{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2026-88836",
        "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "state": "REJECTED",
        "dateReserved": "2026-09-10T09:42:04.559Z",
        "dateUpdated": "2026-10-13T15:35:13.790Z",
        "dateRejected": "2026-10-13T15:35:13.790Z",
        "assignerShortName": "redhat"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
                "shortName": "redhat",
                "dateUpdated": "2026-10-13T15:35:13.790Z"
            },
            "rejectedReasons": [
                {
                    "lang": "en",
                    "value": "Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with that documented design and does not cross a separate security boundary warranting a CVE."
                }
            ]
        }
    }
}