CVE-2026-58469 vulnerabilities

Vulnerabilities for packages: wget...

CVE-2026-58472 vulnerabilities

Vulnerabilities for packages: wget...

GHSA-VV88-699V-W5RH vulnerabilities

Vulnerabilities for packages: wget...

CVE-2026-58471 vulnerabilities

Vulnerabilities for packages: wget...

GHSA-FXF9-RXPJ-26GX vulnerabilities

Vulnerabilities for packages: wget...

GHSA-332R-8PMF-8M9P vulnerabilities

Vulnerabilities for packages: wget...

CVE-2026-58470 vulnerabilities

Vulnerabilities for packages: wget...

ROOT-OS-UBUNTU-2204-CVE-2021-31879 CVE-2021-31879 in rootio-wget - Patched by Root

Root has patched CVE-2021-31879 in the rootio-wget package for Root:Ubuntu:22.04. Multiple fixed versions available...

SUSE SLED15 / SLES15 Security Update : wget (SUSE-SU-2026:3337-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3337-1 advisory. This update for wget fixes the following issue - Fix metalink regression from CVE-2026-58469 fix bsc1272219, bsc1271033...

Security update for wget

This update for wget fixes the following issue Fix metalink regression from CVE-2026-58469 fix bsc1272219, bsc1271033. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command list...

SUSE-SU-2026:3337-1 Security update for wget

This update for wget fixes the following issue - Fix metalink regression from CVE-2026-58469 fix bsc1272219, bsc1271033...

MGASA-2026-0300 Updated wget packages fix security vulnerabilities

Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...

Updated wget packages fix security vulnerabilities

Updated wget packages fix security vulnerabilities: -CVE-2026-58469 Wget incorrectly handled Metalink documents containing a whitespace-only URL. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Mageia 9 and Mageia 10. -CVE-2026-58470 : Wget...

[SECURITY] Fedora 43 Update: wget1-1.25.0-3.fc43

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

SUSE SLES12 Security Update : wget (SUSE-SU-2026:3205-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3205-1 advisory. This update for wget fixes the following issues - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side reques...

SUSE-SU-2026:3206-1 Security update for wget

This update for wget fixes the following issues: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffer underread bsc1271033. - CVE-2026-58470...

SUSE SLED15 / SLES15 Security Update : wget (SUSE-SU-2026:3148-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3148-1 advisory. - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery...

SUSE-SU-2026:3148-1 Security update for wget

This update for wget fixes the following issues: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery bsc1271320. - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffer underread bsc1271033. - CVE-2026-58470...

CVE-2026-58469

A flaw was found in GNU Wget. A malicious server could exploit a heap buffer underread vulnerability by providing a specially crafted Metalink document containing a URL with only whitespace characters. This could lead to memory corruption and abnormal program behavior, potentially causing a denia...

Fedora 44 : wget1 (2026-1b91a2f126)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1b91a2f126 advisory. Fix for CVE-2026-15146, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472 Tenable has extracted the preceding description block directly from the Fedor...