High severityNVD Advisory· Published Oct 2, 2026

CVE-2026-105050

Description

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Peazip/PeaZipllm-fuzzy
Range: <11.3.0

Patches

Vulnerability mechanics

References

app.secur0.com/certificate/ys3yqg-avrwaq-5ybnwlnvd
github.com/peazip/PeaZip/commit/009fc35530e26729863969eddf4c18f1b48331cfnvd
github.com/peazip/PeaZip/releases/tag/11.3.0nvd
github.com/peazip/PeaZip/tree/sources/peazip-sourcesnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000