CVE-2006-0981: E-Merge Winace

Medium severity, CVSS 4.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.

Affected products

• E-Merge E-Merge Winace: version 2.6 only

Published 2006-03-03. Last modified 2026-06-16.