CVE-2025-10284

—

CVSS 3.1

9.6 critical

EPSS

<1%p51

Published

Oct 9, 2025 (Oct 9, 2025)

Modified

Jun 17, 2026

Description

BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arbitrary file write, resulting in remote code execution.

Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.