CVE-2026-110232: Fossify File Manager 0 through 1.6.2

Affected technology

Fossify File Manager · 0 through 1.6.2
Fossify

Description’s affected range: through 1.6.2

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Active user interaction

What an attacker can do

Attackers can supply archive entries like ../_x/file to create or overwrite files in sibling folders when a user extracts the archive. Vendor/CNA’s CVSS 4.0 assessment (base score 4.6/10) rates confidentiality and availability impact as none; integrity impact as low.