Is CVE-2026-43616 actively exploited?

No active exploitation of CVE-2026-43616 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-43616 be exploited remotely?

No. CVE-2026-43616 requires local access to exploit.

What is the CVSS score of CVE-2026-43616?

CVE-2026-43616 has a CVSS score of 7.1 (HIGH).

HOME VULNERABILITIESCVE-2026-43616

HIGH

CVE-2026-43616

CWE-23Published: May 4, 2026· Updated: May 5, 2026

7.1

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:4.7th

Official Description

Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers to write arbitrary files to the filesystem by crafting malicious archive entries with relative traversal sequences or absolute paths. Attackers can exploit insufficient path normalization during archive extraction to write files outside the intended extraction directory and achieve persistent code execution by overwriting user startup scripts.

NVD Source

Technical Analysis

CVE-2026-43616 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.1.