Critical severity9.1NVD Advisory· Published Mar 3, 2026· Updated Jun 17, 2026
CVE-2025-66945
CVE-2025-66945
Description
A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x. When a crafted ZIP archive is processed by the backend at /api/extract, files may be written outside the intended directory, leading to arbitrary file overwrite and potentially remote code execution
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Zdir Pro/Zdir Prodescription
- Range: 4.x
Patches
Vulnerability mechanics
References
1- zeroday.endlessparadox.com/posts/cve-2025-66945/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.