https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-18T20:05:48.076265+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-88834 fkie_cve-2026-88834 2026-10-18T20:05:48.080662+00:00

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limited to username enumeration and requires non-default compile options or uncommon password file states; default BusyBox builds with shadow password support are not affected.

 https://db.gcve.eu/vuln/ghsa-g83p-qwfp-8p23 GHSA-g83p-qwfp-8p23 2026-10-18T20:05:48.080725+00:00

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limited to username enumeration and requires non-default compile options or uncommon password file states; default BusyBox builds with shadow password support are not affected.

 https://db.gcve.eu/vuln/msrc_cve-2026-88834 msrc_CVE-2026-88834 — Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds 2026-10-18T20:05:48.080746+00:00 msrc_CVE-2026-88834 https://db.gcve.eu/vuln/ubuntu-cve-2026-88834 UBUNTU-CVE-2026-88834 2026-10-18T20:05:48.080768+00:00

Affected: Ubuntu:Pro:14.04:LTS: busybox, Ubuntu:Pro:16.04:LTS: busybox, Ubuntu:Pro:18.04:LTS: busybox, Ubuntu:20.04:LTS: busybox, Ubuntu:22.04:LTS: busybox, Ubuntu:24.04:LTS: busybox, Ubuntu:26.10: busybox, Ubuntu:26.04:LTS: busybox

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authentication failure behavior. Impact is limited to username enumeration and requires non-default compile options or uncommon password file states; default BusyBox builds with shadow password support are not affected.