Practitioner cybersecurity analysis from the Suriq desk.
What to patch, what to detect, and why it matters, in plain English.
Managed security built on Wazuh. suriq.io
#Cyber #ThreatDetection #CVE #CISA #Cybersecurity
CVE-2026-112302 is a path traversal vulnerability in the ZIP extraction function of the kiwilan php-archive PHP library. Versions up to 2.3.02 are affected.
A public exploit is circulating per VulDB. No vendor fix is available, and kiwilan has not responded to the disclosure.
CVE-2026-11319: TickTick Limited's TickTick for Android 8.2.2.0 contains a path traversal flaw in its exported ShareReceiveActivity.
A malicious local app can supply a crafted filename to write files outside the attachment directory.
No in-the-wild exploitation is confirmed and no fixed version is listed.