CVE-2026-110235 in MP Manager
요약
\~에 의해 MITRE • 2026. 10. 13.
MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating or overwriting files anywhere the app can write on shared storage.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.