What’s Vulnerable › Products

GNU cpio vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your GNU cpio version is affected

Latest GNU cpio vulnerabilities

• CVE-2026-66486 — Improper Output Encoding in GNU cpio (CVSS 4.6)
• CVE-2026-66485 — Uncontrolled Memory Allocation in GNU cpio (CVSS 4.6)
• CVE-2026-66484 — Path Traversal in GNU cpio (CVSS 4.6)
• CVE-2023-7207 — (CVSS 4.9)
• CVE-2023-7216 — Cpio: extraction allows symlinks which enables remote command execution (CVSS 5.3)
• CVE-2021-38185 — (CVSS 7.8)
• CVE-2019-14866 — (CVSS 7.3)
• CVE-2016-2037 — (CVSS 6.5)
• CVE-2015-1197 — (CVSS 1.9)
• CVE-2014-9112 — (CVSS 5.0)
• CVE-2010-4226 — (CVSS 5.0)
• CVE-2010-0624 — (CVSS 6.8)
• CVE-2005-4268 — (CVSS 3.7)
• CVE-2005-1229 — (CVSS 4.6)
• CVE-2005-1111 — (CVSS 4.7)