Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbitrary files with attacker-controlled content into sibling directories when a crafted RAR archive is extracted. Version 7.5.10 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41245 Junrar is an open source java RAR archive library. Prior to version 7.5.10, a path traversal vulnerability in `LocalFolderExtractor` allows an attacker to write arbit… https://www.cve.org/CVERecord?id=CVE-2026-41245
Post summary
The snippet announces CVE‑2026‑41245, a path traversal flaw in Junrar’s LocalFolderExtractor before v7.5.10, without any PoC, exploit, patch, or active exploitation details.
CVE-2026-41245 Path Traversal Vulnerability in Junrar Prior to Version 7.5.10 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41245
Post summary
The text announces CVE‑2026‑41245, noting a path traversal flaw in Junrar versions earlier than 7.5.10, but provides no PoC, exploit code, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | junrar_project | junrar | - | - | - |