Open Source wget

Name: Open Source wget
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical1high1medium0low

updated 2026-10-28

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-69194US	critical9.8	0.79% (56th)	Exploit	no fix	2026-01-09	≤ wget2 <2.2.1
CVE-2021-31879US	medium6.1	1.10% (66th)	—	no fix	2021-04-29	≤ 1.21.1
CVE-2024-10524US	—	1.07% (65th)	—	1.25.0	2024-11-19	< 1.25.0
CVE-2024-38428US	critical9.1	0.67% (52nd)	—	no fix	2024-06-16	≤ 1.24.5
CVE-2025-69195US	high8.8	0.35% (28th)	—	no fix	2026-01-09	≤ wget2 <2.2.1
CVE-2026-58470US	—	0.25% (16th)	—	no fix	2026-07-07	≤ 1.25.0
CVE-2026-94574US	—	0.18% (8th)	—	no fix	2026-09-22	≤ 1.21.4
CVE-2026-15146US	—	0.17% (6th)	—	commit 4f85853f641863d5915786a8413e1a213726a62b	2026-07-10	2 versions
CVE-2026-1858US	—	0.15% (5th)	—	2.2.2	2026-04-29	< 2.2.2

The flaw types (CWEs) most of these CVEs share.

CWE-115Misinterpretation of Input1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-281Improper Preservation of Permissions1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-436Interpretation Conflict1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.