Skip to content
OpenAdvisories

Package · Debian

busybox

65 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2026-26157 Public exploit

    Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization

    A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead t…

    Red Hat Red Hat Enterprise Linux 6 Red Hat Hardened Images busybox Linux Debian Ubuntu
  • Medium 6.5
    CVE-2025-60876 Public exploit

    BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/qu…

    busybox busybox Debian Ubuntu