Is CVE-2026-32630 actively exploited?

No active exploitation of CVE-2026-32630 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-32630 be exploited remotely?

Yes. CVE-2026-32630 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-32630?

CVE-2026-32630 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2026-32630

MEDIUM

CVE-2026-32630

CWE-409Published: March 16, 2026· Updated: Mar 17, 2026

5.3

CVSS v3.1

EPSS:0.04%probability of exploitation in 30 daysPercentile:11.4th

Official Description

file-type detects the file type of a file, stream, or data. From 20.0.0 to 21.3.1, a crafted ZIP file can trigger excessive memory growth during type detection in file-type when using fileTypeFromBuffer(), fileTypeFromBlob(), or fileTypeFromFile(). The ZIP inflate output limit is enforced for stream-based detection, but not for known-size inputs. As a result, a small compressed ZIP can cause file-type to inflate and process a much larger payload while probing ZIP-based formats such as OOXML. This vulnerability is fixed in 21.3.2.

NVD Source

Technical Analysis

CVE-2026-32630 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.