{"vulnerability": "cve-2026-14266", "sightings": [{"uuid": "04ae7b28-93c9-41ec-885f-21277af1255d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqro25h4we2v", "content": "7-Zip vulnerability CVE-2026-14266 (CVSS 7.0) allows remote code execution via crafted XZ data. Update to 7-Zip 26.02. No exploitation confirmed.\n\n#7Zip #CVE202614266 #RCE #BufferOverflow #ZDI #CyberSecurity", "creation_timestamp": "2026-07-16T16:33:36.673237Z"}, {"uuid": "5c6cbddb-f03a-46c2-a94f-b435e10e17db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-14266", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mqsywb7tak2d", "content": "7-Zip Vulnerability Could Allow Remote Code Execution, Users Urged to Update\u00a0Immediately\n\nMillions of 7-Zip users are urged to update after CVE-2026-14266, a heap buffer overflow vulnerability that could lead to remote code\u2026\n\nhttps://thecybersecguru.com/news/7-zip-vulnerability-cve-2026-14266/", "creation_timestamp": "2026-07-17T05:20:54.549683Z"}, {"uuid": "4d3aae27-7475-44fe-ac2a-01ec8534175a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mqszwo4lw526", "content": "7-Zip\u306e\u8106\u5f31\u6027CVE-2026-14266\u306b\u3088\u308a\u3001\u7d30\u5de5\u3055\u308c\u305fXZ\u30c7\u30fc\u30bf\u3092\u4ecb\u3057\u3066\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\u306a\u308b \n\n7-Zip Vulnerability CVE-2026-14266 Allows Remote Code Execution Through Crafted XZ Data  #DailyCyberSecurity (Jul 16)\n\nsecurityonline.info/7-zip-vulner...", "creation_timestamp": "2026-07-17T05:39:01.930627Z"}, {"uuid": "28e7f692-ef21-492c-853f-fca537f5c326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqubeuoovt23", "content": "7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-14266\n\nThis vulnerability allows remote attackers to execute arbitrary code on affected installations of\u2026\n\n\ud83d\udd01 RT @blackorbird | reposted by @ImposeCost\nhttps://x.com/blackorbird/status/2078136213194826142", "creation_timestamp": "2026-07-17T17:24:53.908985Z"}, {"uuid": "82aec4d9-0e5e-4fb8-95c9-ccc313aea242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqvgluimld24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-58532: 47 interactions\nCVE-2026-15409: 19 interactions\nCVE-2026-44747: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-58532: 47 interactions\nCVE-2026-14266: 5 interactions\nCVE-2026-56171: 5 interactions\n", "creation_timestamp": "2026-07-18T04:30:57.147219Z"}, {"uuid": "1635cf89-c133-4e22-9498-257d37a325dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/joeingeno.bsky.social/post/3mqxc3o36fj24", "content": "7-Zip Vulnerability Exposes Millions of Users to Remote Code Execution Risk (Tracked as CVE-2026-14266) cybersecuritynews.com/7-zip-vulner...", "creation_timestamp": "2026-07-18T22:15:39.214998Z"}, {"uuid": "e28211dc-e497-4619-9f8f-414be4cc556d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/alextech-ai.bsky.social/post/3mqy6isdipz2m", "content": "\ud83d\udea8 Critical security update for 7-Zip users: CVE-2026-14266 allows remote code execution via malicious XZ archives. \n\nSince 7-Zip lacks an automatic update mechanism, you must manually install version 26.02 from the official site to stay protected. Don't leave your endpoints exposed! \n\n#Cybersecur...", "creation_timestamp": "2026-07-19T06:44:03.918782Z"}, {"uuid": "5e9ed12f-5c52-4e41-912d-7c8796a55664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/walknews.bsky.social/post/3mqz4wgj57a22", "content": "7-Zip 26.01\u4ee5\u4e0b\u306b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u300eCVE-2026-14266\u300f\u300226.02\u4ee5\u964d\u3078\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092 | \u30cb\u30c3\u30c1\u306aPC\u30b2\u30fc\u30de\u30fc\u306e\u74b0\u5883\u69cb\u7bc9Z\n\nhttps://www.walknews.com/1346131/\n\n\ue8b52026\u5e747\u670820\u65e5\ue2c7\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u5727\u7e2e\u30fb\u89e3\u51cd\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u3042\u308b7-Zip \u30d0\u30fc\u30b8\u30e7\u30f326.01\u4ee5\u4e0b\u306b\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(Remote Code Execution / RCE)\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a\u308a\u307e [...]", "creation_timestamp": "2026-07-19T15:48:33.326851Z"}, {"uuid": "8e4f4ed2-c876-41a9-a8a9-2352f9879eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/cocanews.bsky.social/post/3mqz5kn6tgn2q", "content": "7-Zip 