CVE-2026-48092

7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offset value to bypass the fragment bounds check, causing memcpy to read heap memory preceding the cache buffer into the extracted file. The vulnerability is exploitable only on 32-bit builds of 7-Zip where size_t is 32 bits, allowing the addition offsetInBlock + blockSize to wrap modulo 2³². On 64-bit builds the addition is promoted to 64 bits and the check correctly rejects the input. Version 26.01 patches the issue.

• CWE-125

• https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/Exploit, Patch, Third Party Advisory
• https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/Exploit, Patch, Third Party Advisory

Published

Jun 5, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48087OpenReception's appointment booking software provides an end…9.8
• CVE-2026-48088OpenReception's appointment booking software provides an end…9.4
• CVE-2026-48089DevGuard provides vulnerability management for the full soft…7.1
• CVE-2026-4809plank/laravel-mediable through version 6.4.0 can allow uploa…9.8
• CVE-2026-48090Envoy is an open source edge and service proxy designed for …5.9
• CVE-2026-48091Rejected reason: Further research determined the issue is no…
• CVE-2026-48093The Code Embed WordPress plugin prior to version 2.6.1 is vu…6.5
• CVE-2026-48094The ShareOpenly WordPress plugin prior to version 1.2.1 cont…5.3
• CVE-2026-480957-Zip is a file archiver with a high compression ratio. Vers…8.8
• CVE-2026-48096OpenFGA is an authorization/permission engine built for deve…5.3
• CVE-2026-48097NexTor IP Changer is a command-line tool that leverages the …7.8
• CVE-2026-48098NexTor IP Changer is a command-line tool that leverages the …7.3