CVE-2026-48095 in 7-Zip
Prediction
by VulDB Data Team • 05/29/2026
A vulnerability was detected in 7-Zip up to 26.00. Affected is the function CInStream::GetCuSize of the file CPP/7zip/Archive/NtfsHandler.cpp of the component NTFS Archive Handler. Performing a manipulation results in out-of-bounds write. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading to version 26.01 is able to address this issue. It is advisable to upgrade the affected component.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.