Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.1%	CVE-2026-94574Wget · Uncontrolled Search Path Element High7.8EPSS 0.1%2026-09-22CVE Database V5CVE-2026-94574 A local cross-user code execution vulnerability exists in GNU wget (Windows builds from eternallybored.org) due to a hardcoded configuration file path (C:\msys64) that is writable by unprivileged users, allowing for arbitrary code execution via the use_askpass directive, potentially allowing local privilege escalation. EPSS 0.1%Vulnerability GNU Wget (Windows Builds)#cwe-427	CVE Database V5	2026-09-22

Showing 1–1 of 1 result