Threats affecting pkg:deb/gnu/wget2

CVE-2026-1858 is a medium severity vulnerability in GNU wget2 where the software improperly validates server certificates. Specifically, wget2 accepts TLS server certificates that have incorrect Key Usage (KU) or Extended Key Usage (EKU) attributes. This flaw could allow an attacker who has compromised a certificate issued for a different purpose to reuse it for TLS server authentication, potentially undermining the security of TLS connections. No official patch or remediation guidance is currently available from the vendor. The vulnerability has not been reported as exploited in the wild.