A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9592 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:8492 advisory.

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the libarchive package has been released.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-475:03 advisory.

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)
      * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:9026 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8866 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:8534 advisory.

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)
      * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8873 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8865 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive     (CVE-2026-4111)

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8867 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8908 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8864 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-455:02 advisory.

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)
      * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8510 advisory.

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:8534 advisory.

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:8492 advisory.

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-8534 advisory.

    - Resolves: CVE-2026-4424

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-8510 advisory.

    - Resolves: CVE-2026-4424
    - Resolves: CVE-2026-5121

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:8510 advisory.

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)
      * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8521 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8534 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8517 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-8492 advisory.

    - Resolves: CVE-2026-4424

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:8510 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    * libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing     (CVE-2026-5121)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:8492 advisory.

    The libarchive programming library can create and read several different streaming archive formats,     including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility,     scripting language bindings such as python-libarchive, and several popular desktop file managers.

    Security Fix(es):

    * libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing     (CVE-2026-4424)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive     processing logic due to improper validation of the LZSS sliding window size after transitions between     compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive,     leading to the disclosure of sensitive heap memory information without requiring authentication or user     interaction. (CVE-2026-4424)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
309106	RHEL 8 : libarchive (RHSA-2026:9592)	Nessus	Red Hat Local Security Checks	critical
309076	AlmaLinux 10 : libarchive (ALSA-2026:8492)	Nessus	Alma Linux Local Security Checks	high
307888	Photon OS 5.0: Libarchive PHSA-2026-5.0-0825	Nessus	PhotonOS Local Security Checks	critical
307682	MiracleLinux 8 : libarchive-3.3.3-7.el8_10 (AXSA:2026-475:03)	Nessus	Miracle Linux Local Security Checks	critical
307601	RHEL 8 : libarchive (RHSA-2026:9026)	Nessus	Red Hat Local Security Checks	critical
307563	RHEL 9 : libarchive (RHSA-2026:8866)	Nessus	Red Hat Local Security Checks	critical
307561	AlmaLinux 8 : libarchive (ALSA-2026:8534)	Nessus	Alma Linux Local Security Checks	critical
307543	RHEL 9 : libarchive (RHSA-2026:8873)	Nessus	Red Hat Local Security Checks	critical
307526	RHEL 10 : libarchive (RHSA-2026:8865)	Nessus	Red Hat Local Security Checks	high
307525	RHEL 9 : libarchive (RHSA-2026:8867)	Nessus	Red Hat Local Security Checks	critical
307524	RHEL 8 : libarchive (RHSA-2026:8908)	Nessus	Red Hat Local Security Checks	critical
307520	RHEL 9 : libarchive (RHSA-2026:8864)	Nessus	Red Hat Local Security Checks	critical
307497	MiracleLinux 9 : libarchive-3.5.3-9.el9_7 (AXSA:2026-455:02)	Nessus	Miracle Linux Local Security Checks	critical
307477	RockyLinux 9 : libarchive (RLSA-2026:8510)	Nessus	Rocky Linux Local Security Checks	critical
307467	RockyLinux 8 : libarchive (RLSA-2026:8534)	Nessus	Rocky Linux Local Security Checks	critical
307464	RockyLinux 10 : libarchive (RLSA-2026:8492)	Nessus	Rocky Linux Local Security Checks	high
307382	Oracle Linux 8 : libarchive (ELSA-2026-8534)	Nessus	Oracle Linux Local Security Checks	critical
307380	Oracle Linux 9 : libarchive (ELSA-2026-8510)	Nessus	Oracle Linux Local Security Checks	critical
307375	AlmaLinux 9 : libarchive (ALSA-2026:8510)	Nessus	Alma Linux Local Security Checks	critical
306789	RHEL 8 : libarchive (RHSA-2026:8521)	Nessus	Red Hat Local Security Checks	critical
306785	RHEL 8 : libarchive (RHSA-2026:8534)	Nessus	Red Hat Local Security Checks	critical
306784	RHEL 7 : libarchive (RHSA-2026:8517)	Nessus	Red Hat Local Security Checks	critical
306777	Oracle Linux 10 : libarchive (ELSA-2026-8492)	Nessus	Oracle Linux Local Security Checks	high
306774	RHEL 9 : libarchive (RHSA-2026:8510)	Nessus	Red Hat Local Security Checks	critical
306765	RHEL 10 : libarchive (RHSA-2026:8492)	Nessus	Red Hat Local Security Checks	high
303060	Linux Distros Unpatched Vulnerability : CVE-2026-4424	Nessus	Misc.	high

Detections

Analytics

CVE-2026-4424

high

Tenable Plugins

critical

high

critical

critical

critical

critical

critical

critical

high

critical

critical

critical

critical

critical

critical

high

critical

critical

critical

critical

critical

critical

high

critical

high

high