What’s Vulnerable › Products

gnuwget wget vulnerabilities

25 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your gnuwget wget version is affected

Latest gnuwget wget vulnerabilities

• CVE-2026-16599 — Denial of Service in GNU wget (CVSS 5.1)
• CVE-2026-58472 — GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding (CVSS 7.1)
• CVE-2026-58471 — GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c (CVSS 7.1)
• CVE-2026-58470 — GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing (CVSS 5.3)
• CVE-2026-58469 — GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing (CVSS 7.5)
• CVE-2024-10524 — GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs (CVSS 6.5)
• CVE-2024-38428 — (CVSS 9.1)
• CVE-2021-31879 — (CVSS 6.1)
• CVE-2019-5953 — (CVSS 9.8)
• CVE-2018-20483 — (CVSS 7.8)
• CVE-2018-0494 — (CVSS 6.5)
• CVE-2017-13090 — GNU Wget: heap overflow in HTTP protocol handling (CVSS 8.8)
• CVE-2017-13089 — GNU Wget: stack overflow in HTTP protocol handling (CVSS 8.8)
• CVE-2017-6508 — (CVSS 6.1)
• CVE-2016-7098 — (CVSS 8.1)
• CVE-2016-4971 — (CVSS 8.8)
• CVE-2014-4877 — (CVSS 9.3)
• CVE-2010-2252 — (CVSS 6.8)
• CVE-2009-3490 — (CVSS 6.8)
• CVE-2006-6719 — (CVSS 5.0)
• CVE-2004-1488 — (CVSS 5.0)
• CVE-2004-1487 — (CVSS 5.0)
• CVE-2004-2014 — (CVSS 2.6)
• CVE-2002-1344 — (CVSS 5.0)
• CVE-1999-0402 — (CVSS 5.0)