CVE-2026-63499 | Zeroturnaround zt-zip up to 1.18.0 Permission ZipUtil.unpack path traversal

SecurityVulns
Yanac

A vulnerability classified as critical was found in Zeroturnaround zt-zip up to 1.18.0. The impacted element is the function ZipUtil.unpack of the component Permission Handler. Such manipulation leads to path traversal.

This vulnerability is traded as CVE-2026-63499. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More