26.01\u4ee5\u4e0b\u306b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u300eCVE-2026-14266\u300f\u300226.02\u4ee5\u964d\u3078\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092 | \u30cb\u30c3\u30c1\u306aPC\u30b2\u30fc\u30de\u30fc\u306e\u74b0\u5883\u69cb\u7bc9Z\n\nhttps://www.wacoca.com/news/2887343/\n\n\ue8b52026\u5e747\u670820\u65e5\ue2c7\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u5727\u7e2e\u30fb\u89e3\u51cd\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u3042\u308b7-Zip \u30d0\u30fc\u30b8\u30e7\u30f326.01\u4ee5\u4e0b\u306b\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(Remote Code Execution / RCE)\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a\u308a\u307e [...]", "creation_timestamp": "2026-07-19T15:59:51.430694Z"}, {"uuid": "cdeaed8e-afcc-4687-9e03-91c9ddfd6892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/cocanews.bsky.social/post/3mqz5p3utqf2q", "content": "7-Zip 26.01\u4ee5\u4e0b\u306b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u300eCVE-2026-14266\u300f\u300226.02\u4ee5\u964d\u3078\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092 | \u30cb\u30c3\u30c1\u306aPC\u30b2\u30fc\u30de\u30fc\u306e\u74b0\u5883\u69cb\u7bc9Z\n\nhttps://www.wacoca.com/news/2887343/\n\n\ue8b52026\u5e747\u670820\u65e5\ue2c7\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u5727\u7e2e\u30fb\u89e3\u51cd\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u3042\u308b7-Zip \u30d0\u30fc\u30b8\u30e7\u30f326.01\u4ee5\u4e0b\u306b\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(Remote Code Execution / RCE)\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a\u308a\u307e [...]", "creation_timestamp": "2026-07-19T16:02:20.556547Z"}, {"uuid": "6262577a-e94b-416d-961e-928d24423fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/cocanews.bsky.social/post/3mqz7cuwvqj2t", "content": "7-Zip 26.01\u4ee5\u4e0b\u306b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u300eCVE-2026-14266\u300f\u300226.02\u4ee5\u964d\u3078\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092 | \u30cb\u30c3\u30c1\u306aPC\u30b2\u30fc\u30de\u30fc\u306e\u74b0\u5883\u69cb\u7bc9Z\n\nhttps://www.wacoca.com/news/2887343/\n\n\ue8b52026\u5e747\u670820\u65e5\ue2c7\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u5727\u7e2e\u30fb\u89e3\u51cd\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u3042\u308b7-Zip \u30d0\u30fc\u30b8\u30e7\u30f326.01\u4ee5\u4e0b\u306b\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c(Remote Code Execution / RCE)\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3053\u3068\u304c\u660e\u3089\u304b\u306b\u306a\u308a\u307e [...]", "creation_timestamp": "2026-07-19T16:31:18.736285Z"}, {"uuid": "35012353-64dd-4bfc-b2e0-3955c74adb67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/yayafa.bsky.social/post/3mqzphortfa2j", "content": "7-Zip 26.01\u4ee5\u4e0b\u306b\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u300eCVE-2026-14266\u300f\u300226.02\u4ee5\u964d\u3078\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092 | \u30cb\u30c3\u30c1\u306aPC\u30b2\u30fc\u30de\u30fc\u306e\u74b0\u5883\u69cb\u7bc9Z\n\nhttps://www.yayafa.com/2846950/\n\n\ue8b52026\u5e747\u670820\u65e5\ue2c7\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u2026", "creation_timestamp": "2026-07-19T21:20:19.744286Z"}, {"uuid": "eae94366-524c-4ca7-8e52-bd0babaaa95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/azaka.fun/post/3mr2e6ur67y2n", "content": "Remember to update your 7-Zip to 26.02 to fix a possible RCE!\n#CVE-2026-14266", "creation_timestamp": "2026-07-20T03:31:13.374249Z"}, {"uuid": "8d6bb499-3247-4a9b-8d15-79d97c82e2b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mr2tbfqkpc2n", "content": "Faille dans 7-Zip : pourquoi vous devriez installer la version 26.02 sans attendre \u26a0\ufe0f \n\nUne faille de s\u00e9curit\u00e9 importante estampill\u00e9e CVE-2026-14266 a \u00e9t\u00e9 patch\u00e9e.\n\nPlus d'infos par ici : \n- www.it-connect.fr/7-zip-26-02-...