Skip to content
The Nexus
DossierENTITY

7-Zip

Coverage of 7-Zip in the Nexus archive.

Earliest in view: Jul 9 · 04:01 UTCMost recent: Jul 20 · 09:10 UTC
Co-mentioned in this coverage
Trend Micro's Zero Day Initiativeorganization1CVE-2026-14266topic1heap-based buffer overflowtopic1XZ archivestopic1code executiontopic1remote code execution vulnerabilitytopic1malicious archivestopic1Lurking Lizardorganization1Infobloxorganization1residential proxy nodestopic1
Recent coverage
  • SECURITYJul 20 · 09:10 UTCTHE HACKER NEWS
    New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction

    A new vulnerability in 7-Zip (CVE-2026-14266) allows code execution when processing crafted XZ archives due to a heap-based buffer overflow. Trend Micro's Zero Day Initiative disclosed the flaw on July 15, and a fix was released in 7-Zip 26.02 on June 25.

  • SECURITYJul 18 · 19:32 UTCBLEEPING COMPUTER
    Update now: 7-Zip fixes RCE flaw exploitable with malicious archives

    7-Zip version 26.02 addresses a remote code execution vulnerability that could allow attackers to execute malicious code through specially crafted compressed files. The update resolves a security flaw exploitable by convincing users to open malicious archives.

  • SECURITYJul 9 · 04:01 UTCTHE HACKER NEWS
    Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

    Cybersecurity researchers identified a threat actor named Lurking Lizard using fake 7-Zip installers to operate a malicious residential proxy network via over 230 lookalike domains. The campaign, active since at least August 2022, was tracked by DNS threat intelligence firm Infoblox.