What’s Vulnerable › Vulnerabilities
CVE-2009-2261
- Severity: critical (CVSS 9.3 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 41.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2009-06-30 · updated 2026-06-16
- Weakness: CWE-20
Description
PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.
Affected products
- Giorgio Tani Peazip: through 2.5.1; 1.0, 1.1, 1.2, 1.3, 1.4, 1.5 (+18)
References
Get alerted when CVE-2009-2261 or the next vulnerability affects your stack