MEDIUM Published Sep 23, 2026

CVE-2026-88837

CVE-2026-88837 published: BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.

View full NVD advisory → ← Back to CVE watch

CVE-2026-88837

Related reading