Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued for a different purpose, they may be able to reuse it for TLS server authentication.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-1858 Certificate Validation Bypass in wget2 via Incorrect Key Usage and Extended Key Usage https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1858
Post summary
The post simply lists CVE‑2026‑1858 with a brief technical descriptor and a link to a vulnerability database, and does not provide additional details such as a PoC, exploit, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gnu | wget2 | - | - | - |