Public PoC exploit for 7-Zip vulnerability is available (CVE-2025-11001)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-11001 | Directory Traversal RCE in 7-Zip ZIP Symbolic Link Handling | 7.8 | 27% | ||
| CVE-2025-11002 | 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability | 7.8 | <1% | ||
| CVE-2025-55188 | 7-Zip before 25.01 does not always properly handle symbolic links during extraction | 3.6 | <1% | PoC ×3 |
From the original article
2 min read at helpnetsecurity.com
NHS England Digital, the technology arm of the publicly-funded health service for England, has issued a warning about a 7-Zip vulnerability (CVE-2025-11001) being exploited by attackers. “Active exploitation of CVE-2025-11001 has been observed in the wild,” the alert says , though it does not say who detected the attacks or whether they might be targeted or widespread. Introduced in 7-Zip v21.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.