Boletines de Vulnerabilidades

CVE-2026-88837

   
Software afectado HTTPD
 
BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-88837