7-Zip
In 5 briefs, most recently 21 July 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
1 7-Zip vulnerability is on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2025-0411 7-Zip Mark of the Web Bypass Vulnerability
Coverage in DanSec Daily
- Hugging Face breach by an autonomous AI agent, Estée Lauder and EY data breaches, and actively exploited ServiceNow and SonicWall zero-days.
- A 7-Zip RCE patch, public exploits for critical WordPress wp2shell flaws, and Microsoft's warning on surging ACR Stealer attacks.
- Warlock ransomware breaches SmarterTools via unpatched SmarterMail, Conduent breach exposes Volvo customer data, Ivanti zero-days hit Dutch regulators.
- Salesforce OAuth data access via Gainsight, Italy's FS Italiane breach through Almaviva, and Operation WrtHug compromising 50,000+ Asus routers.
- ASUS router botnet Operation WrtHug, Cloudflare's six-hour outage, and Fortinet FortiWeb zero-days.