b
busybox
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 71 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 4, 2006 to present
71
Total CVEs
38
Critical+High
1
Exploited
12
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
12
Critical/High
Risk Level
43/100
medium
⚠️ 1 Active Exploits🆕 2Fresh (<7d)📈 2 in Last 30 Days
Severity Distribution
Critical
6High
32Medium
16Low
4Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
4Age Distribution
Common Weaknesses (CWE)
1
Use After Free
14
2
Null Pointer Dereference
4
3
Buffer Overflow
4
4
Path Traversal
4
5
Integer Overflow
2
Most Affected Products
1. Busybox Busybox260
2. VMware ESXi180
3. Canonical Ubuntu Linux32
4. Fedoraproject Fedora31
5. debian/busybox26
Recent Vulnerabilities
See more →https://seclists.org/oss-sec/2026/q3/556
unknown
BusyBox dpkg applet: OS command injection
Aug 24, 2026🔧 No Patch
CVE-2026-76014
CVSS 1.9low
BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference
Aug 19, 2026🔧 No Patch
CVE-2026-38753
CVSS 7.5high
Jul 15, 2026
CVE-2026-38755
CVSS 7.5high
Jul 15, 2026
CVE-2026-38754
CVSS 7.5high
Jul 15, 2026
CVE-2026-38752
CVSS 7.5high
Jul 15, 2026
REDHAT-BUG-2466526
CVSS 7.0high
May 4, 2026🔧 No Patch
CVE-2026-29004
CVSS 7.2high
BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS
May 4, 2026🔧 No Patch
CVE-2026-26158
CVSS 7.0EPSS 0%high
Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries
Feb 11, 2026🔧 No Patch
CVE-2026-26157
CVSS 7.0EPSS 0%high
Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization
Feb 11, 2026⚠ Exploited🔧 No Patch
Monitor busybox in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.