Known Vulnerabilities for BusyBox by Na
Listed below are 10 of the newest known vulnerabilities associated with "BusyBox" by "Na".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-93208 json | In the Linux kernel, the following vulnerability has been resolved: kasan: fix cache shrink race with CPU hotplug kasan_qua... | Not Provided | 2026-09-24 | 2026-09-24 |
| CVE-2026-88840 json | BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message. | Not Provided | 2026-09-23 | 2026-09-26 |
| CVE-2026-88839 json | BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap po... | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-88837 json | BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication ch... | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-88835 json | BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read. | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-88832 json | BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when pr... | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-88831 json | BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule ma... | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-88830 json | A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when ... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-76014 json | A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c... | Not Provided | 2026-08-19 | 2026-08-25 |
| CVE-2026-73055 json | Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix ... | Not Provided | 2026-08-15 | 2026-08-31 |