CVE-2026-1858 in wget2información

Resumen

por MITRE • 2026-04-30

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

Tenable

Reservar

2026-02-03

Divulgación

2026-04-30

Moderación

aceptado

Artículo

VDB-360223

CPE

listo

EPSS

0.00011

KEV

no

Actividades

muy bajo

Fuentes

Interested in the pricing of exploits?

See the underground prices here!