GNU wget

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

GNU wget records in CISA KEV

No GNU wget vulnerabilities are listed in CISA KEV.

1 record

TI-2026-12757 CVE-2026-15146 · GHSA-77jw-q7w3-q2hw

LOW 26

GNU Wget versions < 1.25.0+4f85853f64 do not validate the IP address provided by an FTP PASV response while operating in FTP passive mode.

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.00166 Published 2026-07-10 Partial fix