gnuwget wget
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-58472 | ≤ 1.25.0 | GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding | MEDIUM 6.0 | 0.4 % | ||
| CVE-2026-58471 | ≤ 1.25.0 | GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c | MEDIUM 6.0 | 0.4 % | ||
| CVE-2026-58470 | ≤ 1.25.0 | GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-58469 | ≤ 1.25.0 | GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing | HIGH 8.7 | 0.5 % |