\n\n#7zip #infosec #cybersecurity", "creation_timestamp": "2026-07-20T08:01:03.940111Z"}, {"uuid": "541c9f64-55de-44c4-805d-d850bdb8f927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mr2xkn75em2r", "content": "7-Zip flaw CVE-2026-14266 enables code execution via XZ archives. Update to 26.02 now. #7Zip #CVE202614266 #CyberSecurity #SoftwareUpdate #Vulnerability #XZArchives thedailytechfeed.com/7-zip-vulner...", "creation_timestamp": "2026-07-20T09:17:48.592063Z"}, {"uuid": "8958ad44-1048-4bcc-b09f-6e9f2ef51c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116951958697276090", "content": "En las \u00faltimas 24 horas, se detectaron vulnerabilidades cr\u00edticas en WordPress, 7-Zip, Foxit PDF Reader y NGINX que permiten ejecuci\u00f3n remota de c\u00f3digo y escalada de privilegios, mientras una avanzada campa\u00f1a rusa con el RAT Starland intensifica amenazas; la actualizaci\u00f3n inmediata y la vigilancia continua son esenciales. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff20/07/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd13 EXPLOIT BROKERS PAGAN $500,000 POR UNA RCE EN WORDPRESS\nSe ha detectado una vulnerabilidad cr\u00edtica que permite la ejecuci\u00f3n remota de c\u00f3digo (RCE) en WordPress. La publicaci\u00f3n se retras\u00f3 estrat\u00e9gicamente para que los administradores pudieran actualizar sus sistemas sin riesgo durante el fin de semana. Si utilizas WordPress, es vital que verifiques la seguridad de tu instancia con la herramienta disponible en https://wp2shell.com/. Mantente alerta para proteger tu sitio frente a posibles ataques. M\u00e1s detalles y c\u00f3mo verificar tu seguridad aqu\u00ed \ud83d\udc49 https://djar.co/YsbS\n\ud83d\udee1\ufe0f NUEVA VULNERABILIDAD EN 7-ZIP PUEDE EJECUTAR C\u00d3DIGO AL EXTRAER ARCHIVOS XZ MANIPULADOS\nSe ha identificado CVE-2026-14266, un desbordamiento de pila de alta gravedad en el decodificador XZ de 7-Zip que permite la ejecuci\u00f3n remota de c\u00f3digo al abrir archivos comprimidos maliciosos. La versi\u00f3n 26.02 ya incluye el parche que corrige esta falla cr\u00edtica. Recomendamos actualizar inmediatamente para evitar compromisos de seguridad. Inf\u00f3rmate y actual\u00edzate aqu\u00ed \ud83d\udc49 https://djar.co/QRKdfM\n\u26a0\ufe0f ESCALADA DE PRIVILEGIOS EN FOXIT PDF READER PERMITE CONTROL TOTAL DEL SISTEMA\nUn grave fallo de seguridad (CVE-2026\u201357239) en Foxit PDF Reader permite a usuarios sin privilegios elevar permisos hasta NT AUTHORITY\\SYSTEM, otorgando control total sobre el sistema afectado. Esta vulnerabilidad pone en riesgo entornos corporativos y personales, por lo que actualizar y revisar las pol\u00edticas de seguridad es urgente. Conoce c\u00f3mo protegerte aqu\u00ed \ud83d\udc49 https://djar.co/r0Zuj\n\ud83d\udd25 CVE-2026-42533: FALLA CR\u00cdTICA EN NGINX PERMITE EJECUCI\u00d3N REMOTA DE C\u00d3DIGO\nF5 ha publicado un parche para corregir un bug muy serio en NGINX que puede provocar ca\u00eddas del servidor y, en casos extremos, ejecuci\u00f3n remota de c\u00f3digo mediante solicitudes HTTP manipuladas. Los administradores de sistemas deben aplicar esta actualizaci\u00f3n cuanto antes para evitar intrusiones y mantener la integridad de sus servicios web. Descubre los pasos para mitigar el riesgo aqu\u00ed \ud83d\udc49 https://djar.co/g35e9\n\ud83d\udea8 UAT-11795: NUEVO RAT STARLAND Y C2 PERSONALIZADO EN CAMPA\u00d1A FINANCIADA POR UN ADVERSARIO RUSO\nCisco Talos alerta sobre UAT-11795, una campa\u00f1a avanzada que utiliza el RAT Starland junto a un comando y control (C2) exclusivo, dirigida contra objetivos en EE. UU. y Europa desde junio de 2025. Este adversario sofisticado refuerza la necesidad de fortalecer la detecci\u00f3n y respuesta ante amenazas con vigilancia continua y soluciones actualizadas. Obt\u00e9n detalles para proteger tu entorno aqu\u00ed \ud83d\udc49 https://djar.co/zqN7\n\ud83d\udcc5 RESUMEN SEMANAL DE CIBERSEGURIDAD 13/07/26 - 19/07/26: DFIR Y TALLERES PR\u00c1CTICOS EN INCIBE\nLa semana pasada, Lorenzo Mart\u00ednez destac\u00f3 en el CyberSecurity Bootcamp 2026 organizado por INCIBE con su taller pr\u00e1ctico sobre DFIR (Digital Forensics and Incident Response), mostrando herramientas y artefactos esenciales para la respuesta ante incidentes. Este tipo de eventos fortalecen la comunidad y aumentan la preparaci\u00f3n frente a amenazas emergentes. Conoce m\u00e1s sobre el evento y recursos clave aqu\u00ed \ud83d\udc49 https://djar.co/qAu7M", "creation_timestamp": "2026-07-20T11:01:08.599454Z"}, {"uuid": "eff24a94-d6d4-4ff5-b3bd-c810f550a95c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mr35dzjpwi2x", "content": "7-Zip