SecurityOnlineDo Son
Gzip CVE-2026-41991/2 let attackers overwrite files
Part of the CVE-2026-41991 story · since 2 Jul
- Thu 2 Jul, 10:32 UTC. SecurityOnline, first report. Gzip CVE-2026-41991/2 let attackers overwrite files. This article, 1st of 1.
The content reports two critical vulnerabilities discovered in GNU gzip, identified as CVE-2026-41991 and CVE-2026-41992. The first vulnerability (CVE-2026-41991) allows local attackers to overwrite files using a gzexe symlink attack due to predictable temporary filenames. The second vulnerability (CVE-2026-41992) triggers an out-of-bounds read in the decompression code. Both vulnerabilities affect all versions up to 1.14 and have a medium to high severity rating. Proper patching is advised as the gzip tool is widely used across Linux and Unix systems, and currently, there have been no confirmed exploits.
How the story developed
1 article from 1 outlet since 2 Jul. Quiet since 2 Jul. This was the first report.
- Thu 2 Jul, 10:32 UTC. SecurityOnline, first report. Gzip CVE-2026-41991/2 let attackers overwrite files. This article, 1st of 1.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Thu 2 JulDay 01
- Gzip CVE-2026-41991/2 let attackers overwrite files10:32 · SecurityOnline · First report · This article, 1st of 1