What is CVE-2026-58471?

CVE-2026-58471 is a medium-severity vulnerability in Gnuwget Wget, classified under Heap-based Buffer Overflow. CVSS score: 5.9/10. Published 2026-07-07.

How severe is CVE-2026-58471?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Buffer overflow in Gnuwget Wget

CVE-2026-58471

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename r…

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H.

Affected products

Gnuwget Wget — versions 0, c2640fe5171c59f87c58dc9fcb195b2d18b010ee

Weakness classification (CWE)

CWE-122 — Heap-based Buffer Overflow

References

disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-58471?: CVE-2026-58471 is a medium-severity vulnerability in Gnuwget Wget, classified under Heap-based Buffer Overflow. CVSS score: 5.9/10. Published 2026-07-07.
How severe is CVE-2026-58471?: Medium severity. CVSS v3 base score is 5.9 out of 10.