Back Cybersecuritynews

Malformed ZIP Files Allows Attackers to Bypass Antivirus and EDR Detections

Cybersecuritynews •Abinaya • March 10, 2026

A critical flaw in how antivirus and Endpoint Detection and Response (EDR) systems process archive files. Tracked as CVE-2026-0866, this weakness allows attackers to use intentionally malformed ZIP headers to sneak malicious payloads past standard security scanners entirely undetected. ZIP archives contain embedded metadata, such as version details, operational flags, and specific compression methods, which […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Flaw in ZIP File Processing Enables Malware Bypass of Security Systems A vulnerability tracked as CVE-2026-0866 allows attackers to exploit malformed ZIP headers to evade detection by antivirus and EDR systems. This flaw can lead to malicious payloads being executed without triggering security alerts, affecting users relying on these security measures. The issue highlights significant weaknesses in how these systems handle archive files. 6 sources 70

Extracted Entities

Malformed ZIP Files Allows Attackers to Bypass Antivirus and EDR Detections

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)