CVE-2026-76014

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-76014", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-08-18T19:02:48.220Z", "datePublished": "2026-08-19T02:45:08.531Z", "dateUpdated": "2026-08-25T01:49:44.780Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-19T02:45:08.531Z"}, "title": "BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-476", "lang": "en", "description": "NULL Pointer Dereference"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-404", "lang": "en", "description": "Denial of Service"}]}], "affected": [{"vendor": "n/a", "product": "BusyBox", "versions": [{"version": "1.30.0", "status": "affected"}, {"version": "1.30.1", "status": "affected"}], "cpes": ["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"], "modules": ["FEATURE_WGET_TIMEOUT Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-08-18T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-08-18T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-08-18T21:07:54.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "yuxin_wang (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/vuln/391923", "name": "VDB-391923 | BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/391923/cti", "name": "VDB-391923 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-76014", "name": "CVE-2026-76014 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/878212", "name": "Submit #878212 | BusyBox 1.30.1 NULL Pointer Dereference", "tags": ["third-party-advisory"]}, {"url": "https://github.com/mirror/busybox/issues/124", "tags": ["issue-tracking"]}, {"url": "https://gist.github.com/wyxstarry/5c199ec824928c5ae5816aaecbc6df03", "tags": ["exploit"]}, {"url": "https://github.com/mirror/busybox/commit/83a40bf7a93c8ac093d33ab452222dd5b9eb57ff", "tags": ["patch"]}], "tags": ["x_open-source"], "x_generator": ["VulDB PVTS v202608"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-25T01:49:34.069693Z", "id": "CVE-2026-76014", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-25T01:49:44.780Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-76014", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-25T01:49:34.069693Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-25T01:49:40.841Z"}}], "cna": {"tags": ["x_open-source"], "title": "BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference", "credits": [{"lang": "en", "type": "reporter", "value": "yuxin_wang (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"], "vendor": "n/a", "modules": ["FEATURE_WGET_TIMEOUT Handler"], "product": "BusyBox", "versions": [{"status": "affected", "version": "1.30.0"}, {"status": "affected", "version": "1.30.1"}]}], "timeline": [{"lang": "en", "time": "2026-08-18T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-08-18T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-08-18T21:07:54.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/391923", "name": "VDB-391923 | BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/391923/cti", "name": "VDB-391923 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-76014", "name": "CVE-2026-76014 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/878212", "name": "Submit #878212 | BusyBox 1.30.1 NULL Pointer Dereference", "tags": ["third-party-advisory"]}, {"url": "https://github.com/mirror/busybox/issues/124", "tags": ["issue-tracking"]}, {"url": "https://gist.github.com/wyxstarry/5c199ec824928c5ae5816aaecbc6df03", "tags": ["exploit"]}, {"url": "https://github.com/mirror/busybox/commit/83a40bf7a93c8ac093d33ab452222dd5b9eb57ff", "tags": ["patch"]}], "x_generator": ["VulDB PVTS v202608"], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "NULL Pointer Dereference"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "Denial of Service"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-19T02:45:08.531Z"}}}, "cveMetadata": {"cveId": "CVE-2026-76014", "state": "PUBLISHED", "dateUpdated": "2026-08-25T01:49:44.780Z", "dateReserved": "2026-08-18T19:02:48.220Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-08-19T02:45:08.531Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"], "modules": ["FEATURE_WGET_TIMEOUT Handler"], "product": "BusyBox", "vendor": "n/a", "versions": [{"status": "affected", "version": "1.30.0"}, {"status": "affected", "version": "1.30.1"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue."}, {"lang": "es", "value": "Una vulnerabilidad ha sido encontrada en BusyBox hasta 1.30.1. Esta vulnerabilidad afecta c\u00f3digo desconocido del archivo networking/wget.c del componente FEATURE_WGET_TIMEOUT Gestor. Tal manipulaci\u00f3n del argumento -T lleva a desreferencia de puntero nulo. Acceso local es requerido para abordar este ataque. El exploit ha sido divulgado al p\u00fablico y puede ser usado. El nombre del parche es 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. Un parche deber\u00eda ser aplicado para remediar este problema."}], "id": "CVE-2026-76014", "lastModified": "2026-11-09T20:10:00.200", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 1.7, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-76014", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-25T01:49:34.069693Z", "version": "2.0.3"}}]}, "published": "2026-08-19T03:16:53.247", "references": [{"source": "cna@vuldb.com", "url": "https://gist.github.com/wyxstarry/5c199ec824928c5ae5816aaecbc6df03"}, {"source": "cna@vuldb.com", "url": "https://github.com/mirror/busybox/commit/83a40bf7a93c8ac093d33ab452222dd5b9eb57ff"}, {"source": "cna@vuldb.com", "url": "https://github.com/mirror/busybox/issues/124"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-76014"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/878212"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/391923"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/391923/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-404"}, {"lang": "en", "value": "CWE-476"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{"bugzilla": {"description": "busybox: BusyBox: Denial of Service via null pointer dereference in wget.c", "id": "2519381", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519381"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-476", "details": ["A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue.", "A flaw was found in BusyBox. A local attacker can exploit a null pointer dereference vulnerability in the FEATURE_WGET_TIMEOUT handler within the networking/wget.c component. This occurs when the attacker manipulates the -T argument, leading to a denial of service."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2026-76014", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Fix deferred", "package_name": "busybox", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "package_name": "busybox", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-08-19T02:45:08Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-76014\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-76014\nhttps://gist.github.com/wyxstarry/5c199ec824928c5ae5816aaecbc6df03\nhttps://github.com/mirror/busybox/commit/83a40bf7a93c8ac093d33ab452222dd5b9eb57ff\nhttps://github.com/mirror/busybox/issues/124\nhttps://vuldb.com/cve/CVE-2026-76014\nhttps://vuldb.com/submit/878212\nhttps://vuldb.com/vuln/391923\nhttps://vuldb.com/vuln/391923/cti"], "statement": "A flaw was found in BusyBox where a local attacker can trigger a null pointer dereference in the FEATURE_WGET_TIMEOUT handler within the networking/wget.c component by manipulating the -T argument. This vulnerability, which affects BusyBox versions up to 1.30.1, leads to a denial of service as the wget process crashes. Red Hat products shipping BusyBox versions above 1.30.1 are not affected by this vulnerability.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.30.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.30.1"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "BusyBox", "source": "cna", "vendor": "n/a"}, "product": "busybox", "vendor": "busybox"}], "created": "2026-08-19T07:00:12.227672+00:00", "updated": "2026-08-19T11:45:04.591930+00:00", "vendors": ["busybox", "busybox$PRODUCT$busybox"]}