XZ \u30c7\u30b3\u30fc\u30c0\u30fc\u306b heap overflow\u3001\u60aa\u610f\u3042\u308b\u30a2\u30fc\u30ab\u30a4\u30d6\u3067\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\n\nCVE-2026-14266 \u306f 7-Zip \u306e XZ \u30c7\u30b3\u30fc\u30c0\u30fc\u306b\u5b58\u5728\u3059\u308b\u9ad8\u6df1\u523b\u5ea6\u306e heap overflow \u8106\u5f31\u6027\u3002\u7d30\u5de5\u3055\u308c\u305f\u30a2\u30fc\u30ab\u30a4\u30d6\u3092\u958b\u304f\u3060\u3051\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u304c\u5b9f\u884c\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u30d0\u30fc\u30b8\u30e7\u30f3 26.02 \u3067\u4fee\u6b63\u6e08\u307f\u3002\n\n#\u30bc\u30ed\u30c7\u30a4 #CVE #\u8106\u5f31\u6027", "creation_timestamp": "2026-07-20T11:01:28.929779Z"}, {"uuid": "53d828b0-6040-442c-b61c-09322402f3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mr37lzdu2y2j", "content": "Why do we even bother using computers when even extracting a simple file archive has become a critical security risk? This latest heap-based buffer overflow, tracked as CVE-2026-14266, threatens anyone foolish enough to open a maliciously crafted XZ file using 7-Zip. Guarding our...\n\nRead full story", "creation_timestamp": "2026-07-20T11:41:44.223546Z"}, {"uuid": "08ad73af-f700-4e3c-8d6f-ef0dc5c03ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mr37swtqjs2o", "content": "\ud83e\udd16 CVE-2026-14266: Heap buffer overflow in 7-Zip's XZ archive processing lets crafted archives execute code on extraction. Fixed in 26.02.\nhttps://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html", "creation_timestamp": "2026-07-20T11:45:37.309735Z"}, {"uuid": "f771f0fe-1aa2-41d3-bb98-07e0824e826a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mr3a7l24ht2i", "content": "CVE-2026-14266 is a high-severity heap overflow in 7-Zip\u2019s XZ decoder that could run code when a user opens a crafted archive. Version 26.02 fixes it.", "creation_timestamp": "2026-07-20T11:52:40.705600Z"}, {"uuid": "edce7580-2dbb-48b2-9d6e-9460b2e85a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9552", "content": "\ud83d\udea8 ALERT: A newly disclosed 7-Zip vulnerability could let attackers run code when a user opens a crafted XZ archive.\n\nCVE-2026-14266 is a high-severity heap overflow in the XZ decoder. The code runs with the same privileges as 7-Zip.\n\nDetails: https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html", "creation_timestamp": "2026-07-20T12:00:04.261543Z"}, {"uuid": "a43b41cf-77ce-4302-961a-78ec1a3d7fc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mr3anbi2g22g", "content": "7-Zip heap buffer overflow CVE-2026-14266 could run code when extracting crafted XZ archives. Update to 26.02+ and avoid opening untrusted archives. #Cybersecurity #ZeroDay #Vulnerability\n\nSource: https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html", "creation_timestamp": "2026-07-20T12:00:20.628949Z"}, {"uuid": "90af4e0f-604a-48d7-b47f-8bdf27d1c249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mr3b2aqp5m2o", "content": "New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction\nOpening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ\u2026\n\n\ud83d\udd17 https://hnow.live/a/588da4c0", "creation_timestamp": "2026-07-20T12:07:36.307160Z"}, {"uuid": "d42febc8-3a88-46ca-8964-6e0566f1eb57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mr3ckcbnxh24", "content": "A critical heap-based buffer overflow vulnerability, tracked as CVE-2026-14266, was discovered in 7-Zip\u2019s XZ archive handler. An attacker could achieve [\u2026]", "creation_timestamp": "2026-07-20T12:34:28.191979Z"}, {"uuid": "182eabcb-955a-4f51-9bbd-f05d8114c92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html", "content": "Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative (ZDI) detailed it on July 15. A fix shipped on June 25 in 7-Zip 26.02.\n\nThe overflow lets an attacker \"execute code in the context of the current process,\" per the", "creation_timestamp": "2026-07-20T13:00:41.791540Z"}, {"uuid": "1d163082-7ed5-466d-bf16-01a681ca3431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://t.me/true_secator/8422", "content": "\ud83e\udda0\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 7-Zip \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043e\u043f\u0430\u0441\u043d\u0443\u044e RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435 XZ\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip \u0432\u0435\u0440\u0441\u0438\u0438 26.02 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2026-14266. \u041e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 7,0 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Lunbun LLC \u041b\u044d\u043d\u0434\u043e\u043d \u041f\u044d\u043d, \u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043d\u0435\u0439 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Zero Day Initiative.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 XZ. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0438\u043b\u0438 \u0438\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c 7-Zip \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0440\u0430\u0441\u0447\u0451\u0442 \u043e\u0441\u0442\u0430\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0432 \u0432\u044b\u0445\u043e\u0434\u043d\u043e\u043c \u0431\u0443\u0444\u0435\u0440\u0435 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u043d\u0435 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c \u0440\u0430\u0437\u043c\u0435\u0440 \u0431\u0443\u0444\u0435\u0440\u0430, \u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 7-Zip 26.02, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 25 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 7-Zip \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u041f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0430\u0445 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0436\u0435\u0440\u0442\u0432\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0438\u043b\u0438 \u0444\u0430\u0439\u043b.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 20 \u0438\u044e\u043b\u044f 2026 \u0433\u043e\u0434\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2026-14266 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e. \u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC, \u043d\u043e \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e RCE-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e, \u0445\u043e\u0442\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u043b\u044c\u0437\u044f.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-07-20T14:00:05.530328Z"}, {"uuid": "538e1dba-e943-42fd-9a42-54252d6e6da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mr3hhmdqk72y", "content": "\ud83d\udee1\ufe0f VULN: 7-Zip CVE-2026-14266 \u2014 a heap buffer overflow in the XZ decoder (C/XzDec.c) lets a crafted archive run code when opened. Fixed in 26.02 (Jun 25); ZDI rates it High (7.0), local + user-interaction. No public PoC yet. Update 7-Zip; don't open untrusted archives. Src: The Hacker News / ZDI", "creation_timestamp": "2026-07-20T14:02:26.305523Z"}, {"uuid": "5df90e88-c954-49d4-84fa-d594e475e89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/hackerdogs.bsky.social/post/3mr3nhp7uta2s", "content": "A critical heap-based buffer overflow vulnerability has been discovered in 7-Zip that could allow remote code execution when processing crafted XZ archives. CVE-2026-14266 affects how the archiver han\nhttps://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html", "creation_timestamp": "2026-07-20T15:49:51.811897Z"}, {"uuid": "d5311218-a434-4b6d-b5d2-0fd3cfa746b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mr4f2562xs2v", "content": "7-Zip\u3001\u60aa\u610f\u3042\u308b\u5727\u7e2e\u30d5\u30a1\u30a4\u30eb\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306a\u8106\u5f31\u6027\u3092\u4fee\u6b63(CVE-2026-14266)\n\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-07-20T22:51:51.066080Z"}, {"uuid": "abbd10d0-0af7-4c24-9cb9-255880f72018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8422", "content": "\ud83e\udda0\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 7-Zip \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043e\u043f\u0430\u0441\u043d\u0443\u044e RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0435 XZ\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u0435 7-Zip \u0432\u0435\u0440\u0441\u0438\u0438 26.02 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2026-14266. \u041e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 7,0 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0418\u0411-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Lunbun LLC \u041b\u044d\u043d\u0434\u043e\u043d \u041f\u044d\u043d, \u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043d\u0435\u0439 \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Zero Day Initiative.