Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of archive entry paths before writing files to disk which could result in full system compromise.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-14947 A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory a… https://www.cve.org/CVERecord?id=CVE-2026-14947
Post summary
The CVE details a directory traversal flaw in ZIP extraction that allows privileged attackers to escape the intended directory; no proof of concept, exploit code, or patch information is provided.
CVE-2026-14947 Directory Traversal via Malicious ZIP Upload Enables Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-14947
Post summary
A newly disclosed CVE-2026-14947 enables directory traversal through malicious ZIP uploads, allowing potential code execution; details are available on Vulmon.