news.mlab.sh
2 results
vulnerability

New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

A vulnerability (CVE-2026-14266) in 7-Zip’s XZ archive handling allows an attacker to execute code on a victim machine by crafting a malicious XZ archive. The vulnerability stems from a buffer overflow when processing XZ chunked data, and a patch was released on June 25th. While a proof-of-concept is not yet available,…

The Hacker News · Jul 20, 2026 High