CVE-2026-18929 | Carbone up to 3.8.1/4.26.2/5.4.3 Zip Decompression resource consumption

August 18, 2026 Yanac

A vulnerability has been found in Carbone up to 3.8.1/4.26.2/5.4.3 and classified as problematic. This issue affects some unknown processing of the component Zip Decompression. Performing a manipulation results in resource consumption.

This vulnerability is reported as CVE-2026-18929. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More