Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write files outside the intended import directory. Attackers can craft malicious ZIP archives with traversal sequences, absolute paths, or drive prefixes in member names to overwrite or create arbitrary files with the importing process privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-28518 Path Traversal in OpenViking 0.2.1 Enabling Arbitrary File Write via ZIP Import https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-28518
Post summary
The text announces a path traversal vulnerability in OpenViking 0.2.1 that allows arbitrary file writes via ZIP import, with no mention of PoC, exploit, patch, or active exploitation.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-28518 - OpenViking .ovpack Import ZIP Slip Path Traversal Intel Report: https://ift.tt/lu5coYN
Post summary
A threat alert identifies CVE-2026-28518 as a ZIP Slip path traversal flaw in OpenViking’s .ovpack import, with an Intel report link provided.
🚨*CVE* CVE-2026-28518 OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write fil… https://www.cve.org/CVERecord?id=CVE-2026-28518 ----- Traducción: CVE-2026-28518 Ope… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑28518, a path traversal flaw in OpenViking, provides technical details, and notes the fix in commit 46b3e76, but does not mention exploits or active attacks.
CVE-2026-28518 OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write fil… https://www.cve.org/CVERecord?id=CVE-2026-28518
Post summary
CVE-2026-28518 is a path traversal flaw in OpenViking 0.2.1 and earlier, fixed in commit 46b3e76, enabling attackers to write files via the .ovpack import handling.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | volcengine | openviking | - | - | - |