{"id":"CVE-2026-88836","revision":"c99f7f2e02fc4eb3b29db007d2ff4f51","records":[{"revision":"c99f7f2e02fc4eb3b29db007d2ff4f51","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-88836","aliases":[],"title":"Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished…","description":"Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it does not verify peer identity or provide full TLS security; missing Finished verify_data checking is consistent with that documented design and does not cross a separate security boundary warranting a CVE.","state":1,"publishedAt":null,"modifiedAt":"2026-10-13T15:35:13.79+00:00","affected":[],"metrics":[],"references":[],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-88836","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-88836","identifiers":["CVE-2026-88836"]},"retained":false,"historicalAffected":[]}],"coverage":[]}