There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the
    file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T
    leads to null pointer dereference. Local access is required to approach this attack. The exploit has been
    disclosed to the public and may be used. The name of the patch is
    83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue.
    (CVE-2026-76014)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 BusyBox 及之前版本 1.30.1中发现一个漏洞。此漏洞会影响 FEATURE_WGET_TIMEOUT Handler 组件的 networking/wget.c 文件中的未知代码。参数 -T 的这种操控会导致空指针取消引用。需要本地访问权限才能进行此攻击。该漏洞已被公开并可被使用。修补程序的名称为 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff。应应用修补程序以修复此问题。
    (CVE-2026-76014)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 BusyBox 1.30.1中發現弱點，最高可達 。此弱點會影響元件 FEATURE_WGET_TIMEOUT Handler 之 networking/wget.c 檔案的未知程式碼。引數 -T 的這種操作會導致 null 指標解除參照。需要本機存取權才能處理此攻擊。攻擊程式已向公眾披露且可能會遭到利用。修補程式的名稱是 83a40bf7a93c8ac093d33ab45222dd5b9eb57ff。應套用修補程式來修復此問題。
    (CVE-2026-76014)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 1.30.1 までの BusyBox で、脆弱性が見つかっています。この脆弱性は、コンポーネント FEATURE_WGET_TIMEOUT ハンドラーの networking/wget.c ファイルの不明なコードに影響を与えます。引数 -T のそのような操作は、null ポインターデリファレンスを引き起こします。この攻撃にアプローチするには、ローカルアクセスが必要です。このエクスプロイトは一般に公開されており、使用される可能性があります。パッチの名前は、83a40bf7a93c8ac093d33ab452222dd5b9eb57ff です。この問題を修正するには、パッチを適用する必要があります。
    (CVE-2026-76014)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the     file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T     leads to null pointer dereference. Local access is required to approach this attack. The exploit has been     disclosed to the public and may be used. The name of the patch is     83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this     issue.(CVE-2026-76014)

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)

    A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)

    A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to     cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the     file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T     leads to null pointer dereference. Local access is required to approach this attack. The exploit has been     disclosed to the public and may be used. The name of the patch is     83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue.
    (CVE-2026-76014)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the     file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T     leads to null pointer dereference. Local access is required to approach this attack. The exploit has been     disclosed to the public and may be used. The name of the patch is     83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this     issue.(CVE-2026-76014)

    A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)

    A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)

    A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a     Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)

    A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to     cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
476077	Echo: busybox: security update to 1:1.38.0-3+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	10/16/2026	10/19/2026	medium
476077	Echo: busybox: security update to 1:1.38.0-3+e1	Tenable Cloud Security	Echo Local Security Checks	10/16/2026	10/19/2026	medium
338078	Linux Distros 未修补的漏洞：CVE-2026-76014	Nessus	Misc.	8/19/2026	11/11/2026	medium
338078	Linux Distros 未修補弱點：CVE-2026-76014	Nessus	Misc.	8/19/2026	11/11/2026	medium
338078	Linux Distros のパッチ未適用の脆弱性: CVE-2026-76014	Nessus	Misc.	8/19/2026	11/11/2026	medium
376772	EulerOS 2.0 SP12 : busybox (EulerOS-SA-2026-4470)	Nessus	Huawei Local Security Checks	11/6/2026	11/6/2026	medium
338078	Linux Distros Unpatched Vulnerability : CVE-2026-76014	Nessus	Misc.	8/19/2026	11/11/2026	medium
376754	EulerOS 2.0 SP12 : busybox (EulerOS-SA-2026-4393)	Nessus	Huawei Local Security Checks	11/6/2026	11/6/2026	medium

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

medium

medium

medium