DEBIAN-CVE-2026-125742: High severity debian/7zip vulnerability

Q: Which Debian packages are identified as affected?

The listed Debian packages are 7zip and p7zip.

Q: What access and interaction does exploitation require?

The CVSS vector indicates local access is required, no privileges are required, and user interaction is required.

Q: What is the potential security impact?

The vulnerability is rated high severity with a 7.8 CVSS score. Its vector indicates high potential impact to confidentiality, integrity, and availability.

Published Nov 10, 2026

Updated

Affected Software

5 affected componentsFixes available

debian/7zip*

debian/p7zip*

debian/p7zip<16.02+transitional.1

16.02+transitional.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/p7zip to a version that resolves this vulnerability.
Fixed in 16.02+transitional.1

Event History

Nov 10, 2026

CVE Published

via OSV·12:17 PM

Data Sourced

via OSV·12:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which Debian packages are identified as affected?

The listed Debian packages are 7zip and p7zip.

What access and interaction does exploitation require?

The CVSS vector indicates local access is required, no privileges are required, and user interaction is required.

What is the potential security impact?

The vulnerability is rated high severity with a 7.8 CVSS score. Its vector indicates high potential impact to confidentiality, integrity, and availability.

DEBIAN-CVE-2026-125742: High severity debian/7zip vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which Debian packages are identified as affected?

What access and interaction does exploitation require?

What is the potential security impact?

Company

Resources

Contact

Frequently Asked Questions

Which Debian packages are identified as affected?

What access and interaction does exploitation require?

What is the potential security impact?