https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T08:56:24.617487+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-12834 bdu:2026-12834 2026-10-05T08:56:24.626874+00:00 bdu:2026-12834 https://cve.radiocsirt.org/vuln/bell-cve-2026-29004 BELL-CVE-2026-29004 2026-10-05T08:56:24.626906+00:00

Affected: Alpaquita:23: busybox, Alpaquita:25: busybox, Alpaquita:stream: busybox, BellSoft Hardened Containers:23: busybox, BellSoft Hardened Containers:25: busybox, BellSoft Hardened Containers:stream: busybox

 https://cve.radiocsirt.org/vuln/euvd-2026-337369 EUVD-2026-337369 2026-10-05T08:56:24.626939+00:00 EUVD-2026-337369 https://cve.radiocsirt.org/vuln/fkie_cve-2026-29004 fkie_cve-2026-29004 2026-10-05T08:56:24.626952+00:00

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.

 https://cve.radiocsirt.org/vuln/ghsa-vx55-mmvv-p227 GHSA-vx55-mmvv-p227 2026-10-05T08:56:24.626977+00:00

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.

 https://cve.radiocsirt.org/vuln/oesa-2026-2357 OESA-2026-2357 — busybox security update 2026-10-05T08:56:24.626994+00:00

Affected: openEuler:24.03-LTS-SP3: busybox, openEuler:20.03-LTS-SP4: busybox, openEuler:22.03-LTS-SP4: busybox, openEuler:24.03-LTS: busybox, openEuler:24.03-LTS-SP1: busybox

The Swiss Army Knife of Embedded Linux Security Fix(es):

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.(CVE-2026-29004)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10740-1 openSUSE-SU-2026:10740-1 — busybox-1.37.0-11.1 on GA media 2026-10-05T08:56:24.627022+00:00

busybox-1.37.0-11.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:30652 RHSA-2026:30652 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-05T08:56:24.627039+00:00

BusyBox: BusyBox: Arbitrary Code Execution via DHCPv6 Client Heap Buffer Overflow

 https://cve.radiocsirt.org/vuln/suse-su-2026:2053-1 SUSE-SU-2026:2053-1 — Security update for busybox 2026-10-05T08:56:24.627053+00:00

Security update for busybox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-29004 UBUNTU-CVE-2026-29004 2026-10-05T08:56:24.627066+00:00

Affected: Ubuntu:Pro:14.04:LTS: busybox, Ubuntu:Pro:16.04:LTS: busybox, Ubuntu:Pro:18.04:LTS: busybox, Ubuntu:20.04:LTS: busybox, Ubuntu:22.04:LTS: busybox, Ubuntu:24.04:LTS: busybox, Ubuntu:25.10: busybox, Ubuntu:26.04:LTS: busybox

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1356 WID-SEC-W-2026-1356 — BusyBox: Schwachstelle ermöglicht Codeausführung oder DoS 2026-10-05T08:56:24.627093+00:00

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in BusyBox ausnutzen, um beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu verursachen.