PT-2026-20940 · Nanazip · Nanazip

Mourinaruto · Publicado 2026-02-19 · Atualizado 2026-02-26 · CVE-2026-27114

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions NanaZip versions 5.0.1252.0 through 6.0.1629.9

Description NanaZip, an open source file archive, contains a flaw in the ROMFS archive parser. Circular NextOffset chains can lead to an infinite loop when processing archives.

Recommendations Update to version 6.0.1630.0 or later.

Exploit

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

CVE-2026-27114

GHSA-HFG9-6RF9-5PGX

Produtos afetados

Nanazip

Referências · 7

• 🔥 https://github.com/M2Team/NanaZip/security/advisories/GHSA-hfg9-6rf9-5pgx · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27114.json · Exploit
• 🔥❌ https://github.com/user-attachments/files/25274528/poc.zip · Exploit, Deleted
• https://t.me/cveNotify/153270 · Publicação no Telegram
• https://t.me/CVEtracker/45180 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-27114 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-27114 · Aviso do Fabricante