Bandisoft CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Bandisoft CVE published 2026-10-20

CVE-2026-113609

Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. This vulnerability enables attackers to deliver unsigned PowerShell scripts or modules in downloaded archives that run under the RemoteSigned policy when invoked by the user. Defenders should prioritize verifying Bandizip versions and updating [truncated]