CVE-2026-110235 [MEDIUM] – MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to

MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ….//file that become ../file, creating or overwriting files anywhere the app can write on shared storage.