CVE-2026-54550 | IzPack up to 5.2.6 UnpackerBase UnpackerBase.java UnpackerBase.unpack targetPath path traversal

August 26, 2026 Yanac

A vulnerability has been found in IzPack up to 5.2.6 and classified as problematic. This impacts the function UnpackerBase.unpack of the file izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java of the component UnpackerBase. Performing a manipulation of the argument targetPath results in relative path traversal.

This vulnerability is identified as CVE-2026-54550. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More