VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Apr 29, 2026· Updated May 5, 2026

CVE-2026-1858

CVE-2026-1858

Description

wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • GNU/Wget2
    cpe:2.3:a:gnu:wget2:*:*:*:*:*:*:*:*
    Range: <=2.2.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.