ROOT-OS-ALPINE-323-CVE-2026-58469 CVE-2026-58469 in wget - Patched by Root

Root has patched CVE-2026-58469 in the wget package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-58469 CVE-2026-58469 in wget - Patched by Root

Root has patched CVE-2026-58469 in the wget package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-58469 CVE-2026-58469 in wget - Patched by Root

Root has patched CVE-2026-58469 in the wget package for Root:Debian:11. Multiple fixed versions available...

Amazon Linux 2023 : wget (ALAS2023-2026-2047)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2047 advisory. GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function within src/metalink.c that allows a malicious server to trigger memo...

Important: wget

Issue Overview: GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL...

CVE-2026-58469 vulnerabilities

Vulnerabilities for packages: wget...

SUSE SLED15 / SLES15 Security Update : wget (SUSE-SU-2026:3337-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3337-1 advisory. This update for wget fixes the following issue - Fix metalink regression from CVE-2026-58469 fix bsc1272219, bsc1271033...

SUSE-SU-2026:3337-1 Security update for wget

This update for wget fixes the following issue - Fix metalink regression from CVE-2026-58469 fix bsc1272219, bsc1271033...

SUSE CVE-2026-58469

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cau...

CVE-2026-58469

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the cleanmetalinkstring function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cau...

CVE-2026-58469

GNU Wget prior to 1.25.0 is affected by a heap buffer underread in clean_metalink_string() inside src/metalink.c when parsing a Metalink URL that is whitespace-only. The issue can lead to memory corruption and abnormal program behavior; the CVE notes multiple CVSS measurements with high impact (a...