J
Vendor security profile
junrar
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs3
Critical0
CISA KEV0
Public exploit0
Patch rate%33
Avg. CVSS5.7
12-month vulnerability rate
0
0
0
0
0
1
0
0
0
0
1
1
CVE KEV
CVE severity distribution
3toplam CVE
High1 (33%)
Medium1 (33%)
Low1 (33%)
Patch and exploitation view
%33
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
7.5
CVE-2026-97370Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction
Patch status unknownEPSS %0
3.7
CVE-2026-86071Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root
Patch status unknownEPSS %0
5.9
CVE-2026-41245Junrar: Path Traversal (Zip-Slip) via Sibling Directory Name Prefix
Patch verifiedEPSS %1