ExploitPublished
BusyBox 1.37.0 · Path Traversal
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 6 May 2026, 02:38 UTC
What to do
AI-suggested
Until a patch is available, restrict access to BusyBox utilities and monitor for suspicious activity related to path traversal attempts.
Description
BusyBox 1.37.0 - Path Traversal
Indicators of compromise
Exploit source code
# Exploit Title: BusyBox 1.37.0 - Path Traversal
# Google Dork: N/A
# Date: 2026-02-11
# Exploit Author: Calil Khalil
# Vendor Homepage: https://busybox.net
# Software Link: https://busybox.net/downloads/
# Version: BusyBox 1.36.1, 1.37.0
# Tested on: Ubuntu 22.04 LTS, Alpine Linux 3.19
# CVE: CVE-2026-26157
"""
BusyBox Path Traversal Vulnerability (CVE-2026-26157)
Description:
BusyBox archive extraction utilities fail to properly sanitize symlink targets
containing trailing ".." components. …References
Community reviews
Loading reviews…