Threats Tagged 'cve-2026-66484'
View all threats tagged with 'cve-2026-66484'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-66484'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-66484: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GNU cpioCVE-2026-66484 0 GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the link_to_name function without equivalent sanitization before calling link function. A tar archive provided by an attacker, containing a hard-link entry whose linkname is set to an absolute path outside the extraction directory, can cause cpio to create a hard link to an existing file outside the intended extraction directory, breaking the expected guarantee of --no-absolute-filenames and allowing archive-controlled linkage to external files. This issue has been fixed in commit e2b9cbdd3354d2b1569b7390d1bc15c1930559ad Join the discussion | CVE Database V5 | 08/10/2026, 12:31:50 UTC Added: 08/10/2026, 10:41:47 UTC |
Showing 1 to 1 of 1 result