Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with that documented design and does not cross a separate security boundary warranting a CVE.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
No reference.
History
Tue, 13 Oct 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with that documented design and does not cross a separate security boundary warranting a CVE. |
Projects
Sign in to view the affected projects.
MITRE
Status: REJECTED
Assigner: redhat
Published: No published date
Updated: 2026-10-13T15:35:13.790Z
Reserved: 2026-09-10T09:42:04.559Z
Link: CVE-2026-88836
Vulnrichment
No data.
NVD
Status : Rejected
Published: 2026-10-13T16:17:23.960
Modified: 2026-10-13T16:17:23.960
Link: CVE-2026-88836
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.