VulnSocial

CVE-2026-26157Patch

LOWCVSS 7.0 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentially enabling code execution through the modification of sensitive system files.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-73

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-03-12)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-02-11: 1Mentions · 2026-03-12: 2Patch / Workaround · 2026-03-12: 2Technical Details · 2026-02-11: 1Technical Details · 2026-03-12: 202-1103-12
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-02-111
Disclosure1
2026-03-122
Patch2
Full discourse3 posts
  • ThreatCluster@threatcluster
    Patch

    SUSE issues BusyBox security update for openSUSE Leap 15.5, fixing 8 CVEs including CVE-2026-26157/26158 that allow arbitrary file overwrite and privilege escalation. Apply patches now. https://threatcluster.io/cluster/critical-vulnerabilities-in-busybox-affecting-opensuse-leap--fd6ce030

    Post summary

    SUSE announces a BusyBox security update for openSUSE Leap 15.5 that fixes eight CVEs, including CVE-2026-26157/26158, which enable arbitrary file overwrite and privilege escalation; users are advised to apply the patches immediately.

    0001052
    100 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-26157 A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and … https://www.cve.org/CVERecord?id=CVE-2026-26157

    Post summary

    The post announces a path‑sanitization flaw in BusyBox’s archive extraction utilities, indicating that crafted archives could lead to unintended file extraction.

    00010144
    56.5K followersView on X
  • Ferramentas Linux@Cezar_H_Linux
    Patch

    Critical #SUSE BusyBox update out now! Eight vulnerabilities patched including two severe TAR flaws (CVE-2026-26157, CVE-2026-26158) allowing code execution and privilege escalation. Read more: 👉https://tinyurl.com/53bppetc #Security #openSUSE https://t.co/XRLvNIGTyX

    Post summary

    SUSE releases a critical BusyBox update patching eight CVEs, including two TAR flaws that enable code execution and privilege escalation.

    0000038
    1.3K followersView on X

Explore more

Back to dashboard