Trend Micro

7-Zip Version 26.06 Addresses Multiple Bugs and Vulnerabilities

The developer of 7-Zip has issued version 26.06, the latest in a series of four recent releases that each claim to resolve bugs and vulnerabilities. No technical details about the patched issues have been disclosed, leaving users and researchers without clarity on the nature of the flaws. Past vulnerabilities in 7-Zip have been actively exploited in real-world attacks, including a remote code execution flaw that was fixed at the end of June but only publicly disclosed on 15 July after exploit code appeared online. The Italian government issued a warning about the available exploit code in late July. Unlike many modern applications, 7-Zip lacks an automatic update mechanism, requiring users to manually download and install the new version. Similar issues with outdated WinRAR installations have been highlighted by Trend Micro as a contributing factor to prolonged exposure in archiving software.