CVE-2026-110235 in MP Manager
Resumen
por MITRE • 2026-10-13
MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating or overwriting files anywhere the app can write on shared storage.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.