CVE-2026-105050: Peazip

High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days.

PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is mishandled.

Affected products

• Peazip Peazip: before 11.3.0 (fixed in 11.3.0)

Published 2026-10-02. Last modified 2026-10-06.