CVE-2026-88837 UNKNOWN

CVE-2026-88837

Published: 2026-09-23

Description

BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.

AI Intelligence Brief

AI Intelligence

Analyzing vulnerability vectors…