Multiple CVEs - `zip2` Rust ZIP extraction flaws enable file overwrite and remote DoS - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

CVE-2026-115905, CVE-2026-115907, CVE-2026-115908, CVE-2026-115909

By Roy Kalfon |

27 October 2026

Multiple CVEs – `zip2` Rust ZIP extraction flaws enable file overwrite and remote DoS

Multiple zip-rs/zip2 ZIP parsing issues allow crafted archives to trigger file overwrite or DoS. CVE-2026-115905 (