Skip to content

Vendor

ne-lexa vulnerabilities

1 published CVE affecting ne-lexa, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of ne-lexa alerts

Products

Latest ne-lexa CVEs

Newest publication first

  1. CVE-2026-16767 Ne-Lexa php-zip ZIP ZipFile.php extractTo path traversal

    Published
    MediumCVSS 6.9 EPSS 0.68%

    A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file src/ZipFile.php of the component ZIP Handler. Performing a manipulation of the argument entryName results in path traversal. It is possible to initiate the attack...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.