The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a     hardlink references a symlink stored at a deeper name than the hardlink itself. The extraction fallback     validated the symlink at it's archived location but recreated it at the hardlink's shallower path, letting     a relative target the filter judged contained escape the destination directory. This allowed a malicious     tar archive to create a symlink pointing outside the destination, enabling out-of-destination file reads     or writes. This was an incomplete fix of CVE-2025-4330. (CVE-2026-11940)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-11940

high Nessus Plugin ID 323882

Version 1.4

Version 1.3

Version 1.2

Version 1.1

Version 1.4 Aug 13, 2026, 12:31 AM CVSS metrics ("CVSSv3 score" set to 7.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N") CVSSv3 severity (based on None, severity increased from "Medium" to "High") Detection (updated detection logic) Plugin metadata Plugin Feed: 202608130031
Version 1.3 Aug 12, 2026, 1:09 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202608120109
Version 1.2 Jul 26, 2026, 9:54 PM Detection (updated detection logic) Plugin Feed: 202607262154
Version 1.1 Jun 30, 2026, 5:42 PM New Plugin Feed: 202606301742