CVE-2026-41958

A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability.

• CWE-22

• https://talosintelligence.com/vulnerability_reports/TALOS-2026-2414

Published

Oct 7, 2026

Last Modified

Oct 7, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41951Path traversal vulnerability exists in GROWI v7.5.0 and earl…8.6
• CVE-2026-41952Local privilege escalation due to improper input validation.…7.8
• CVE-2026-41953A vulnerability exists in BIG-IP systems where a highly priv…8.7
• CVE-2026-41954Sensitive information disclosure vulnerability exists in the…4.9
• CVE-2026-41956When a classification profile is configured on a UDP virtual…7.5
• CVE-2026-41957An authenticated remote code execution vulnerability through…8.8
• CVE-2026-41959Incorrect permission assignment vulnerabilities exist in BIG…6.5
• CVE-2026-4196A vulnerability has been found in D-Link DNS-120, DNR-202L, …9.8
• CVE-2026-41960Permission control vulnerability in calls. Impact: Successfu…5.8
• CVE-2026-41961Permission control vulnerability in contacts. Impact: Succes…5.9
• CVE-2026-41962Permission control vulnerability in the app management and c…3.6
• CVE-2026-41963Stack overflow vulnerability in the media platform. Impact: …2.8