CVE-2026-92205Medium· 6.1▾ Midnight0dayBusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 33.6 · likelihood 0 · exploitation 25
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of BusyBox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the libarchive component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create files in the context of the current user. Was ZDI-CAN-27556.
BusyBox 1.37.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-88838Medium· 5.5A flaw was found in BusyBox's mount utility
CVE-2026-88834Low· 3.7A flaw was found in BusyBox's httpd web server
CVE-2026-88833Medium· 6.5A flaw was found in BusyBox's udhcpc DHCP client
CVE-2023-42366Medium· 5.5A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.
CVE-2026-88840Medium· 5.3BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.
CVE-2026-88830High· 7.5A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message.