CVE-2026-110231Published
muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP
Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110231 · Microsoft / collected KEV context
cve-program · CVE-2026-110231
- https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/ryH-CfoiMl
- https://github.com/mucommander/mucommander/blob/3bc2118e13681a8018b84a06f1c5fea4a3f940f7/mucommander-core/src/main/java/com/mucommander/job/impl/UnpackJob.java#L233-L256
- https://github.com/mucommander/mucommander/blob/3bc2118e13681a8018b84a06f1c5fea4a3f940f7/mucommander-commons-file/src/main/java/com/mucommander/commons/file/AbstractFile.java#L1021-L1023
- https://github.com/mucommander/mucommander/blob/3bc2118e13681a8018b84a06f1c5fea4a3f940f7/mucommander-protocol-sftp/src/main/java/com/mucommander/commons/file/protocol/sftp/SFTPFile.java#L586-L622
- https://github.com/mucommander/mucommander/releases/tag/1.6.2-1
- https://www.vulncheck.com/advisories/mucommander-through-1.6.2-path-traversal-via-archive-extraction-to-ftp-sftp
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.