The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or     directory-like names, to redirect later archive members outside the intended extraction directory. This     allowed a malicious tar archive to cause tarfile.extractall() with filter=tar to write files outside the     destination directory, subject to the permissions of the extracting process. This is the     tarfile.tar_filter counterpart of CVE-2026-7774, which covered tarfile.data_filter. (CVE-2026-114583)

Note that Nessus relies on the presence of the package as reported by the vendor.

Detections

Analytics

Linux Distros Unpatched Vulnerability : CVE-2026-114583

medium Nessus Plugin ID 371321

Version 1.7

Version 1.6

Version 1.5

Version 1.3

Version 1.2

Version 1.1

Version 1.7 Nov 12, 2026, 7:08 AM CVSS metrics ("CVSSv3 score" set to 6.2. "CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N") CVSSv3 severity (based on None, severity increased from "Low" to "Medium") Detection (updated detection logic) Plugin metadata Plugin Feed: 202611120708
Version 1.6 Nov 6, 2026, 12:35 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611060035
Version 1.5 Nov 5, 2026, 1:24 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202611050124
Version 1.3 Nov 1, 2026, 11:08 PM Detection (updated detection logic) Plugin Feed: 202611012308
Version 1.2 Oct 28, 2026, 8:56 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202610280856
Version 1.1 Oct 23, 2026, 5:56 PM New Plugin Feed: 202610231756