Skip to content
OpenAdvisories

Vendor

GNU wget

1 known vulnerabilities.

Products

Wget 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-15146

    CVE-2026-15146

    GNU Wget versions < 1.25.0+4f85853f64 do not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP server that redirects to an FTP URL, can exploit this behavior to redirect Wget’s dat…

    GNU wget Wget wget wget Debian Ubuntu