https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T19:32:22.038467+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-317278 EUVD-2026-317278 2026-10-12T19:32:22.040892+00:00 EUVD-2026-317278 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41530 fkie_cve-2026-41530 2026-10-12T19:32:22.040920+00:00

The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic folder creation feature enabled, and a product user tries to extract an archive file which has a crafted file name, then the archived files may be extracted to an unexpected folder.

 https://cve.radiocsirt.org/vuln/ghsa-g8fh-6crc-6rfw GHSA-g8fh-6crc-6rfw 2026-10-12T19:32:22.040949+00:00

The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability. When the affected product is configured with the automatic folder creation feature enabled, and a product user tries to extract an archive file which has a crafted file name, then the archived files may be extracted to an unexpected folder.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000068 jvndb-2026-000068 2026-10-12T19:32:22.040966+00:00

Lhaz and Lhaz+ provided by Chitora soft contain the following vulnerability.<a href='https://cwe.mitre.org/data/definitions/22.html' target='_blank'></a><ul><li>Path traversal (CWE-22) - CVE-2026-41530</li></ul>RyotaK of GMO Flatt Security Inc. and Rei Yano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.