JLSEC-2026-119 Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary...

🗓️ 15 Apr 2026 20:29:47Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Wget-based apps using shorthand URLs and URL credentials are vulnerable to arbitrary host access.

Reporter	Title	Published	Views	Family All 85
AlpineLinux	CVE-2024-10524	19 Nov 202414:23	–	alpinelinux
CBLMariner	CVE-2024-10524 affecting package wget for versions less than 1.21.2-4	26 Nov 202410:39	–	cbl_mariner
Circl	CVE-2024-10524	19 Nov 202414:35	–	circl
CNNVD	GNU Wget 代码问题漏洞	19 Nov 202400:00	–	cnnvd
CNVD	GNU Wget Code Problem Vulnerability	21 Nov 202400:00	–	cnvd
CVE	CVE-2024-10524	19 Nov 202414:23	–	cve
Cvelist	CVE-2024-10524 GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs	19 Nov 202414:23	–	cvelist
Debian CVE	CVE-2024-10524	19 Nov 202414:23	–	debiancve
Tenable Nessus	EulerOS 2.0 SP12 : wget (EulerOS-SA-2025-1309)	20 Mar 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : wget (EulerOS-SA-2025-1310)	20 Mar 202500:00	–	nessus

Source	Link
git	www.git.savannah.gnu.org/cgit/wget.git/commit/
jfrog	www.jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability/
seclists	www.seclists.org/oss-sec/2024/q4/107
openwall	www.openwall.com/lists/oss-security/2024/11/18/6
security	www.security.netapp.com/advisory/ntap-20250321-0007/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-10524
jfrog	www.jfrog.com/blog/cve-2024-10524-wget-zero-day-vulnerability
security	www.security.netapp.com/advisory/ntap-20250321-0007
github	www.github.com/advisories/GHSA-mqrm-h2pw-9j9r

15 Apr 2026 21:01Current

7.2High risk

Vulners AI Score7.2

CVSS 3.16.5

EPSS0.00592

shorthand URLs credentials in URL arbitrary host access remote resource security vulnerability