CVE-2026-96884 | MantisZip up to 0.4.5 Preview MainWindow.UI.cs Path.Combine path traversal (IK4AHB)

September 23, 2026 Yanac

A vulnerability classified as critical was found in MantisZip up to 0.4.5. Affected by this issue is the function Path.Combine of the file MainWindow.UI.cs of the component Preview. The manipulation results in path traversal.

This vulnerability is known as CVE-2026-96884. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More