CVE-2026-88837 Blast Radius

MEDIUM • CVSS 6.5BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-88837.

Book a Demo →← Back to CVE-2026-88837