CVE-2026-5704

ADVISORY - nist

Summary

A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection.

EPSS Score⁠: 0.00401 (0.323)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-434⁠

Unrestricted Upload of File with Dangerous Type

ADVISORY - redhat

CWE-434⁠

Unrestricted Upload of File with Dangerous Type

Impacted images

Advisories

NIST

CREATED

6 months ago

UPDATED

18 days ago

ADVISORY IDCVE-2026-5704⁠

EXPLOITABILITY SCORE

1.3

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-434⁠

CVSS SCORE

5medium

Debian

CREATED

6 months ago

UPDATED

20 days ago

ADVISORY IDCVE-2026-5704⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

6 months ago

UPDATED

3 months ago

ADVISORY IDCVE-2026-5704⁠

EXPLOITABILITY SCORE

1.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

5.5medium

Alma

CREATED

1 month ago

UPDATED

1 month ago

ADVISORY IDALSA-2026:61581⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Alma

CREATED

19 days ago

UPDATED

18 days ago

ADVISORY IDALSA-2026:70390⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

6 months ago

UPDATED

6 months ago

ADVISORY IDCVE-2026-5704⁠

EXPLOITABILITY SCORE

1.3

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-434⁠

CVSS SCORE

5medium

Rocky

CREATED

1 month ago

UPDATED

1 month ago

ADVISORY IDRLSA-2026:61581⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Rocky

CREATED

1 month ago

UPDATED

1 month ago

ADVISORY IDRLSA-2026:61586⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Rocky

CREATED

17 days ago

UPDATED

17 days ago

ADVISORY IDRLSA-2026:70390⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Oracle

CREATED

1 month ago

UPDATED

1 month ago

ADVISORY IDELSA-2026-61581-0⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Oracle

CREATED

1 month ago

UPDATED

1 month ago

ADVISORY IDELSA-2026-61586-0⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Oracle

CREATED

18 days ago

UPDATED

18 days ago

ADVISORY IDELSA-2026-70390⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Chainguard

CREATED

26 days ago

UPDATED

26 days ago

ADVISORY ID

CGA-wrg8-6wpf-pwv9

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

2 months ago

UPDATED

2 months ago

ADVISORY ID

MINI-5xfc-qf8m-mg3g

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY