Threats Tagged 'ghsa-f9qv-fq2p-pvch'

1 threat

Threats Tagged 'ghsa-f9qv-fq2p-pvch'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-88837Red Hat Hardened Images · Authentication Bypass by Primary Weakness Medium6.5EPSS 0.3%2026-09-23CVE Database V5CVE-2026-88837 CVE-2026-88837 is a vulnerability in BusyBox httpd used in Red Hat Hardened Images where yescrypt ($y$) password hashes are incorrectly treated as plaintext during Basic Authentication, causing an inversion of the authentication check. This flaw can lead to authentication bypass. Red Hat has released an update to BusyBox packages to address this issue. EPSS 0.3%Vulnerability Red Hat #ghsa-f9qv-fq2p-pvch	CVE Database V5	2026-09-23

Showing 1–1 of 1 result