Skip to content

CVE-2026-53486

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 29, 2026
Last Seen
September 29, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability CVE-2026-101894 Exploited via Node.js Archive Extraction74.3

A critical vulnerability, CVE-2026-101894, was disclosed on September 28, 2026, affecting Node.js packages `@xhmikosr/decompress` and the unmaintained `decompress`. This flaw allows attackers to read and write files outside the intended output directory through symlink chains, potentially leading to...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCVE-2026-101894CWE-22 - Path TraversalCwe-59 - Improper Link Resolution Before File AccessLinuxMacOSDecompressNode.js