What is CVE-2026-58472?

CVE-2026-58472 is a medium-severity vulnerability in Gnuwget Wget, classified under Integer Overflow or Wraparound. CVSS score: 5.9/10. Published 2026-07-07.

How severe is CVE-2026-58472?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Integer overflow in Gnuwget Wget

CVE-2026-58472

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML att…

Vulnerability class: Integer Overflow

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H.

Affected products

Gnuwget Wget — versions 0, dd692d9cea5335b181d877ae917fe6e75587a812

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-58472?: CVE-2026-58472 is a medium-severity vulnerability in Gnuwget Wget, classified under Integer Overflow or Wraparound. CVSS score: 5.9/10. Published 2026-07-07.
How severe is CVE-2026-58472?: Medium severity. CVSS v3 base score is 5.9 out of 10.