CVE-2026-115906 | zip-rs Zip up to 8.x AES entry reader src/aes.rs by_index_decrypt signature verification

SecurityVulns
Yanac

A vulnerability classified as problematic has been found in zip-rs Zip up to 8.x. Affected by this issue is the function by_index_decrypt of the file src/aes.rs of the component AES entry reader. Performing a manipulation results in improper verification of cryptographic signature.

This vulnerability is reported as CVE-2026-115906. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More