EUVD-2026-65494

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...

CVE-2026-16599

GNU wget has a denial-of-service vulnerability in its FTP OPIE/S-KEY authentication code. The server-supplied sequence number from an FTP challenge line is used directly as an iteration count for an MD5 key-derivation loop with no upper-bound validation. A malicious FTP server—or a network attack...

CVE-2026-16599 Denial of Service in GNU wget

GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A malicious FTP server or a network...