CVE-2026-88836
Severity not reportedData quality: partial.
Some fields were not provided by the source.
Rejected reason: Red Hat Product Security determined this is not a security vulnerability.
Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with that documented design and does not cross a separate security boundary warranting a CVE.
CVSS
—
Not reported by the source
Timeline (UTC)
Published: 2026-10-13 16:17
Modified: 2026-10-16 23:10
NVD status: Rejected
Last synced 1 day ago
Verified against the source API 2026-10-27 06:59 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
Not reported by the source (unknown — not "none").
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- No references reported.
Data sources
NVD CVE API 2.0 — fetched 2026-10-27 06:59 UTC · record ↗