PatchTheCVEwget vulnerabilities and fixes
Recent CVEs affecting wget, with upgrade or downgrade steps. 4 tracked.
wget has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-07-07. Highest priority: CVE-2026-58469 (score 42/100).
- CVE-2026-58469 HIGH 7.5 UPGRADE GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_
- CVE-2026-58471 MEDIUM 5.9 UPGRADE GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert
- CVE-2026-58472 MEDIUM 5.9 UPGRADE GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_qu
- CVE-2026-58470 MEDIUM 5.3 UPGRADE GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_cont
FAQ
How do I fix wget vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wget being exploited right now?
None of the tracked wget CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wget CVE should I patch first?
CVE-2026-58469 currently ranks highest (42/100): GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_.