CVE-2026-57863 | crater-invoice-inc Crater Invoice up to 6.0.6 Self-update API ZipArchive::extractTo path traversal

August 25, 2026 Yanac

A vulnerability was found in crater-invoice-inc Crater Invoice up to 6.0.6. It has been rated as problematic. This affects the function ZipArchive::extractTo of the component Self-update API. The manipulation leads to path traversal.

This vulnerability is referenced as CVE-2026-57863. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More