Even wget can (and does) have critical vulnerabilities:

https://community.rapid7.com/community/metasploit/blog/2014/...