Login Request a demo
PE
Product
PeaZip
by PeaZip · last CVE Oct 15, 2026
6
CVEs
0
On KEV
8.4
Max CVSS
4
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 5Medium 1Low 0
Severity
All severities6Critical0High5Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add PeaZip to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-104025
8.4
0%
Oct 15
Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name
Affected: before 11.3.0
CVE-2026-102514
8.4
0%
Oct 1
Out-of-bounds write in PeaZip PEA extractor allows code execution via a crafted .pea archive
Affected: before 11.3.0
CVE-2025-33026
7.8
0%
Apr 15
In PeaZip through 10.4.0, there is a Mark-of-the-Web Bypass Vulnerability
Affected: through 10.4.0
CVE-2023-6891
7.8
0%
Dec 17
PeaZip Library dragdropfilesdll.dll uncontrolled search path
Affected: 9.4.0
CVE-2026-105050
7.1
1%
Oct 2
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string"…
Affected: before 11.3.0
CVE-2026-104024
4.6
0%
Oct 15
Incomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmation
Affected: 10.5.0 before 11.3.0
Showing 6