Moderate Vulnerability in wget Affects SUSE Systems

A moderate vulnerability identified as CVE-2026-16599 has been discovered in wget, allowing for a server-controlled unbounded MD5 loop in FTP OPIE. This issue affects multiple SUSE Linux systems, including SUSE Linux Enterprise Server 15 SP7 and SUSE Linux Enterprise Micro 5.5. The vulnerability was published on August 25, 2026, and has been assigned a CVSS score of 4.0. Users are advised to apply the latest patches using SUSE's recommended installation methods. The patches are available for various architectures including aarch64, ppc64le, s390x, and x86_64. Both articles emphasize the importance of keeping systems updated to mitigate this vulnerability. The patches were released on September 7, 2026, shortly before the articles were published.

Key Points: • CVE-2026-16599 affects wget in SUSE systems. • The vulnerability allows for a server-controlled unbounded MD5 loop. • Patches are available for multiple SUSE Linux architectures.