Linuxsecurity Critical Wget Vulnerabilities Affect Multiple Ubuntu Versions
Article Content
- •Wget vulnerabilities affect multiple Ubuntu LTS versions, including 14.04 to 26.04.
- •CVE-2024-38428 allows attackers to redirect users to unintended hosts.
- •CVE-2026-58469 and CVE-2026-58471 can lead to denial of service or code execution.
Multiple vulnerabilities were discovered in Wget, affecting Ubuntu versions 14.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS, and 26.04 LTS. CVE-2024-38428 allows remote attackers to trick users into connecting to unintended hosts via URL manipulation. CVE-2026-58469 and CVE-2026-58471 can lead to denial of service or arbitrary code execution due to mishandling of Metalink documents and character set conversion, respectively. CVE-2026-58470 involves an integer overflow from incorrect handling of Content-Range header values, potentially causing download desynchronization. The vulnerabilities were published on July 7, 2026, and are critical for users of affected Ubuntu versions. Users are advised to update their systems to mitigate these risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track Ubuntu and CVE-2024-38428 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…