Vulnerability in SzafirHost Affects Electronic Signing Solutions

CVE-2026-13165

What is CVE-2026-13165?

A flaw in SzafirHost's handling of native library archives allows attackers to exploit the download mechanism by injecting a malicious library via local-file headers. The vulnerability arises when the product verifies the integrity of an archive without recognizing entries that have been manipulated significantly. An attacker can place a malicious DLL/SO/DYLIB between legitimate entries, bypassing verification processes that rely only on the Central Directory. Subsequent extraction processes can then facilitate remote code execution, as the contaminating library is accepted without proper validation checks.

References