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0436\u0430\u0442\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 XZ. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0438\u043b\u0438 \u0438\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c 7-Zip \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0440\u0430\u0441\u0447\u0451\u0442 \u043e\u0441\u0442\u0430\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0432 \u0432\u044b\u0445\u043e\u0434\u043d\u043e\u043c \u0431\u0443\u0444\u0435\u0440\u0435 \u0434\u0435\u043a\u043e\u0434\u0435\u0440\u0430. \u041e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442, \u043d\u0435 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c \u0440\u0430\u0437\u043c\u0435\u0440 \u0431\u0443\u0444\u0435\u0440\u0430, \u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043e\u0448\u043b\u043e \u0432 7-Zip 26.02, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 25 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 7-Zip \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043a\u0430\u0447\u0430\u0442\u044c \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u041f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0430\u0445 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0436\u0435\u0440\u0442\u0432\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 \u0438\u043b\u0438 \u0444\u0430\u0439\u043b.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 20 \u0438\u044e\u043b\u044f 2026 \u0433\u043e\u0434\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 CVE-2026-14266 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e. \u0412 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d PoC, \u043d\u043e \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e RCE-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e, \u0445\u043e\u0442\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u043b\u044c\u0437\u044f.\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-07-21T00:00:38.549152Z"}, {"uuid": "1621d0be-2bc8-4963-b78a-f2615e044c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9552", "content": "\ud83d\udea8 ALERT: A newly disclosed 7-Zip vulnerability could let attackers run code when a user opens a crafted XZ archive.\n\nCVE-2026-14266 is a high-severity heap overflow in the XZ decoder. The code runs with the same privileges as 7-Zip.\n\nDetails: https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html", "creation_timestamp": "2026-07-21T00:00:39.304615Z"}, {"uuid": "b0ad1c27-be6c-437b-9647-f97d3c239874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://thehackernews.com/2026/07/new-7-zip-vulnerability-could-let.html", "content": "Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative (ZDI) detailed it on July 15. A fix shipped on June 25 in 7-Zip 26.02.\n\nThe overflow lets an attacker \"execute code in the context of the current process,\" per the", "creation_timestamp": "2026-07-21T01:00:54.988462Z"}, {"uuid": "ae3b62b7-cc71-4250-9742-dc6ca96d4555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mr4mh53x7k2a", "content": "New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction\n\nOpening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend\u2026\n#hackernews #news", "creation_timestamp": "2026-07-21T01:04:19.719719Z"}, {"uuid": "e75cfb29-c35c-40ab-8b77-49360a422a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/paul.aguayo.ca/post/3mr4uiyavtc2i", "content": "From X: A newly disclosed 7-Zip vulnerability could let attackers run code when a user opens a crafted XZ archive.\n\nCVE-2026-14266 is a high-severity heap overflow in the XZ decoder. The code runs with the same privileges as 7-Zip.\n\nDetails: thehackernews.com/2026/07/new-7-\u2026", "creation_timestamp": "2026-07-21T03:28:31.603209Z"}, {"uuid": "b2ce3121-8dc7-41a6-b3a6-92fb65cdd53c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14266", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mr5bywbcom2f", "content": "Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative (ZDI) detailed it on July 15.", "creation_timestamp": "2026-07-21T07:30:05.074993Z"}]}