high7.1
CVE-2026-105050
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already u…
Impact
PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.
Affected products
| Product | Affected versions |
|---|---|
| PeaZip | before 11.3.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.