A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the
    file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T
    leads to null pointer dereference. Local access is required to approach this attack. The exploit has been
    disclosed to the public and may be used. The name of the patch is
    83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue.
    (CVE-2026-76014)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the     file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T     leads to null pointer dereference. Local access is required to approach this attack. The exploit has been     disclosed to the public and may be used. The name of the patch is     83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue.
    (CVE-2026-76014)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
476077	Echo: busybox: security update to 1:1.38.0-3+e1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
476077	Echo: busybox: security update to 1:1.38.0-3+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
338078	Linux Distros Unpatched Vulnerability : CVE-2026-76014	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-76014

medium

Tenable Plugins

medium

medium

medium