CVE-2025-11002

7-Zip Vulnerability: New CVEs Allow Remote Code Execution and File Overwrites Two new vulnerabilities (CVE-2025-11001 and CVE-2025-11002) have been discovered in 7-Zip, one of the most widely used file archivers on Windows. These flaws allow attackers to perform directory https:

7-Zip Vulnerability: New CVEs Allow Remote Code Execution and File Overwrites Two new vulnerabilities (CVE-2025-11001 and CVE-2025-11002) have been discovered in 7-Zip, one of the most widely used file archivers on Windows. These flaws allow attackers to perform directory https:

In this episode of IT SPARC Cast - CVE of The Week, @john_Video and @loudoggeek unpack a fresh pair of vulnerabilities affecting one of the most common tools on Windows desktops — 7-Zip. Tracked as CVE-2025-11001 and CVE-2025-11002, these directory traversal flaws allow https:

Critical alert: Two high-severity 7-Zip vulnerabilities (CVE-2025-11001 & CVE-2025-11002) allow arbitrary code execution via symbolic link manipulation in ZIP files. Versions 21.02–24.09 affected. Update to 25.01+ immediately. A public PoC is already available. Don't wait.

🛑 Deux nouvelles failles de sécurité découvertes dans 7-Zip - Quels sont les risques ? Comment se protéger ? 🩹 CVE-2025-11001 🩹 CVE-2025-11002 🧷 Tous les détails sur IT-Connect : https://t.co/Nu0P2E8WfX #7zip #windows #infosec https://t.co/1CiwRJBC1I

Windows users should update 7-Zip to version 25.00 or later to fix two significant “path traversal” vulnerabilities (CVE-2025-11001 and CVE-2025-11002) that can allow remote code execution, caused by the handling of symbolic links in ZIP files. https://t.co/pnCF7Kthky https:/

[1day1line] CVE-2025-11001, CVE-2025-11002: Symbolic-link handling bugs in 7-Zip leading to Arbitrary File Write / RCE potential Today’s 1day1line: 7-Zip’s ZIP extraction logic misparse Linux/WSL-style links and mistakenly treat them as Windows absolute paths, causing an htt

🚨 7-Zip PoC exploit published — two symlink-handling RCEs (CVE-2025-11001, CVE-2025-11002) in 7-Zip ≤24.09. A crafted ZIP with malicious symlinks can cause directory traversal / symlink substitution during extraction, allowing arbitrary file writes outside the target folde

🚨 A public PoC exploit for 7-Zip flaws (CVE-2025-11001, CVE-2025-11002) is out — enabling file writes & possible code execution. Update to 7-Zip 25.00 now! ⚠️ Read More: https://t.co/c2thCsNh1g #CyberSecurity #7Zip #PatchNow https://t.co/3CMk8S7ctc

GitHub - pacbypass/CVE-2025-11001: Exploit for CVE-2025-11001 or CVE-2025-11002 https://t.co/SqAe7wZp9U

GitHub - pacbypass/CVE-2025-11001: Exploit for CVE-2025-11001 or CVE-2025-11002 - https://t.co/zzw84tPE13

Se han identificado dos vulnerabilidades críticas en #7Zip (CVE-2025-11001 y CVE-2025-11002) que permiten ejecución remota de código mediante archivos ZIP manipulados. Afectan versiones anteriores a la 25.01 y requieren actualización inmediata https://t.co/jigpLnryUn https://

Our Co-CTO @Ga_ryo_ and our pentesting AI agent, Takumi, have discovered arbitrary code execution vulnerabilities in 7-Zip. CVE-2025-11001: https://t.co/XowVByWd9A CVE-2025-11002: https://t.co/xBTZsI0boN Please refer to the advisories and take appropriate measures.

7-ZipにZIP解凍時のパストラバーサル 脆弱性(CVE-2025-11001,CVE-2025-11002)、今すぐアップデートを https://t.co/fB76uT0BLl #セキュリティ対策Lab #セキュリティ #Security

⚠️Vulnerabilidades en 7-Zip ❗CVE-2025-11001 ❗CVE-2025-11002 ➡️Más info: https://t.co/kKWBT4jtsa https://t.co/fIJa3n25GE

🚨7-Zip CVE-2025-11002 Detection https://t.co/YzTo1xLS1X A KQL query designed to monitor for potential exploitation of CVE-2025-11002 a directory traversal vulnerability in 7-Zip until the affected infrastructure is fully patched and secured. https://t.co/KlIqvU8d8S https://

壓縮工具 7-Zip 存在高風險漏洞 (CVE-2025-11001, CVE-2025-11002)。 風險：解壓縮惡意 ZIP 檔，可能導致遠端程式碼執行。 主因：7-Zip 缺乏自動更新機制，大量用戶仍在使用舊的、有漏洞的版本。 解法：請立即手動前往

🚨 Dos vulnerabilidades críticas en 7-Zip ⚠️ CVE-2025-11001 ⚠️ CVE-2025-11002 https://t.co/ab04trVtBO https://t.co/MxO228J5V5

🛡️ Abrir el archivo equivocado en 7-Zip puede comprometer tu red Dos vulnerabilidades graves (CVE-2025-11001 y CVE-2025-11002) afectan a todas las versiones de 7-Zip anteriores a la 25.00. Permiten a un atacante ejecutar código malicioso al manipular cómo se procesan en

Flaws (CVE-2025-11001 & CVE-2025-11002) in 7-Zip allow attackers to gain RCE by exploiting directory traversal via malicious ZIP files. Update immediately to v25.00. #7Zip #RCE #Cybersecurity #ZipFlaw #ZDI https://t.co/2ovXgisOfC

🚨CVE-2025-11002 and CVE-2025-11001: 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability CVSS: 7.0 / 7.0 Advisory: https://t.co/RYUZ5EoBlH and https://t.co/shEWNSXUQv Fixed in 7-Zip 25.00

⚠️ Per chi fosse interessato: vulnerabilità ( CVE-2025-11001 e CVE-2025-11002) in #7Zip consentono agli aggressori di eseguire codice arbitrario da remoto. Aggiornamento alla versione 25.00 disponibile. 🔗 https://t.co/k2vcZGHfNp https://t.co/fLvlveEUHd

7-Zipで深刻な任意コード実行の脆弱性が修正。CVE-2025-11001とCVE-2025-11002はCVSSスコア7.0。シンボリックリンクリンクの取扱いに起因。バージョン25.00で修正。GMO Flatt SecurityのRyota Shiga氏がTakumiで発見。 https://t.co/O4W

🚨 7-Zip Vulnerabilities Allow Remote Code Execution Two critical flaws (CVE-2025-11001 & CVE-2025-11002). ✅ By exploiting symbolic links in archives, attackers can execute arbitrary code - patch immediately 🎯 🔗 https://t.co/dPuEkTc7tz #CyberSecurity #News

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability (CVE-2025-11002) #7Zip #CVE202511002 #CyberSecurity #RemoteCodeExecutionVulnerability https://t.co/AjeClSpRUo https://t.co/4ROsAdfUIz