TI-2026-73900 CVE-2026-88842 · GHSA-9p9q-94fg-r728Out-of-bounds read in BusyBox dpkg corrupts status filePriority LOW 15A flaw was found in BusyBox dpkg.CVSS 3.1LOW 3.3· Local · No auth · User interaction · EPSS 0.00156 · Published 2026-10-14 · Fixed in 1.37.0-9.4.hum1 CWE-125
TI-2026-70098 CVE-2026-108119 · GHSA-v87q-pcjw-34hcBusyBox tar writes files outside extraction directory via linksPriority LOW 27A flaw was found in busybox.CVSS 3.1MEDIUM 6.3· Local · No auth · User interaction · EPSS 0.00134 · Published 2026-10-09 · Partial fix · 1.37.0-9.4.hum1 CWE-59