Fossify vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Fossify products: 1 record(s), with severity, exploitation and fixes.

Fossify File Manager 1

Exploited only (KEV) →

CVE-2026-110232 Low · 3.3 CWE-22 Oct 13, 2026

Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored startsWith check. Attackers can supply archive entries like ../<name>_x/file to create or overwrite files in sibling folders when a user extracts the archive.