Jaycelation/CVE-2026-25645

PoC

Insecure Temp File Reuse in extract_zipped_paths()

view exploit source poc_in_githubauthor Jaycelationpublished 2025-11-16catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-25645US	medium5.5	0.19% (8th)	Exploit	2026-03-25
Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archive…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.