CVE-2026-41530EPSS p4.1%

CVE-2026-41530CVE-2026-41530

Description

The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic folder creation feature enabled, and a product user tries to extract an archive file which has a crafted file name, then the archived files may be extracted to an unexpected folder.

Scoring

CVSS 3.3 ()
VectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS0.15% probability of exploitation · percentile 4.1% · 2026-10-27T12:03:15Z
Last modified2026-10-26
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.