kiwilan vulnerabilities

Products

• php-archive 1

Latest kiwilan CVEs

Newest publication first

1. CVE-2026-112302 kiwilan php-archive Extraction ArchiveZip.php extract path traversal

   Published 2026-10-19

   Medium·CVSS 5.3 EPSS 0.50%

   A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extraction. This manipulation causes path traversal. The attack is possible to be carried out remotely. The ex...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.