ROOT-OS-DEBIAN-12-CVE-2026-58472 CVE-2026-58472 in wget - Patched by Root

Root has patched CVE-2026-58472 in the wget package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-58472 CVE-2026-58472 in wget - Patched by Root

Root has patched CVE-2026-58472 in the wget package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-58472 CVE-2026-58472 in wget - Patched by Root

Root has patched CVE-2026-58472 in the wget package for Root:Alpine:3.22. Multiple fixed versions available...

Oracle Linux 10 : ELSA-2026-62142-0: / wget (ELSA-2026-621420)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621420 advisory. - Fix CVE-2026-58471: buffer overflow in convertfname Resolves: RHEL-194518 Tenable has extracted the preceding description block directly from the...

ROOT-OS-DEBIAN-13-CVE-2026-58472 CVE-2026-58472 in wget - Patched by Root

Root has patched CVE-2026-58472 in the wget package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-58472 CVE-2026-58472 in wget - Patched by Root

Root has patched CVE-2026-58472 in the wget package for Root:Debian:11. Multiple fixed versions available...

USN-8543-2: Wget regression

USN-8543-1 fixed vulnerabilities in Wget. The update for CVE-2026-58472 was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Wget mishandled semicolons in the userinfo subcomponent of ...

USN-8543-2 wget regression

USN-8543-1 fixed vulnerabilities in Wget. The update for CVE-2026-58472 was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Wget mishandled semicolons in the userinfo subcomponent of ...

CVE-2026-58472 vulnerabilities

Vulnerabilities for packages: wget...

SUSE CVE-2026-58472

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity...

CVE-2026-58472

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity...