Arbitrary Code Execution in NCH ExpressZip

Publication date: 2026-07-22

Last updated on: 2026-07-22

Assigner: MITRE

Description

An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitrary code via downloading and executing a crafted archive file.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-22

Last Modified

2026-07-22

Generated

2026-07-23

AI Q&A

2026-07-23

EPSS Evaluated

N/A

NVD

CVE-2025-44089

Affected Vendors & Products

Vendor	Product	Version / Range
nch_software	expresszip	11.29

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in NCH Software ExpressZip version 11.29. It allows attackers to execute arbitrary code by tricking a user into downloading and opening a specially crafted archive file. This happens because the software does not properly validate or handle malicious files.

Impact Analysis

If you use ExpressZip v11.29, an attacker could exploit this to run malicious code on your system. This could lead to data theft, system damage, or unauthorized access to your computer. Simply downloading and opening a malicious archive file could trigger the attack.

Mitigation Strategies

Update NCH Software ExpressZip to the latest version. Avoid downloading or executing archive files from untrusted sources. Use antivirus software to scan downloaded files.

Hi! I’m here to help you understand CVE-2025-44089. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70