CyberSecBulletin

Izpack vulnerabilities

We track 1 vulnerability in Izpack products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.

1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score

Latest Izpack vulnerabilities

  • 7.4 High severity

    izpack: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-54550Izpack

    IzPack is a widely used tool for packaging applications on the Java platform as cross-platform installers. In 5.2.6 and earlier, UnpackerBase.unpack() in izpack-installer/src/main/java/com/izforge/izpack/installer/unpacker/UnpackerBase.java obtains an attacker