CVE-2026-27710 - Vulnerability Analysis
MediumCVSS: 5.0Last Updated: February 27, 2026
NanaZip - Denial of Service
Published: February 26, 2026Updated: February 27, 2026PoC Available
Overview
NanaZip <= 5.0.1252.0 and < 6.0.1638.0, 6.5.1638.0 contains a denial-of-service caused by integer underflow in .NET Single File Application parser header-size calculation, letting attackers trigger unbounded memory allocation, exploit requires crafted bundle.
Severity & Score
Severity: Medium
CVSS Score: 5.0
Impact
Attackers can cause unbounded memory allocation leading to denial of service by crashing the application.
Mitigation
Update to versions 6.0.1638.0 or 6.5.1638.0 or later.
Related Resources
Details
- CVE ID
- CVE-2026-27710
- Severity
- Medium
- CVSS Score
- 5.0
- Type
- integer_overflow
- Status
- confirmed
CWE
- CWE-191
CVSS Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H