VulnSocial

CVE-2026-26158Disclosure

LOWCVSS 7.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by crafting a malicious tar archive containing unvalidated hardlink or symlink entries. If the tar archive is extracted with elevated privileges, this flaw can lead to privilege escalation, enabling an attacker to gain unauthorized access to critical system files.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-73

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-02-11); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-11: 1Mentions · 2026-03-12: 1Patch / Workaround · 2026-03-12: 1Technical Details · 2026-02-11: 1Technical Details · 2026-03-12: 102-1103-12
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-02-111
Disclosure1
2026-03-121
Patch1
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-26158 A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by crafting a malicious tar archive co… https://www.cve.org/CVERecord?id=CVE-2026-26158

    Post summary

    The post announces a BusyBox vulnerability (CVE‑2026‑26158) that lets attackers modify files beyond the intended extraction directory via crafted tar archives, linking to the CVE record for more details.

    01010183
    56.5K followersView on X
  • Ferramentas Linux@Cezar_H_Linux
    Patch

    Critical #SUSE BusyBox update out now! Eight vulnerabilities patched including two severe TAR flaws (CVE-2026-26157, CVE-2026-26158) allowing code execution and privilege escalation. Read more: 👉https://tinyurl.com/53bppetc #Security #openSUSE https://t.co/XRLvNIGTyX

    Post summary

    SUSE has released a critical update that patches eight vulnerabilities, including two severe TAR flaws (CVE-2026-26157 and CVE-2026-26158) which enable code execution and privilege escalation, with a link provided for further details.

    0000038
    1.3K followersView on X

Explore more

Back to dashboard