Wget2 (Gnu) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-04-29. Vendor: Gnu.

CVEs of Wget2

• CVE-2026-1858 - CVSS 4.8 (medium), 2026-04-29: wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated…
• CVE-2025-69195 - CVSS 8.8 (high), 2026-01-09: A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing…
• CVE-2025-69194 - CVSS 9.8 (critical), 2026-01-09: A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink…