High
Security advisory
An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection mechanism
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-50327
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 8 Nov 2026, 00:57 UTC · Revision 1
Source evidence
An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection mechanism
osv:CVE-2025-50327
Complete source record
{
"id": "34687390ec959422a5c88eec7e6f815eed0defd506ba4acd14b1210ff857e32b",
"url": "https://osv.dev/vulnerability/CVE-2025-50327",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2025-50327",
"summary": "An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attacker to escalate privileges and execute arbitrary code via a bypass of the Mark-of-the-Web protection mechanism",
"evidence": "osv:CVE-2025-50327",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2025-50327",
"aliases": [
"CVE-2025-50327"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/fcorbelli/zpaqfranz",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "33088c303aee420aa3835e3aa614b6cb2ec67722"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"last_affected": "61.3"
}
],
"source": "DESCRIPTION"
}
]
}
}
],
"versions": [
"61.3",
"61.2",
"62.2",
"61.1",
"60.10",
"60.9",
"60.8",
"60.7",
"60.6",
"60.5",
"60.4",
"60.3",
"60.2",
"60.1",
"59.9",
"59.8",
"59.7",
"59.6",
"59.5",
"59.4",
"59.3",
"59.2",
"59.1",
"58.12",
"58.11",
"58.10",
"58.9",
"58.8",
"58.7",
"58.6",
"58.5",
"58.4",
"58.3",
"58.2",
"58.1",
"57.5",
"57.4",
"57.3",
"57.2",
"57.1",
"56.4",
"56.3",
"56.2",
"56.1",
"55.16",
"55.15",
"55.14",
"55.10",
"55.7",
"55.6",
"55.5",
"55.4",
"55.3",
"55.2",
"55.1",
"54.15",
"54.14",
"54.13",
"54_12",
"54.12",
"54.11",
"54.10",
"54.9",
"54.8",
"54.7",
"54.6",
"54.3",
"54.2",
"54.1",
"52.21",
"52.20",
"52.19",
"52.18",
"52.17",
"52.16",
"52.15",
"52.13",
"51.12",
"52.11",
"52.10",
"52.9",
"52.8",
"52.5",
"52.4",
"52.3",
"52.2",
"52.1",
"51.43",
"51.41",
"51.40",
"51.38",
"51",
"51.36",
"51.34",
"51.33",
"51.32",
"51.31",
"51.29",
"51.28",
"51.27",
"51.25",
"51.23",
"51.22",
"51.10",
"50.24",
"50.23",
"50.21",
"50.19",
"50.18"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-50327.json"
}
}
],
"modified": "2026-10-28T02:30:52.578496241Z",
"provider": "osv",
"references": [
"https://github.com/OV-0-VO/Public-references/blob/main/CVE-2025-50327.md",
"https://github.com/fcorbelli/zpaqfranz/releases/",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/50xxx/CVE-2025-50327.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-50327"
],
"provider_metadata": {
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/50xxx/CVE-2025-50327.json"
}
},
"related_cves": [
{
"value": "CVE-2025-50327",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 521142,
"published_at": "2026-07-22T00:00:00+00:00"
}