Vita3K

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Vita3K records in CISA KEV

No Vita3K vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-76177 CVE-2026-112049 · GHSA-hxj8-qwr3-jc5p

Path traversal in Vita3K VPK package installation lets attackers write files

LOW 29

Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write files outside the install directory via crafted .vpk archives.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00151 Published 2026-10-18 Fixed in 4187 CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0