-55505 CVE-2026-80427
bestzip before 2.2.6 and 3.0.x before 3.0.2 Argument Injection via Missing Option Delimiter
Priority HIGH 72
bestzip builds the argument list for the system zip utility without separating options from operands.
nfriedly
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
nfriedly records in CISA KEVNo nfriedly vulnerabilities are listed in CISA KEV.
Records
2 records
TI-2026-59915 CVE-2026-87794 · GHSA-pf92-m78r-h85c
bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination
Priority LOW 39
bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend.