OCTOBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-92000

HIGH · CVSS 7.5 EPSS 0.68% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Versions 0.5.14 to 0.6.0 of adm-zip are vulnerable due to inadequate handling of zlib decompression output limits, allowing attackers to create malicious ZIP files that can exhaust system memory. This can lead to denial of service, impacting the availability of applications utilizing this library. Organizations using affected versions should prioritize patching to mitigate the risk of service disruption.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-92000
Severity
HIGH
CVSS
7.5
EPSS
0.68%

Original NVD Description

adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompressed size. Attackers can craft malicious ZIP archives with highly compressible entries declaring zero size to exhaust memory and cause denial of service.