TI-2025-17783 CVE-2025-24016 · GHSA-hcrc-79hj-m3qh
Remote code execution in Wazuh server
Priority CRITICAL 100KEV
Wazuh is a free and open source platform used for threat prevention, detection, and response.
Wazuh
Records102All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high46CVSS 7.0–8.9
Exploited now
Wazuh records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
73 records in Wazuh · all components
TI-2026-23722 CVE-2026-30893
Path traversal in wazuh
Priority HIGH 76
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2024-01157 CVE-2024-1243
Remote code execution and local privilege escalation in Wazuh Windows agent via NetNTLMv2 hash theft
Priority HIGH 76
Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path.
TI-2026-22556 CVE-2026-28221
Wazuh: Pre-auth stack-based buffer overflow in wazuh-remoted print_hex_string() due to signed char promotion on x86_64
Priority HIGH 75
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-35598 CVE-2026-48162
Wazuh: cluster peer can read arbitrary master files and forge offline REST API…
Priority HIGH 74
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-35467 CVE-2026-48024
Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager
Priority HIGH 74
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-22555 CVE-2026-28220
Deserialization of untrusted data in wazuh
Priority HIGH 74
Wazuh is a free and open source platform used for threat prevention, detection, and response.
Priority HIGH 74
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-20836 CVE-2026-25769
Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization
Priority HIGH 74
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2025-21537 CVE-2025-30201
Wazuh NetNTLMv2 Hash Theft In Multiple Centralized Configuration Capabilities
Priority HIGH 74
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2023-27488 CVE-2023-50260
Wazuh's vulnerability in host_deny AR script allows arbitrary command execution
Priority HIGH 73
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-33533 CVE-2026-45798
Stack-based buffer overflow in wazuh
Priority HIGH 72
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-32776 CVE-2026-44901
Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability
Priority HIGH 72
Wazuh is a free and open source platform used for threat prevention, detection, and response.
Priority HIGH 72
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-26451 CVE-2026-34150
Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing
Priority HIGH 72
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-20838 CVE-2026-25771
Wazuh Vulnerable to Denial of Service via Synchronous I/O Blocking in Asynchronous Authentication Middleware
Priority HIGH 72
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-39013 CVE-2026-54083
Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion
Priority HIGH 70
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.
Priority HIGH 70
Wazuh is a free and open source platform used for threat prevention, detection, and response.
Priority HIGH 70
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2025-38973 CVE-2025-62790
Wazuh vulnerable to NULL pointer dereference in fim_fetch_attributes_state
Priority HIGH 70
Wazuh is a free and open source platform used for threat prevention, detection, and response.
Priority HIGH 70
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2025-14243 CVE-2025-15615 · GHSA-36r3-mw6j-7ffc
Wazuh Manager authd service Improper SSL/TLS Renegotiation Handling leading to Denial of Service
Priority HIGH 70
Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of servi…
Priority HIGH 69
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2026-30023 CVE-2026-41424
Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint
Priority HIGH 69
Wazuh is a free and open source platform used for threat prevention, detection, and response.
TI-2025-14245 CVE-2025-15617 · GHSA-r33m-965m-8chx
Wazuh GitHub Actions Workflow Exposure of Sensitive Credentials
Priority HIGH 69
Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts.