CVE-2026-7179

A security vulnerability has been detected in OSPG binwalk up to 2.4.3. This vulnerability affects the function read_null_terminated_string of the file src/binwalk/plugins/winceextract.py of the component WinCE Extraction Plugin. Such manipulation of the argument self.file_name leads to path traversal. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. The project maintainer confirms this issue: "I accept the existence of the Path Traversal vulnerability. However, as stated in the Github link, it reached EOL and as a result no actions should be expected." The GitHub repository mentions, that "[u]sers and contributors should migrate to binwalk v3." This vulnerability only affects products that are no longer supported by the maintainer.

• CWE-22

• https://github.com/dhabaleshwar/Open-Source-Vulnerabilities/blob/main/binwalk_path_traversal.md
• https://vuldb.com/submit/802228
• https://vuldb.com/vuln/359781
• https://vuldb.com/vuln/359781/cti

Published

Apr 27, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7165The vulnerability is present in the ‘/addJugador’ endpoint: …9.4
• CVE-2026-7166Vulnerability involving the exposure of sensitive data provi…9.2
• CVE-2026-7167The vulnerability arises when the system fails to properly v…6.9
• CVE-2026-7168Successfully using libcurl to do a transfer over a specific …5.3
• CVE-2026-7177A security flaw has been discovered in ChatGPTNextWeb NextCh…7.3
• CVE-2026-7178A weakness has been identified in ChatGPTNextWeb NextChat up…7.3
• CVE-2026-7182Diagram's export module is vulnerable to Path Traversal in s…9.2
• CVE-2026-7183A vulnerability has been found in aligungr UERANSIM up to 3.…5.5
• CVE-2026-7184Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.1…6.5
• CVE-2026-71845A flaw was found in insights-client. The setDefault() functi…6.3
• CVE-2026-71847Ruby JSON is a JSON implementation for Ruby. From 2.20.0 unt…8.7
• CVE-2026-71848Hono is a Web application framework that provides support fo…5.3