CVE-2026-105050

— UNSCOREDpublic exploit available

Published 2026-10-02 · Updated 2026-10-06

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.

Weaknesses

CWE-180

Public exploit & PoC references

https://github.com/peazip/PeaZip/commit/009fc35530e26729863969eddf4c18f1b48331cf
https://github.com/peazip/PeaZip/releases/tag/11.3.0
https://github.com/peazip/PeaZip/tree/sources/peazip-sources

All references

https://app.secur0.com/certificate/ys3yqg-avrwaq-5ybnwl
https://github.com/peazip/PeaZip/commit/009fc35530e26729863969eddf4c18f1b48331cf
https://github.com/peazip/PeaZip/releases/tag/11.3.0
https://github.com/peazip/PeaZip/tree/sources/peazip-sources

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100230PoC
HIGHCVE-2026-100409PoC
MEDIUMCVE-2026-100547PoC
MEDIUMCVE-2026-100674PoC
MEDIUMCVE-2026-102269PoC
UNSCOREDCVE-2026-110846PoC
MEDIUMCVE-2026-112003PoC
UNSCOREDCVE-2026-93326PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.