Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-27014

NanaZip is an open source file archive Starting in version 5.0.1252.0 and prior to version 6.0.1630.0, circular `NextOffset` chains cause an infinite loop, and deeply nested directories cause unbounded recursion (stack overflow) in the ROMFS archive parser. Version 6.0.1630.0 patches the issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.6%
CVSS Severity
CVSS v3 Score 5.5
Products affected by CVE-2026-27014
  • M2team » Nanazip » Version: 5.0.1252.0
    cpe:2.3:a:m2team:nanazip:5.0.1252.0
  • M2team » Nanazip » Version: 5.0.1263.0
    cpe:2.3:a:m2team:nanazip:5.0.1263.0
  • M2team » Nanazip » Version: 5.1.1252.0
    cpe:2.3:a:m2team:nanazip:5.1.1252.0
  • M2team » Nanazip » Version: 5.1.1263.0
    cpe:2.3:a:m2team:nanazip:5.1.1263.0
  • M2team » Nanazip » Version: 6.0.1461.0
    cpe:2.3:a:m2team:nanazip:6.0.1461.0
  • M2team » Nanazip » Version: 6.0.1621.0
    cpe:2.3:a:m2team:nanazip:6.0.1621.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved