A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a specially crafted URL, which, upon user interaction with wget2, can lead to memory corruption. This can cause the application to crash and potentially allow for further malicious activities.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20038-1 advisory.

    Changes in wget2:

    - Update to release 2.2.1
      * Fix file overwrite issue with metalink [CVE-2025-69194 bsc#1255728]
      * Fix remote buffer overflow in get_local_filename_real()         [CVE-2025-69195 bsc#1255729]
      * Fix a redirect/mirror regression from 400713ca
      * Use the local system timestamp when requested via
        --no-use-server-timestamps
      * Prevent file truncation with --no-clobber
      * Improve messages about why URLs are not being followed
      * Fix metalink with -O/--output-document
      * Fix sorting of metalink mirrors by priority
      * Add --show-progress to improve backwards compatibility to wget
      * Fix buffer overflow in wget_iri_clone() after         wget_iri_set_scheme()
      * Allow 'no_' prefix in config options
      * Use libnghttp2 for HTTP/2 testing
      * Set exit status to 8 on 403 response code
      * Fix convert-links
      * Fix --server-response for HTTP/1.1

    - Update to release 2.2.0
      * Don't truncate file when -c and -O are combined
      * Don't log URI userinfo to logs
      * Fix downloading multiple files via HTTP/2
      * Support connecting with HTTP/1.0 proxies
      * Ignore 1xx HTTP responses for HTTP/1.1
      * Disable TCP Fast Open by default
      * Fix segfault when OCSP response is missing
      * Add libproxy support

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-28b0f7bd35 advisory.

    New version 2.2.1

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-de1a91fe79 advisory.

    New version 2.2.1

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename     sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction     options are active. A remote attacker can exploit this by providing a specially crafted URL, which, upon     user interaction with wget2, can lead to memory corruption. This can cause the application to crash and     potentially allow for further malicious activities. (CVE-2025-69195)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
287968	openSUSE 16 Security Update : wget2 (openSUSE-SU-2026:20038-1)	Nessus	SuSE Local Security Checks	high
282537	Fedora 42 : wget2 (2026-28b0f7bd35)	Nessus	Fedora Local Security Checks	high
282445	Fedora 43 : wget2 (2026-de1a91fe79)	Nessus	Fedora Local Security Checks	critical
281492	Linux Distros Unpatched Vulnerability : CVE-2025-69195	Nessus	Misc.	high

Detections

Analytics

CVE-2025-69195

high

Tenable Plugins

high

high

critical

high