What’s Vulnerable › Products

gnu wget2 vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your gnu wget2 version is affected

Latest gnu wget2 vulnerabilities

• CVE-2026-1858 — wget2 Improper Certificate Validation (CVSS 4.8)
• CVE-2025-69195 — Wget2: gnu wget2: memory corruption and crash via filename sanitization logic with attacker-controlled urls (CVSS 8.8)
• CVE-2025-69194 — Wget2: arbitrary file write via metalink path traversal in gnu wget2 (CVSS 9.8)