Vulnerability Details CVE-2026-14966
BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing carries a DOS-attribute prefix before the unix mode, as produced by legacy versions of p7zip. Such an archive, downloaded and extracted during a scan (for example via filedownload), bypassed the guard and caused an attacker-controlled symlink to be written into the extraction directory. The effect is limited to planting the symlink (its target is not written through), and only hosts using such a legacy p7zip build are affected; current mainline 7-Zip is not.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 32.3%
CVSS Severity
CVSS v3 Score 3.1
Products affected by CVE-2026-14966
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.1
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.1.5815
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.1.5818
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.1.5820
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5825
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5827
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5829
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5832
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5836
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5838
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5841
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5848
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5850
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5855
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5874
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5889
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5893
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5897
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5904
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5906
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5909
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5913
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5915
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5927
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5938
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5942
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5944
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5950
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5958
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5967
-
cpe:2.3:a:blacklanternsecurity:bbot:2.3.2.5971
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.5974
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.5977
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.5984
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.5986
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.5988
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.5992
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.5995
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.5997
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.5999
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.6005
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.6007
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.6031
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.6037
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.6039
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.6045
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.6050
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.6067
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.0.6073
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.1
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.1.6075
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.1.6077
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.1.6089
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.1.6094
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.1.6095
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.1.6100
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.1.6107
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6109
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6590
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6596
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6608
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6611
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6615
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6621
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6623
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6635
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6638
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6653
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6655
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6659
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6677
-
cpe:2.3:a:blacklanternsecurity:bbot:2.4.2.6706
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6715
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6719
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6721
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6730
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6734
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6737
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6742
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6747
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6765
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6769
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6773
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6779
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6782
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6790
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6803
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6807
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6817
-
cpe:2.3:a:blacklanternsecurity:bbot:2.5.0.6831
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.0
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.0.6840
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.0.6842
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.0.6846
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.0.6851
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.0.6853
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.0.6856
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.0.6871
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.0.6879
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.1
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.1.6901
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.1.6913
-
cpe:2.3:a:blacklanternsecurity:bbot:2.6.1.6915
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.6919
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.6925
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.6930
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.6932
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.6948
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.6962
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.6989
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.6995
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7002
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7010
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7014
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7023
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7027
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7090
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7092
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7094
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7096
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7098
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7100
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7108
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7112
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7116
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.0.7136
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7141
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7149
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7151
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7153
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7159
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7167
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7169
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7175
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7198
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7202
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7207
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.1.7212
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7226
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7236
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7238
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7244
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7254
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7256
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7269
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7271
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7278
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7284
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7286
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7288
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7298
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7303
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7311
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7319
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7324
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7334
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7337
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7342
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7353
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7355
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7361
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7364
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7367
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7369
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7379
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7381
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7383
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7388
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7396
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7400
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7406
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7410
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7412
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7414
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7418
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7424
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7426
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7428
-
cpe:2.3:a:blacklanternsecurity:bbot:2.7.2.7439
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.0
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.0.7448
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.0.7450
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.0.7452
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.0.7459
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.1
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.1.7464
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.1.7470
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.1.7477
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2.7481
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2.7483
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2.7485
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2.7495
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2.7498
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2.7503
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2.7505
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2.7508
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.2.7516
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.3
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.3.7522
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.3.7533
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.3.7535
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.3.7546
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.3.7550
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.3.7553
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.3.7555
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.4
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.4.7557
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.4.7559
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.4.7575
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.4.7578
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.5
-
cpe:2.3:a:blacklanternsecurity:bbot:2.8.6
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.0
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1056
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1062
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1064
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1068
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1070
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1079
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1137
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1139
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1141
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1153
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1173
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1184
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1190
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1254
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1271
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1274
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1304
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1313
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1317
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1333
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1343
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1345
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1349
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1386
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1388
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1390
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1401
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1407
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.647
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.649
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.652
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.654
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.659
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.669
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.671
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.673
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.691
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.765
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.767
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.773
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.782
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.786
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.793
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.795
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.798
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.819
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.821
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.829
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.836
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.849
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.851
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.858
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.870
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.876
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.884
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.897
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.903
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.907
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.909
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.981
-
cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.986