ROOT-OS-DEBIAN-13-CVE-2026-15146 CVE-2026-15146 in wget - Patched by Root

Root has patched CVE-2026-15146 in the wget package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-15146 CVE-2026-15146 in wget - Patched by Root

Root has patched CVE-2026-15146 in the wget package for Root:Debian:11. Multiple fixed versions available...

wget-1.25.0-4.1 on GA media (moderate)

wget-1.25.0-4.1 on GA media Announcement ID: openSUSE-SU-2026:11303-1 Rating: moderate Cross-References: CVE-2026-15146 CVSS scores: CVE-2026-15146 SUSE : 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2026-15146 SUSE : 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N...

Linux Distros Unpatched Vulnerability : CVE-2026-15146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP server that...

CVE-2026-15146

creationtimestamp| type| source ---|---|--- 2026-07-10 19:52:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqcwdstqlc27 2026-07-11 01:08:36+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdhzm6kuv2f 2026-08-11 20:01:12+00:00| seen|...

GNU Wget enables SSRF via unvalidated FTP PASV IPs

Overview GNU Wget, versions 1.25.0 and earlier, contains a server-side request forgery SSRF vulnerability in its implementation of FTP passive mode. Because Wget does not properly validate IP addresses obtained from PASV responses, an attacker-controlled FTP endpoint can redirect the client’s...