Product by GNU
GNU Wget
25 known vulnerabilities in GNU Wget (GNU), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2017-13089 | GNU Wget: stack overflow in HTTP protocol handling | 8.8 | |
| High | CVE-2016-4971 | GNU Wget: security vulnerability | 8.8 | |
| High | CVE-2017-13090 | GNU Wget: heap overflow in HTTP protocol handling | 8.8 | |
| Critical | CVE-2019-5953 | The GNU Projec GNU Wget: Buffer Overflow | 9.8 | |
| High | CVE-2016-7098 | GNU Wget: Race Condition | 8.1 | |
| Medium | CVE-2018-0494 | WGet: security vulnerability | 6.5 | |
| Critical | CVE-2024-38428 | GNU Wget: security vulnerability | 9.1 | |
| Medium | CVE-2017-6508 | GNU Wget: CRLF Injection | 6.1 | |
| High | CVE-2026-58469 | GNU Wget 1.25.0 Heap Buffer Underread via Metalink URL Parsing | 7.5 | |
| Not rated | CVE-2014-4877 | GNU Wget: Path Traversal | — | |
| Not rated | CVE-2004-1488 | GNU Wget: Code Execution | — | |
| Medium | CVE-2024-10524 | GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs | 6.5 | |
| Not rated | CVE-2006-6719 | GNU Wget: Denial of Service | — | |
| Not rated | CVE-2002-1344 | GNU Wget: Path Traversal | — | |
| Not rated | CVE-2010-2252 | GNU Wget: Code Execution | — | |
| Medium | CVE-2021-31879 | GNU Wget: security vulnerability | 6.1 | |
| Not rated | CVE-2009-3490 | GNU Wget: security vulnerability | — | |
| Medium | CVE-2026-16599 | Denial of Service in GNU wget | — | |
| High | CVE-2018-20483 | GNU Wget: Information Disclosure | 7.8 | |
| High | CVE-2026-58472 | GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding | 5.9 | |
| High | CVE-2026-58471 | GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c | 5.9 | |
| Medium | CVE-2026-58470 | GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing | 5.3 | |
| Not rated | CVE-2004-1487 | GNU Wget: security vulnerability | — | |
| Not rated | CVE-1999-0402 | GNU Wget: security vulnerability | — | |
| Not rated | CVE-2004-2014 | GNU Wget: security vulnerability | — |