RouterCVE

CVE-2026-45384

MEDIUM
6.1CVSS v3
—CVSS v2
0.13% EPSS (exploit probability)
CWE-59CWE

Description

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, there is an arbitrary file overwrite vulnerability via symlink attack on predictable temp files during archive update. This issue has been patched in version 4.0.12.

CVSS v3 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references