CVE-2017-2288: Lhaforge Project Lhaforge

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

• Lhaforge Project Lhaforge: up to and including 1.6.5

Published 2017-08-02. Last modified 2026-06-17.