CVE-2026-114583: tar filter allows writing outside destination via empty-named symlink

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Oct

Released

2026-10-24

EPSS Score

0.21% (percentile: 10.3%)

Affected Products (2)

Other

• 21639-17084
• 21897-17084

Revision History

• 2026-10-24: Information published.