CVE-2026-88836

Unknown

Description

Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with that documented design and does not cross a separate security boundary warranting a CVE.

SeverityUnknown

CVSS—

Exploit probability—

Product—

PublishedOct 13, 2026

First seenOct 13, 2026

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

Sources have not yet published the affected products and versions for this vulnerability.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.