Skip to content
OpenAdvisories
High WID-SEC-2025-2935 2 CVEs

wget: Mehrere Schwachstellen

Published Dec 29, 2025 · Updated Jan 12, 2026 · Revision 5 · de-DE

Vendor: SUSE Product: openSUSE Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in wget ausnutzen, um Dateien zu manipulieren, und um einen Denial of Service Angriff durchzuführen.

Product

Wget ist ein Kommandozeilenprogramm zum Herunterladen von Dateien aus dem Internet.

Vulnerabilities 2

  • High 8.8
    CVE-2025-69194 Public exploit

    Wget2: arbitrary file write via metalink path traversal in gnu wget2

    A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the s…

    wget wget2 wget2 Debian Ubuntu Azure Linux
  • High 7.6
    CVE-2025-69195

    Wget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urls

    A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit…

    wget wget2 wget2 Debian Ubuntu Azure Linux

Revision history

  1. #5

    Neue Updates von openSUSE aufgenommen

  2. #4

    Referenz(en) aufgenommen: EUVD-2026-1781, EUVD-2026-1777

  3. #3

    Neue Updates von openSUSE aufgenommen

  4. #2

    Neues Update (v2.2.1) aufgenommen

  5. #1

    Initiale Fassung

References