BaselineWatch
Desk

CVE-2026-102257

7.2 high exploit ×4 SSVC exploitation: none Awaiting Analysis

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution.

Fix

Public exploits 4

Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.

Vendor advisories in the News 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 7.2NVD modified 2026-10-08 04:17

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 1