Back Linuxsecurity

SUSE Linux Enterprise Micro Moderate wget CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 8, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

## This update for wget fixes the following issue: * CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4053=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.20.3-150000.3.40.1 * wget-debuginfo-1.20.3-150000.3.40.1 * wget-1.20.3-150000.3.40.1

* CVE-2026-16599 ( SUSE ): 5.1

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

* CVE-2026-16599 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

* CVE-2026-16599 ( NVD ): 5.1

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* SUSE Linux Enterprise Micro 5.5

An update that solves one vulnerability can now be installed.

Announcement ID: SUSE-SU-2026:4053-1 Release Date: 2026-09-07T15:47:31Z Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Moderate Vulnerability in wget Affects SUSE Systems A moderate vulnerability identified as CVE-2026-16599 has been discovered in wget, allowing for a server-controlled unbounded MD5 loop in FTP OPIE. This issue affects multiple SUSE Linux systems, including SUSE Linux Enterprise Server 15 SP7 and SUSE Linux Enterprise Micro 5.5. The vulnerability was published on August 25, 2026, and has been assigned a CVSS score of 4.0. Users are advised to apply the latest patches using SUSE's recommended installation methods. The patches are available for various architectures including aarch64, ppc64le, s390x, and x86_64. Both articles emphasize the importance of keeping systems updated to mitigate this vulnerability. The patches were released on September 7, 2026, shortly before the articles were published. 4 sources 46

Extracted Entities

CVEs (1)

CVE-2026-16599

Platforms (1)

SUSE Linux Enterprise Micro