Read the docs
Red Hat Security Advisory

RHSA-2026:62144

wget security, bug fix, and enhancement update

Released 2026-09-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2026-42073 CVE-2026-58469 · GHSA-fxf9-rxpj-26gx

GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing

Priority MEDIUM 44

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption b…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00493 Published 2026-07-07 Fixed CWE-125
TI-2026-42076 CVE-2026-58472 · GHSA-332r-8pmf-8m9p

GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding

Priority LOW 27

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying…

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.0039 Published 2026-07-07 Partial fix CWE-190
TI-2026-42075 CVE-2026-58471 · GHSA-vv88-699v-w5rh

GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c

Priority LOW 27

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-…

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.0039 Published 2026-07-07 Partial fix CWE-122