7.5 High
CVE-2026-10621
CVE-2026-10621
CollibraCollibra Platform (SaaS)
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 34% of scored CVEs
SeverityCVSS
7.5High
Description NVD
Path traversal in restore handler in Collibra Agent, allows an attacker to write arbitrary files via a crafted ZIP archive. Collibra Agent fails to properly validate and canonicalize file path during ZIP extraction, this can allow an attacker to write files outside the intended extraction directory.
Coverage 1 article · 1 outlet
- Attackers exploit CVE-2026-28318 and Zip Slip in Collibra AgentSecurityOnline · first in our coverage · mentions it in passing