--- title: This File Archiver was PWNed | daily.dev description: A remote code execution vulnerability has been discovered and patched in 7-Zip, tracked as a CVE reported through Trend Micro's Zero Day Initiative. The flaw... canonical: https://daily.dev/posts/this-file-archiver-was-pwned-iwxcaqont twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: This File Archiver was PWNed | daily.dev og:description: A remote code execution vulnerability has been discovered and patched in 7-Zip, tracked as a CVE reported through Trend Micro's Zero Day Initiative. The flaw... og:url: https://daily.dev/posts/this-file-archiver-was-pwned-iwxcaqont og:image: https://api.daily.dev/og/posts/IWXCaqONt.png og:image:alt: This File Archiver was PWNed og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # This File Archiver was PWNed **[Eric Parker](https://daily.dev/sources/ericparker)** · 11 min read · 0 upvotes · 0 comments ## Summary A remote code execution vulnerability has been discovered and patched in 7-Zip, tracked as a CVE reported through Trend Micro's Zero Day Initiative. The flaw involves a heap overflow triggered by maliciously crafted XZ archives, allowing attackers to execute arbitrary code when a victim opens a compromised archive. Because 7-Zip lacks an auto-updater, many users remain on vulnerable versions. The recommended fix is to manually update to the latest version from 7-zip.org. Additional protective measures discussed include using virtual machines and containerization to isolate untrusted files, keeping all software up to date, and leveraging application control tools. The post also explores how AI models can analyze code diffs to identify patched vulnerabilities, raising concerns about the window between patch release and public disclosure. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CVE-2026-14266: Inside the 7-Zip Heap Overflow Hiding in XZ Archives Since 2021](https://daily.dev/posts/cve-2026-14266-inside-the-7-zip-heap-overflow-hiding-in-xz-archives-since-2021-bfyx6nvg2) · Latest Hacking News · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#vulnerability](https://daily.dev/tags/vulnerability) [View this post on daily.dev](https://daily.dev/posts/this-file-archiver-was-pwned-iwxcaqont) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"This File Archiver was PWNed","url":"https://daily.dev/posts/this-file-archiver-was-pwned-iwxcaqont","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/this-file-archiver-was-pwned-iwxcaqont"},"datePublished":"2026-07-20T18:13:26.135Z","dateModified":"2026-07-20T18:14:22.569Z","description":"A remote code execution vulnerability has been discovered and patched in 7-Zip, tracked as a CVE reported through Trend Micro's Zero Day Initiative. The flaw...","image":"https://i.ytimg.com/vi/yBYuqwXTu-I/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/yBYuqwXTu-I/sddefault.jpg","isAccessibleForFree":true,"articleSection":"Eric Parker","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Eric Parker","logo":"https://media.daily.dev/image/upload/s--vVcOpkjx--/f_auto/v1724391603/logos/ericparker","url":"https://daily.dev/sources/ericparker"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/this-file-archiver-was-pwned-iwxcaqont","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,vulnerability","timeRequired":"PT11M","video":{"@type":"VideoObject","name":"This File Archiver was PWNed","description":"A remote code execution vulnerability has been discovered and patched in 7-Zip, tracked as a CVE reported through Trend Micro's Zero Day Initiative. The flaw...","thumbnailUrl":"https://i.ytimg.com/vi/yBYuqwXTu-I/sddefault.jpg","uploadDate":"2026-07-20T18:13:26.135Z","duration":"PT11M","url":"https://api.daily.dev/r/IWXCaqONt","embedUrl":"https://www.youtube.com/embed/yBYuqwXTu-I"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Eric Parker","item":"https://daily.dev/sources/ericparker"},{"@type":"ListItem","position":3,"name":"This File Archiver was PWNed"}]} ```