← All credits

Red Hat would like to thank Calil Khalil (Hakal) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

CVE-2026-26158
Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries
CVE-2026-26157
Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization