Rapid7’s 2026 Global Cybersecurity Summit is now available on-demand.Watch sessions.
Rapid7

vulnerability

FreeBSD: VID-d1ef1138-d273-11ea-a757-e0d55e2a8bf9 (CVE-2020-16116): ark -- directory traversal

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Jul 30, 2020
Added
Jul 31, 2020
Modified
Jun 15, 2026

Description

In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal.

Solution

freebsd-upgrade-package-ark
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.