Skip to content
OpenAdvisories

Product · GNU

wget

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-16599

    Denial of Service in GNU wget

    GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication functionality. The server-supplied sequence number from the FTP challenge line is used as an iteration count for an MD5 key-derivation loop without any upper bound validation. A …

    GNU wget wget wget Debian Ubuntu
  • Medium 6.5
    CVE-2024-10524

    GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs

    Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.

    GNU wget wget wget Debian Ubuntu Alpine