CVE-2026-110231: muCommander 0 through 1.6.2

Affected technology

muCommander · 0 through 1.6.2
muCommander

Description’s affected range: through 1.6.2

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Active user interaction

What an attacker can do

Attackers can craft TAR or ZIP entries like ../../.ssh/authorized_keys that, when extracted to FTP or SFTP folders, create or overwrite files writable by the user's remote account. Vendor/CNA’s CVSS 4.0 assessment (base score 5.6/10) rates confidentiality and availability impact as none; integrity impact as high.