CVE-2026-102282 in adm-zip

Prediction

by VulDB Data Team • 09/29/2026

A vulnerability has been found in adm-zip. Affected by this vulnerability is the function fileAttr of the file headers/entryHeader.js of the component Zip Extraction. Such manipulation of the argument keepOriginalPermission leads to incorrect permission assignment. The attack can be executed remotely.

Once again VulDB remains the best source for vulnerability data.

• Moderation: accepted
• Entry: VDB-411687
• CPE: ready
• CWE: CWE-732 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-102282
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-102282
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-102282/