CVE Tools
Track your stack

M2TEAM

13 CVEs tracked since 2026. Since Feb 2026, none of them reached CISA KEV.

M2TEAM CVEs per month

Feb 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
M2TEAM CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0260
2026-037 or fewer
2026-046 or fewer
2026-0570
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in M2TEAM's monthly top three, with their CVEs summed over those months.

  1. Nanazip132 months

Latest CVEs

The 15 most recently published vulnerabilities affecting M2TEAM.

  1. CVE-2026-54616NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value7.1
  2. CVE-2026-55781NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalidated fs_bsize/fs_fsize superblock fields—
  3. CVE-2026-55780NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-file Extract() via unvalidated entry Size—
  4. CVE-2026-55783NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom archive handlers when extracting/testing the whole archive—
  5. CVE-2026-55782NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via attacker-controlled section/name length fields—
  6. CVE-2026-47223NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow5.4
  7. CVE-2026-47224NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check4.3
  8. CVE-2026-47222NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow5.4
  9. CVE-2026-44215NanaZip: Heap out-of-bounds write in NanaZip UFS directory parser4.4
  10. CVE-2026-42445NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion3.3
  11. CVE-2026-42444NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount3.3
  12. CVE-2026-42443NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation3.3
  13. CVE-2026-42442NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink3.3
  14. CVE-2026-42355NanaZip: Uncontrolled recursion in NanaZip Electron ASAR parser causes stack exhaustion3.3
  15. CVE-2026-42446NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser4.4

The record

Peak rank
#176 in Feb 2026
Busiest month shown
May 2026, 7 CVEs
Months with a KEV entry
0 since Feb 2026
Monthly snapshots
2 since 2026
M2TEAM's full record, month by month