CVE-2026-88830
A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message.
- Published Sep 23, 2026
- CVSS 7.5 high
- 0.4% chance of exploitation in the next 30 days (EPSS)