[ Vendor · 19 CVEs ]
Wazuh
CVEs affecting Wazuh published in the last 30 days, plus any Wazuh CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-93346 | 13 Oct 2026 | CVSS 5.3 | wazuh-managerWazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers to bypass max_login_attempts… | |
| CVE-2026-93347 | 13 Oct 2026 | CVSS 4.9 | wazuh-managerWazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read… | |
| CVE-2026-74043 | 13 Oct 2026 | CVSS 9.0 | wazuh-managerWazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload_decoder_file that allows… | |
| CVE-2026-74045 | 13 Oct 2026 | CVSS 7.1 | wazuh-managerWazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bounded by… | |
| CVE-2026-74047 | 13 Oct 2026 | CVSS 6.5 | wazuh-managerWazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the… | |
| CVE-2026-74034 | 13 Oct 2026 | CVSS 7.5 | wazuh-managerWazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with… | |
| CVE-2026-74035 | 13 Oct 2026 | CVSS 7.2 | wazuh-managerWazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places the reserved user guard and… | |
| CVE-2026-74036 | 13 Oct 2026 | CVSS 7.2 | wazuh-agentWazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than… | |
| CVE-2026-74037 | 13 Oct 2026 | CVSS 7.2 | wazuh-managerWazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the… | |
| CVE-2026-74040 | 13 Oct 2026 | CVSS 9.1 | wazuh-managerWazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.process_files_from_worker allowing a… | |
| CVE-2026-74041 | 13 Oct 2026 | CVSS 9.1 | wazuh-managerWazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command… | |
| CVE-2026-74030 | 13 Oct 2026 | CVSS 4.9 | wazuh-agentWazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that allows a manager-controlled policy… | |
| CVE-2026-74031 | 13 Oct 2026 | CVSS 6.5 | wazuh-managerWazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file helpers that allows malicious… | |
| CVE-2026-74032 | 13 Oct 2026 | CVSS 4.3 | wazuh-managerWazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog… | |
| CVE-2026-74033 | 13 Oct 2026 | CVSS 6.1 | wazuh-managerWazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB list handlers that allows… | |
| CVE-2026-71540 | 24 Sep 2026 | CVSS 7.5 | wazuhWazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.9.0 until 4.14.7… | |
| CVE-2026-61811 | 24 Sep 2026 | CVSS 6.5 | wazuhWazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. From 3.8.0 until 4.14.7, the… | |
| CVE-2025-24016 | 10 Feb 2025 | CVSS 9.9 | Wazuh Server Deserialization of Untrusted DataWazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1… | Exploited |
| CVE-2025-24016 | 10 Feb 2025 | CVSS 9.9 | Wazuh Server Deserialization of Untrusted DataWazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1… | Exploited |