CVE-2026-110232 — Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity
Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchor…
Published: 2026-10-13 · CVSS: 4.6 · CVSS 4.0
Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../<name>_x/file to create or overwrite files in sibling folders when a user extracts the archive.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7